This IP was reported 178 times. Confidence of
Abuse
is 43%: ?
43%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
178
times from
62 distinct
sources.
2602:80d:1004::15 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[WedJun1014:57:46.1273642026][security2:error][pid2153534:tid2153801][client2602:80d:1004::15:0]ModS ...
show more[WedJun1014:57:46.1273642026][security2:error][pid2153534:tid2153801][client2602:80d:1004::15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"aid-web.ch\"][uri\"/\"][unique_id\"ailfSihrrrfg74SCclX63gAAAMM\"]
show less
[WedJun0304:49:46.3072702026][security2:error][pid1051831:tid1051977][client2602:80d:1004::15:0]ModS ...
show more[WedJun0304:49:46.3072702026][security2:error][pid1051831:tid1051977][client2602:80d:1004::15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"gualandi.mood4apps.com\"][uri\"/\"][unique_id\"ah-WSraOt6LmyvJM-RDT4AAAANg\"]
show less
[TueJun0200:48:49.9851572026][security2:error][pid2880977:tid2881836][client2602:80d:1004::15:0]ModS ...
show more[TueJun0200:48:49.9851572026][security2:error][pid2880977:tid2881836][client2602:80d:1004::15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"4hosts.net\"][uri\"/\"][unique_id\"ah4MUdW6A1MjOvaVkComiQAAABg\"]
show less
2602:80d:1004::15 has been banned for triggering http-bad-user-agent (2 events over 4.109639225s). T ...
show more2602:80d:1004::15 has been banned for triggering http-bad-user-agent (2 events over 4.109639225s). The user-agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) is not allowed.
show less
[ThuMay1403:36:10.6954462026][security2:error][pid2543333:tid2543415][client2602:80d:1004::15:0]ModS ...
show more[ThuMay1403:36:10.6954462026][security2:error][pid2543333:tid2543415][client2602:80d:1004::15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.traslocarealugano.ch\"][uri\"/\"][unique_id\"agUnCutD8Wa8-iSnsf52NQAAAJM\"]
show less
[FriMay0816:24:51.2774092026][security2:error][pid2107556:tid2107652][client2602:80d:1004::15:0]ModS ...
show more[FriMay0816:24:51.2774092026][security2:error][pid2107556:tid2107652][client2602:80d:1004::15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"af3yMwKPQtW6L0tWeZl0UQAAAMM\"]
show less
[ThuMay0714:47:09.1962722026][security2:error][pid472396:tid472503][client2602:80d:1004::15:0]ModSec ...
show more[ThuMay0714:47:09.1962722026][security2:error][pid472396:tid472503][client2602:80d:1004::15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.gmint.ch\"][uri\"/\"][unique_id\"afyJzdqPdyJrxFyi1-R8GgAAAM8\"]
show less
Port Scan
Brute-Force
Web App Attack
Showing 1 to
15
of 178 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩