JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2602:80d:1000::4d

2602:80d:1000::4d

Neutral Activity IPv6 SLAAC Note

227 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Censys, Inc.

Usage Type

Unknown

ASN

Unknown

Domain Name

censys.io

Country

🇺🇸 United States of America

City

Ann Arbor, Michigan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2602:80d:1000::4d has been reported 227 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2602:80d:1000::4d:

This IP address has been reported a total of 227 times from 57 distinct sources. 2602:80d:1000::4d was first reported on May 31st 2024, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇹 NotACaptcha	2025-02-22 23:56:34 (1 year ago)	webserver:80 [23/Feb/2025] "\x16\x03\x01" 400 392 webserver:80 [23/Feb/2025] "GET /favicon.ico HTT ... show more webserver:80 [23/Feb/2025] "\x16\x03\x01" 400 392 webserver:80 [23/Feb/2025] "GET /favicon.ico HTTP/1.1" 404 360 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" webserver:80 [23/Feb/2025] "PRI * HTTP/2.0" 400 392 webserver:80 [23/Feb/2025] "GET /favicon.ico HTTP/1.1" 404 360 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" webserver:80 [23/Feb/2025] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" webserver:80 [23/Feb/2025] "GET / HTTP/1.1" 200 389 show less	Web App Attack
Anonymous	2025-02-22 21:35:30 (1 year ago)	$f2bV_matches	Brute-Force
Anonymous	2025-02-20 12:04:25 (1 year ago)	Fail2Ban triggered	Web App Attack
🇩🇪 spyra.rocks	2025-02-14 16:47:28 (1 year ago)	NGINX	Bad Web Bot
🇩🇪 Gwyneth Llewelyn	2025-02-12 09:47:44 (1 year ago)	2602:80d:1000::4d - - [12/Feb/2025:09:47:42 +0000] "GET /roundcube/ HTTP/2.0" 404 994 "-" "Mozilla/5 ... show more 2602:80d:1000::4d - - [12/Feb/2025:09:47:42 +0000] "GET /roundcube/ HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" show less	Bad Web Bot
🇺🇸 vestibtech	2025-02-10 13:59:02 (1 year ago)	[Tue Feb 04 00:10:33.340681 2025] [authz_core:error] [pid 887109:tid 887535] [client 2602:80d:1000:: ... show more [Tue Feb 04 00:10:33.340681 2025] [authz_core:error] [pid 887109:tid 887535] [client 2602:80d:1000::4d:41996] AH01630: client denied by server configuration: /home/vestibte/public_html/0_site/ [Tue Feb 04 00:10:33.342889 2025] [authz_core:error] [pid 887109:tid 887535] [client 2602:80d:1000::4d:41996] AH01630: client denied by server configuration: /home/vestibte/public_rsrc/ErrDocs/error.php [Mon Feb 10 06:59:01.785070 2025] [authz_core:error] [pid 1640151:tid 1640473] [client 2602:80d:1000::4d:60968] AH01630: client denied by server configuration: /home/vestibte/public_html/0_site/ ... show less	Bad Web Bot
🇺🇸 chronos	2025-02-10 07:27:16 (1 year ago)	[AUTORAVALT][[10/02/2025 - 04:27:16 -03:00 UTC] Attack from [Censys, Inc.] [2602:80d:1000::4d] Actio ... show more [AUTORAVALT][[10/02/2025 - 04:27:16 -03:00 UTC] Attack from [Censys, Inc.] [2602:80d:1000::4d] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe fo] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 chronos	2025-02-10 06:17:14 (1 year ago)	[AUTORAVALT][[10/02/2025 - 03:17:13 -03:00 UTC] Attack from [Censys, Inc.] [2602:80d:1000::4d] Actio ... show more [AUTORAVALT][[10/02/2025 - 03:17:13 -03:00 UTC] Attack from [Censys, Inc.] [2602:80d:1000::4d] Action: BLocKed Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing. ] ... show less	Bad Web Bot
🇺🇸 chronos	2025-02-09 09:19:48 (1 year ago)	[AUTORAVALT][[09/02/2025 - 06:19:48 -03:00 UTC] Attack from [Censys, Inc.] [2602:80d:1000::4d] Actio ... show more [AUTORAVALT][[09/02/2025 - 06:19:48 -03:00 UTC] Attack from [Censys, Inc.] [2602:80d:1000::4d] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe fo] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
Anonymous	2025-02-06 18:15:24 (1 year ago)	$f2bV_matches	Brute-Force
🇩🇪 spyra.rocks	2025-02-03 07:00:16 (1 year ago)	NGINX	Bad Web Bot
🇮🇩 securejdprop	2025-01-30 15:56:58 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 2602:80d:1000::4d ... show more This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 2602:80d:1000::4d performed 'crowdsecurity/http-bad-user-agent' (2 events over 7.947746375s) at 2025-01-30 15:56:56.781823582 +0000 UTC show less	Bad Web Bot Web App Attack
🇩🇪 BGPengu	2025-01-20 00:19:41 (1 year ago)	2602:80d:1000::4d - - [20/Jan/2025:01:19:40 +0100] "GET / HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compat ... show more 2602:80d:1000::4d - - [20/Jan/2025:01:19:40 +0100] "GET / HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" ... show less	Bad Web Bot
🇩🇪 BGPengu	2025-01-18 18:46:38 (1 year ago)	2602:80d:1000::4d - - [18/Jan/2025:19:46:37 +0100] "GET / HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compat ... show more 2602:80d:1000::4d - - [18/Jan/2025:19:46:37 +0100] "GET / HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" ... show less	Bad Web Bot
🇮🇩 securejdprop	2025-01-17 06:38:23 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 2602:80d:1000::4d ... show more This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 2602:80d:1000::4d performed 'crowdsecurity/http-bad-user-agent' (2 events over 9.129460178s) at 2025-01-17 06:38:22.752025436 +0000 UTC show less	Bad Web Bot Web App Attack

Showing 136 to 150 of 227 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.104.38.1

🇻🇪 201.210.42.112

🇬🇧 178.62.14.149

🇨🇳 117.72.212.144

🇬🇧 64.227.32.186

🇳🇱 45.148.10.157

🇸🇬 43.153.205.159

🇹🇼 211.21.6.84

🇮🇶 169.224.104.247

🇬🇧 142.93.32.85

🇬🇧 138.68.172.35

🇮🇹 87.27.225.82

🇬🇧 81.107.250.21

🇰🇷 61.76.221.51

🇨🇳 58.58.38.30

🇬🇧 46.101.77.230

🇳🇱 45.156.128.67

🇺🇸 44.207.69.106

🇬🇧 35.203.211.5

🇺🇸 34.173.155.246