AbuseIPDB » 2602:80d:1003::23

2602:80d:1003::23 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 21%: ?

21%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Censys Inc.
Usage Type	Search Engine Spider
Hostname(s)	scanner-203.hk2.censys-scanner.com
Domain Name	censys.io
Country	United States of America
City	Ann Arbor, Michigan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 2602:80d:1003::23

Whois 2602:80d:1003::23

IP Abuse Reports for 2602:80d:1003::23:

This IP address has been reported a total of 65 times from 31 distinct sources. 2602:80d:1003::23 was first reported on January 31st 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-08-24 21:20:14 (2 weeks ago)	Unsollicted Connect (14 Times), to port(s): 443	Port Scan Bad Web Bot Web App Attack
spyra.rocks	2024-08-14 08:12:43 (3 weeks ago)	NGINX	Bad Web Bot
Murazaki	2024-08-09 22:02:19 (4 weeks ago)	2602:80d:1003::23 - - [09/Aug/2024:19:08:06 +0200] "PRI * HTTP/2.0" 500 170 "-" "-" "-" ...	Hacking
w-e-c-l-o-u-d-i-t	2024-08-04 04:50:32 (1 month ago)	(mod_security) mod_security (id:210832) triggered by 2602:80d:1003::23 (scanner-203.hk2.censys-scann ... show more(mod_security) mod_security (id:210832) triggered by 2602:80d:1003::23 (scanner-203.hk2.censys-scanner.com): 1 in the last 600 secs; Ports: *; Direction: 0; Trigger: LF_MODSEC show less	Brute-Force SSH
Murazaki	2024-07-26 22:02:12 (1 month ago)	2024/07/25 10:42:04 [error] 84246#84246: 394150 empty URI in redirect to named location "@err" whil ... show more2024/07/25 10:42:04 [error] 84246#84246: 394150 empty URI in redirect to named location "@err" while reading client request line, client: 2602:80d:1003::23, server: , request: "PRI * HTTP/2.0" ... show less	Hacking
Murazaki	2024-07-25 22:01:25 (1 month ago)	2602:80d:1003::23 - - [25/Jul/2024:10:42:05 +0200] "PRI * HTTP/2.0" 500 170 "-" "-" "-" ...	Hacking
Dennis	2024-07-23 21:37:51 (1 month ago)	2602:80d:1003::23 has been banned for triggering http-bad-user-agent (2 events over 1.024114654s). T ... show more2602:80d:1003::23 has been banned for triggering http-bad-user-agent (2 events over 1.024114654s). The user-agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) is not allowed. show less	Bad Web Bot
Dennis	2024-07-09 14:01:19 (1 month ago)	2602:80d:1003::23 has been banned for triggering http-bad-user-agent (2 events over 2.738372091s). T ... show more2602:80d:1003::23 has been banned for triggering http-bad-user-agent (2 events over 2.738372091s). The user-agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) is not allowed. show less	Bad Web Bot
london2038.com	2024-06-17 01:50:14 (2 months ago)	Malformed or malicious web request 2602:80d:1003::23 - - [17/Jun/2024:03:50:09 +0200] "\x16\x0 ... show moreMalformed or malicious web request 2602:80d:1003::23 - - [17/Jun/2024:03:50:09 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x86b\x15\x19\x02)\x87\xD4\x14\x11" 400 157 "-" "-" show less	Hacking Hacking Web App Attack Web App Attack
Murazaki	2024-06-11 22:00:12 (2 months ago)	2602:80d:1003::23 - - [11/Jun/2024:00:49:51 +0200] "PRI * HTTP/2.0" 500 170 "-" "-" "-" ...	Hacking
Murazaki	2024-06-08 22:01:36 (3 months ago)	2602:80d:1003::23 - - [08/Jun/2024:10:59:18 +0200] "PRI * HTTP/2.0" 500 170 "-" "-" "-" ...	Hacking
clapper	2024-06-07 14:38:59 (3 months ago)	(mod_security) mod_security (id:980001) triggered by 2602:80d:1003::23 (Unknown): 5 in the last 3600 ... show more(mod_security) mod_security (id:980001) triggered by 2602:80d:1003::23 (Unknown): 5 in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
spyra.rocks	2024-06-02 15:43:29 (3 months ago)		Bad Web Bot
Anonymous	2024-05-26 18:13:14 (3 months ago)	Fail2Ban triggered	Web App Attack
racks	2024-05-13 02:57:46 (3 months ago)	Alert: The IP 2602:80d:1003::23 is identified and detected as a "bad bot" involved in web scraping a ... show moreAlert: The IP 2602:80d:1003::23 is identified and detected as a "bad bot" involved in web scraping and spam activities. Immediate attention is required to address these unauthorized actions. This bot operates under the provider: "Censys, Inc.". Announced user agent: "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" show less	Hacking Brute-Force Bad Web Bot