AbuseIPDB » 2602:80d:1004::24

2602:80d:1004::24 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 34%: ?

34%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Censys Inc.
Usage Type	Search Engine Spider
Hostname(s)	scanner-204.hk2.censys-scanner.com
Domain Name	censys.io
Country	United States of America
City	Ann Arbor, Michigan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 2602:80d:1004::24

Whois 2602:80d:1004::24

IP Abuse Reports for 2602:80d:1004::24:

This IP address has been reported a total of 40 times from 23 distinct sources. 2602:80d:1004::24 was first reported on March 28th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
london2038.com	2024-09-08 00:39:30 (4 days ago)	Malformed or malicious web request 2602:80d:1004::24 - - [08/Sep/2024:02:39:17 +0200] "\x00\x0 ... show moreMalformed or malicious web request 2602:80d:1004::24 - - [08/Sep/2024:02:39:17 +0200] "\x00\x0E\x08J\xEC\x14@K\x93\x85\xFE\x00\x00\x00\x00\x00" 400 157 "-" "-" show less	Hacking Web App Attack
spyra.rocks	2024-09-07 23:33:16 (4 days ago)	NGINX	Bad Web Bot
spyra.rocks	2024-09-01 00:48:31 (1 week ago)	NGINX	Bad Web Bot
spyra.rocks	2024-08-18 16:41:34 (3 weeks ago)	NGINX	Bad Web Bot
Gwyneth Llewelyn	2024-08-16 10:19:39 (3 weeks ago)	2602:80d:1004::24 - - [16/Aug/2024:11:19:37 +0100] "GET /roundcube/ HTTP/2.0" 404 994 "-" "Mozilla/5 ... show more2602:80d:1004::24 - - [16/Aug/2024:11:19:37 +0100] "GET /roundcube/ HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" show less	Bad Web Bot
Dennis	2024-08-16 03:44:18 (3 weeks ago)	2602:80d:1004::24 has been banned for triggering http-bad-user-agent (2 events over 1.350189588s). T ... show more2602:80d:1004::24 has been banned for triggering http-bad-user-agent (2 events over 1.350189588s). The user-agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) is not allowed. show less	Bad Web Bot
spyra.rocks	2024-08-16 03:30:52 (3 weeks ago)	NGINX	Bad Web Bot
Murazaki	2024-08-15 22:02:40 (4 weeks ago)	_ 2602:80d:1004::24 - - [15/Aug/2024:22:00:16 +0200] "PRI * HTTP/2.0" 400 150 "-" "-" "-" ...	Hacking
spyra.rocks	2024-08-14 07:02:45 (4 weeks ago)	NGINX	Bad Web Bot
MHuiG	2024-08-10 20:07:50 (1 month ago)	The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 398722 clientAS ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 398722 clientASNDescription: CENSYS-ARIN-03 clientCountryName: US clientIP: 2602:80d:1004::24 clientRequestHTTPHost: mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: / clientRequestQuery: datetime: 2024-08-10T18:20:07Z rayName: 8b11ff7fcc299c4a ruleId: 62370dc6b7504b8c983f836ea0faec20 userAgent: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/). Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
spyra.rocks	2024-08-10 16:42:08 (1 month ago)	NGINX	Bad Web Bot
rooot	2024-08-08 22:10:49 (1 month ago)	2024-08-09T00:10:37.719529+02:00 kittycat kernel: [1420217.422468] [UFW BLOCK] IN=eth0 OUT=eth0 MAC= ... show more2024-08-09T00:10:37.719529+02:00 kittycat kernel: [1420217.422468] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:46:06:c1:28:99:3a:4d:23:91:86:dd SRC=2602:080d:1004:0000:0000:0000:0000:0024 DST=2a02:c207:3009:1696:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=55 FLOWLBL=576766 PROTO=TCP SPT=57270 DPT=443 WINDOW=43200 RES=0x00 SYN URGP=0 2024-08-09T00:10:37.757096+02:00 kittycat kernel: [1420217.460077] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:46:06:c1:28:99:3a:4d:23:91:86:dd SRC=2602:080d:1004:0000:0000:0000:0000:0024 DST=2a02:c207:3009:1696:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=55 FLOWLBL=1004919 PROTO=TCP SPT=48754 DPT=80 WINDOW=43200 RES=0x00 SYN URGP=0 2024-08-09T00:10:38.727478+02:00 kittycat kernel: [1420218.430456] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:46:06:c1:28:99:3a:4d:23:91:86:dd SRC=2602:080d:1004:0000:0000:0000:0000:0024 DST=2a02:c207:3009:1696:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=55 FLOWLBL=303597 PROTO=TCP SPT=57270 DPT=443 WINDOW=43200 RES=0x00 SYN URGP=0 2024-08 ... show less	Port Scan Brute-Force
vestibtech	2024-07-28 16:48:30 (1 month ago)	[Thu Jul 25 16:57:16.270583 2024] [authz_core:error] [pid 10770:tid 11153] [client 2602:80d:1004::24 ... show more[Thu Jul 25 16:57:16.270583 2024] [authz_core:error] [pid 10770:tid 11153] [client 2602:80d:1004::24:34266] AH01630: client denied by server configuration: /home/vestibte/public_html/0_site/ [Thu Jul 25 16:57:16.273114 2024] [authz_core:error] [pid 10770:tid 11153] [client 2602:80d:1004::24:34266] AH01630: client denied by server configuration: /home/vestibte/public_rsrc/ErrDocs/error.php [Sun Jul 28 10:48:29.948738 2024] [authz_core:error] [pid 636396:tid 636674] [client 2602:80d:1004::24:52224] AH01630: client denied by server configuration: /var/www/horde/ ... show less	Bad Web Bot
spyra.rocks	2024-07-23 02:31:50 (1 month ago)	NGINX	Bad Web Bot
london2038.com	2024-07-22 01:50:32 (1 month ago)	Malformed or malicious web request 2602:80d:1004::24 - - [22/Jul/2024:03:50:27 +0200] "PRI * H ... show moreMalformed or malicious web request 2602:80d:1004::24 - - [22/Jul/2024:03:50:27 +0200] "PRI * HTTP/2.0" 400 157 "-" "-" show less	Hacking Web App Attack