This IP was reported 162 times. Confidence of
Abuse
is 34%: ?
34%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
162
times from
66 distinct
sources.
2602:80d:1003::1d was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[MonJun0802:02:43.8215802026][security2:error][pid364755:tid364889][client2602:80d:1003::1d:0]ModSec ...
show more[MonJun0802:02:43.8215802026][security2:error][pid364755:tid364889][client2602:80d:1003::1d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.serban.ch\"][uri\"/\"][unique_id\"aiYGo41kyemtNf6k_qc2uAAAARE\"]
show less
[FriMay2921:54:03.3006902026][security2:error][pid2678376:tid2678451][client2602:80d:1003::1d:0]ModS ...
show more[FriMay2921:54:03.3006902026][security2:error][pid2678376:tid2678451][client2602:80d:1003::1d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.restaurantgandria.ch\"][uri\"/wp-content/uploads/2015/07/cropped-comingsoon-1600-180x180.jpg\"][unique_id\"ahnu29Hwndmnyn9VY0CnzwAAAMI\"]
show less
Blocked by UFW (TCP on 80)
Source port: 59288
Packet length: 80
This report (for 2602:080d:1003:000 ...
show moreBlocked by UFW (TCP on 80)
Source port: 59288
Packet length: 80
This report (for 2602:080d:1003:0000:0000:0000:0000:001d) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
[SunMay1021:11:46.2444512026][security2:error][pid1393926:tid1394000][client2602:80d:1003::1d:0]ModS ...
show more[SunMay1021:11:46.2444512026][security2:error][pid1393926:tid1394000][client2602:80d:1003::1d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"agDYclNYTfqjMBAxFOri0QAAAIw\"]
show less
Ip 2602:80d:1003::1d performed 'crowdsecurity/http-bad-user-agent' (2 events over 3.73477345s) at 20 ...
show moreIp 2602:80d:1003::1d performed 'crowdsecurity/http-bad-user-agent' (2 events over 3.73477345s) at 2026-05-08 00:51:06.412764806 +0000 UTC
show less
[MonMay0421:18:49.7170122026][security2:error][pid600301:tid600382][client2602:80d:1003::1d:0]ModSec ...
show more[MonMay0421:18:49.7170122026][security2:error][pid600301:tid600382][client2602:80d:1003::1d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.flyingberber.artisteer-italia.org\"][uri\"/\"][unique_id\"afjxGXzNgT8crCfOY4roHgAAAI8\"]
show less
[MonApr2714:20:14.9627702026][security2:error][pid3448145:tid3448164][client2602:80d:1003::1d:0]ModS ...
show more[MonApr2714:20:14.9627702026][security2:error][pid3448145:tid3448164][client2602:80d:1003::1d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"gualandi.ch\"][uri\"/\"][unique_id\"ae9UfpZP-zwAunKnMGhYCwAAAEI\"]
show less
[ThuApr2322:45:02.3819972026][security2:error][pid1001828:tid1001854][client2602:80d:1003::1d:0]ModS ...
show more[ThuApr2322:45:02.3819972026][security2:error][pid1001828:tid1001854][client2602:80d:1003::1d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"aeqEzrtpNte8OeOemqC31gAAABg\"]
show less
[SatApr1816:44:09.4019432026][security2:error][pid3541579:tid3541587][client2602:80d:1003::1d:0]ModS ...
show more[SatApr1816:44:09.4019432026][security2:error][pid3541579:tid3541587][client2602:80d:1003::1d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"aeOYuW8ebx8J3FBKyAEUSAAAAQY\"]
show less