This IP was reported 237 times. Confidence of
Abuse
is 55%: ?
55%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
237
times from
71 distinct
sources.
2602:80d:1003::23 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
CrowdSec: Ip 2602:80d:1003::23 performed 'crowdsecurity/http-bad-user-agent' (2 events over 15.94563 ...
show moreCrowdSec: Ip 2602:80d:1003::23 performed 'crowdsecurity/http-bad-user-agent' (2 events over 15.945631308s) at 2026-07-22 14:04:44.092425911 +0000 UTC (scenario: crowdsecurity/http-bad-user-agent)
show less
[SunJul1916:18:18.6040352026][security2:error][pid392557:tid392579][client2602:80d:1003::23:0]ModSec ...
show more[SunJul1916:18:18.6040352026][security2:error][pid392557:tid392579][client2602:80d:1003::23:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"alzcqpgtFehV0R2_RiDUjgAAAFI\"]
show less
[WedJul1505:27:16.9680262026][security2:error][pid2944675:tid2944691][client2602:80d:1003::23:0]ModS ...
show more[WedJul1505:27:16.9680262026][security2:error][pid2944675:tid2944691][client2602:80d:1003::23:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"alb-FDrmcCSwLjZcfNDmCgAAAA0\"]
show less
[TueJul1410:12:21.8091992026][security2:error][pid2091038:tid2091060][client2602:80d:1003::23:0]ModS ...
show more[TueJul1410:12:21.8091992026][security2:error][pid2091038:tid2091060][client2602:80d:1003::23:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"alXvZbGRp9T0A5O2gVOtFQAAAQ4\"]
show less