JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:67c:289c:4::77

2001:67c:289c:4::77 was found in our database!

This IP was reported 171 times. Confidence of Abuse is 18%: ?

18%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Foreningen for digitala fri- och rattigheter
Usage Type	Fixed Line ISP
ASN	AS198093
Domain Name	dfri.net
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:67c:289c:4::77

Whois 2001:67c:289c:4::77

IP Abuse Reports for 2001:67c:289c:4::77:

This IP address has been reported a total of 171 times from 28 distinct sources. 2001:67c:289c:4::77 was first reported on May 16th 2021, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-17 14:21:55 (4 days ago)	Blocked by UFW (TCP on 8333) Source port: 33532 Packet length: 80 This report (for 2001:067c:289c:0 ... show more Blocked by UFW (TCP on 8333) Source port: 33532 Packet length: 80 This report (for 2001:067c:289c:0004:0000:0000:0000:0077) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-05 11:44:52 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 07:44:48.764085 2026] [security2:error] [pid 25693:tid 25693] [client 2001:67c:289c:4::77:15218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.thoughtage.org"] [uri "/.git/config"] [unique_id "aiK2sOhAFTbCvDqh4FzQqQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-04 11:28:22 (2 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 37336 Packet length: 80 This report (for 2001:067c:289c:0 ... show more Blocked by UFW (TCP on 8333) Source port: 37336 Packet length: 80 This report (for 2001:067c:289c:0004:0000:0000:0000:0077) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-27 03:47:06 (3 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 1984 Packet length: 80 This report (for 2001:067c:289c:00 ... show more Blocked by UFW (TCP on 8333) Source port: 1984 Packet length: 80 This report (for 2001:067c:289c:0004:0000:0000:0000:0077) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-11 21:27:04 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 35432 Packet length: 80 This report (for 2001:067c:289c:0 ... show more Blocked by UFW (TCP on 8333) Source port: 35432 Packet length: 80 This report (for 2001:067c:289c:0004:0000:0000:0000:0077) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-07 10:23:37 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 06:23:29.958590 2026] [security2:error] [pid 10866:tid 10866] [client 2001:67c:289c:4::77:45730] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|americanexportimport.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "americanexportimport.com"] [uri "/ameri.sql"] [unique_id "afxoIS6vo7ds-6pZ20CfRwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:01:29 (1 month ago)	2026-04-26 08:00:23,799 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:4::77 2026-0 ... show more 2026-04-26 08:00:23,799 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:4::77 2026-04-26 12:01:23,450 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:4::77 2026-04-26 18:01:21,190 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:4::77 2026-04-26 21:01:18,220 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:4::77 2026-04-27 00:01:28,849 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:4::77 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-08 05:52:01 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 01:51:55.939536 2026] [security2:error] [pid 1952421:tid 1952421] [client 2001:67c:289c:4::77:44414] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|healingworksmassage.studio\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "healingworksmassage.studio"] [uri "/config.backup"] [unique_id "adXs-37aVK8Z63yQ62HppwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-03-26 20:34:00 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 xmission.com	2026-03-09 15:05:31 (3 months ago)	Blocked by UFW (TCP on 9999) Source port: 10392 Packet length: 80 This report (for 2001:067c:289c:0 ... show more Blocked by UFW (TCP on 9999) Source port: 10392 Packet length: 80 This report (for 2001:067c:289c:0004:0000:0000:0000:0077) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Ping of Death
🇺🇸 xmission.com	2026-02-08 22:24:06 (4 months ago)	Blocked by UFW (TCP on 8333) Source port: 30366 Packet length: 80 This report (for 2001:067c:289c:0 ... show more Blocked by UFW (TCP on 8333) Source port: 30366 Packet length: 80 This report (for 2001:067c:289c:0004:0000:0000:0000:0077) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 homeshowdomain.nl	2026-02-02 23:00:09 (4 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-02-01. show less	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-01-26 10:33:58 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 05:33:53.593757 2026] [security2:error] [pid 9357:tid 9357] [client 2001:67c:289c:4::77:13170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.accommodation-perthairport.com"] [uri "/.git/config"] [unique_id "aXdDESaoK_ZrQ5yjGCZPXgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-26 01:48:16 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 20:48:13.146687 2026] [security2:error] [pid 23435:tid 23435] [client 2001:67c:289c:4::77:31762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.serpentstudios.com"] [uri "/.git/config"] [unique_id "aXbH3Uns2HwpzzepXBSWYQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 12:51:42 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:4::77 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 07:51:37.988147 2026] [security2:error] [pid 2630:tid 2630] [client 2001:67c:289c:4::77:3708] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|healingworksmassage.studio\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "healingworksmassage.studio"] [uri "/healingworksmassage_com.sql"] [unique_id "aWo0WeudVb8nW9WiSu0dWAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 171 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 213.180.203.120

🇺🇸 169.136.208.64

🇧🇷 168.0.227.214

🇧🇷 168.0.227.119

🇹🇷 91.151.95.146

🇲🇦 81.192.46.36

🇳🇱 45.148.10.141

🇻🇪 38.171.38.123

🇺🇸 20.9.26.126

🇦🇷 190.220.172.154

🇧🇷 167.249.97.32

🇧🇩 165.101.222.23

🇨🇦 142.44.233.163

🇺🇸 104.234.53.98

🇮🇳 103.233.171.196

🇫🇮 94.183.234.128

🇳🇱 91.92.40.231

🇮🇱 87.71.5.165

🇪🇪 83.166.50.15

🇪🇸 80.24.1.119