JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:67c:89c:702:1ce:1ce:babe:7

2001:67c:89c:702:1ce:1ce:babe:7 was found in our database!

This IP was reported 92 times. Confidence of Abuse is 8%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Forening for DotSrc
Usage Type	Fixed Line ISP
ASN	AS210731
Hostname(s)	tor-project-exit7.dotsrc.org
Domain Name	dotsrc.org
Country	🇩🇰 Denmark
City	Copenhagen, Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:67c:89c:702:1ce:1ce:babe:7

Whois 2001:67c:89c:702:1ce:1ce:babe:7

IP Abuse Reports for 2001:67c:89c:702:1ce:1ce:babe:7:

This IP address has been reported a total of 92 times from 13 distinct sources. 2001:67c:89c:702:1ce:1ce:babe:7 was first reported on November 25th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-04-12 21:39:50 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 12 17:39:43.165118 2025] [security2:error] [pid 2770847:tid 2770847] [client 2001:67c:89c:702:1ce:1ce:babe:7:64576] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|babylontravelone.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "babylontravelone.com"] [uri "/wp.sql"] [unique_id "Z_rdn0iFOqFi2U_oIXzmfQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-07 08:03:06 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 04:03:02.677915 2025] [security2:error] [pid 3976:tid 3976] [client 2001:67c:89c:702:1ce:1ce:babe:7:65534] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|chickiesbeef.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chickiesbeef.com"] [uri "/db.sql"] [unique_id "Z_OGtuBmzJWIJEI1DJXPSQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-07 04:33:46 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 00:33:41.871283 2025] [security2:error] [pid 17607:tid 17607] [client 2001:67c:89c:702:1ce:1ce:babe:7:64562] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cycontechnology.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cycontechnology.com"] [uri "/wp-content/database.sql"] [unique_id "Z_NVpdLvc6aKukiylxeolAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-03 03:39:35 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 23:39:27.529205 2025] [security2:error] [pid 18824:tid 18836] [client 2001:67c:89c:702:1ce:1ce:babe:7:64452] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jimpepperfest.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jimpepperfest.net"] [uri "/db.sql"] [unique_id "Z-4C7zl-s66rouLypbOZ_AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 17:46:52 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 13:46:44.670170 2025] [security2:error] [pid 11448:tid 11448] [client 2001:67c:89c:702:1ce:1ce:babe:7:64428] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dishoneggs.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dishoneggs.com"] [uri "/wp-content/database.sql"] [unique_id "Z-BJBIiUUN_ZP9mgyJegVAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 10:42:17 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 06:42:11.517283 2025] [security2:error] [pid 28082:tid 28162] [client 2001:67c:89c:702:1ce:1ce:babe:7:64640] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|arizonasolutionsgroup.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "arizonasolutionsgroup.com"] [uri "/database.sql"] [unique_id "Z9_lg49GnJO9Djo06XQWxAAAAVQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-06 03:27:16 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 22:27:07.328953 2025] [security2:error] [pid 18226:tid 18378] [client 2001:67c:89c:702:1ce:1ce:babe:7:65258] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|eldesvandemaggie.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "eldesvandemaggie.com"] [uri "/el.sql"] [unique_id "Z8kWC3tqlLSRvgsSYrT4ugAAARQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-01 20:04:20 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 15:04:17.459712 2025] [security2:error] [pid 4042512:tid 4042512] [client 2001:67c:89c:702:1ce:1ce:babe:7:64560] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|damgoodit.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "damgoodit.com"] [uri "/mysql.sql"] [unique_id "Z8NoQTJxYbMnuqhhjLPCVAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-01 18:12:38 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 13:12:31.725042 2025] [security2:error] [pid 1147666:tid 1147666] [client 2001:67c:89c:702:1ce:1ce:babe:7:64470] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jamisongreen.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jamisongreen.com"] [uri "/wp-content/mysql.sql"] [unique_id "Z8NOD3h739WRarathujKWgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-01 05:02:27 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 00:02:19.773429 2025] [security2:error] [pid 21054:tid 21054] [client 2001:67c:89c:702:1ce:1ce:babe:7:64430] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.mayiasteadman.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mayiasteadman.com"] [uri "/mysql.sql"] [unique_id "Z8KU2zi8IWj5O33Nuo2SRgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-24 22:26:17 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 24 17:26:13.281774 2025] [security2:error] [pid 3947:tid 3947] [client 2001:67c:89c:702:1ce:1ce:babe:7:65068] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thingstodonude.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thingstodonude.com"] [uri "/mysql.sql"] [unique_id "Z7zyBRXM5ZvIQ-pGa8I-kAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-09 19:31:16 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 09 14:31:10.552624 2025] [security2:error] [pid 31812:tid 31812] [client 2001:67c:89c:702:1ce:1ce:babe:7:64126] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danielbrower.com"] [uri "/download.php"] [unique_id "Z6kCfiE95jF67XoRzZP6dgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-03 04:12:37 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 02 23:12:33.885845 2024] [security2:error] [pid 1685:tid 1685] [client 2001:67c:89c:702:1ce:1ce:babe:7:64550] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.mickmashbir.com"] [uri "/.git/config"] [unique_id "Z06FMdDjSN4umEQ9Q7GtlwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-22 05:11:19 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 01:11:14.401389 2024] [security2:error] [pid 16254:tid 16254] [client 2001:67c:89c:702:1ce:1ce:babe:7:64446] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|usaangelinvestors.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "usaangelinvestors.com"] [uri "/investors.sql"] [unique_id "ZsbIcibaiiF2H2LBH2AjgwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-08 14:49:29 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-ex ... show more (mod_security) mod_security (id:225170) triggered by 2001:67c:89c:702:1ce:1ce:babe:7 (tor-project-exit7.dotsrc.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 08 10:49:23.869782 2024] [security2:error] [pid 1101002:tid 1101002] [client 2001:67c:89c:702:1ce:1ce:babe:7:64660] [client 2001:67c:89c:702:1ce:1ce:babe:7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|meganmurph.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "meganmurph.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZrTa8wyEhLHPSS8LyBcPxAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 61 to 75 of 92 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 77.239.124.126

🇩🇪 213.209.159.26

🇦🇹 213.173.75.222

🇵🇰 202.143.127.214

🇺🇸 194.5.52.24

🇺🇸 184.105.139.94

🇲🇦 154.146.242.43

🇮🇳 117.196.124.80

🇫🇷 85.217.140.52

🇩🇪 81.199.26.58

🇩🇪 69.5.169.40

🇺🇸 66.132.172.233

🇺🇸 54.215.248.242

🇳🇱 45.148.10.151

🇵🇸 45.121.105.28

🇮🇳 34.131.35.239

🇿🇦 34.35.113.221

🇦🇴 193.163.125.94

🇳🇱 172.94.9.154

🇺🇸 162.216.149.234