This IP was reported 273 times. Confidence of
Abuse
is 70%: ?
70%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
273
times from
73 distinct
sources.
2602:80d:1003::2d was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SunJun2811:31:14.0466762026][security2:error][pid844858:tid845085][client2602:80d:1003::2d:0]ModSec ...
show more[SunJun2811:31:14.0466762026][security2:error][pid844858:tid845085][client2602:80d:1003::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"salonesamire.ch\"][uri\"/\"][unique_id\"akDp4s-C42USO3gsBR9RgQAAAMc\"]
show less
[WedJun2414:38:38.1779812026][security2:error][pid354745:tid354803][client2602:80d:1003::2d:0]ModSec ...
show more[WedJun2414:38:38.1779812026][security2:error][pid354745:tid354803][client2602:80d:1003::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.massimilianoparquet.ch\"][uri\"/\"][unique_id\"ajvPzsUBBbL9_ioTGciKpwAAAM0\"]
show less
[SunJun2108:02:17.1924162026][security2:error][pid200298:tid200303][client2602:80d:1003::2d:0]ModSec ...
show more[SunJun2108:02:17.1924162026][security2:error][pid200298:tid200303][client2602:80d:1003::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.respiratrentino.it\"][uri\"/\"][unique_id\"ajd-adslJn-sq9sE9aeb9gAAAMI\"]
show less
[AUTORAVALT][[12/06/2026 - 02:17:31 -03:00 UTC]
Attack from [Censys, Inc.]
[2602:80d:1003::2d][scann ...
show more[AUTORAVALT][[12/06/2026 - 02:17:31 -03:00 UTC]
Attack from [Censys, Inc.]
[2602:80d:1003::2d][scanner-203.hk2.censys-scanner.com]
Action: BLocKed
Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing.
]
...
show less
[FriJun0521:05:25.3376492026][security2:error][pid1180740:tid1180889][client2602:80d:1003::2d:0]ModS ...
show more[FriJun0521:05:25.3376492026][security2:error][pid1180740:tid1180889][client2602:80d:1003::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.your-team.ch\"][uri\"/\"][unique_id\"aiMd9Wda9sqC7uys7WnwcwAAAQk\"]
show less
[FriJun0501:10:16.1854312026][security2:error][pid2229596:tid2230106][client2602:80d:1003::2d:0]ModS ...
show more[FriJun0501:10:16.1854312026][security2:error][pid2229596:tid2230106][client2602:80d:1003::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"aiIF2O_9wxiq-1AWcrmVYQAAAM8\"]
show less
[WedJun0317:10:19.0871082026][security2:error][pid1922968:tid1923041][client2602:80d:1003::2d:0]ModS ...
show more[WedJun0317:10:19.0871082026][security2:error][pid1922968:tid1923041][client2602:80d:1003::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"aiBD2_WoN4WckgFnZdwIOQAAAIU\"]
show less