JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2602:80d:1004::26

2602:80d:1004::26 was found in our database!

This IP was reported 254 times. Confidence of Abuse is 73%: ?

73%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Censys, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS398722
Hostname(s)	scanner-204.hk2.censys-scanner.com
Domain Name	censys.io
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2602:80d:1004::26

Whois 2602:80d:1004::26

IP Abuse Reports for 2602:80d:1004::26:

This IP address has been reported a total of 254 times from 81 distinct sources. 2602:80d:1004::26 was first reported on March 29th 2024, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 LRNP	2026-08-30 06:57:58 (22 hours ago)	_:80 2602:80d:1004::26 - - [30/Aug/2026:06:57:57 +0000] "\x16\x03\x01\x01\x06\x01\x00\x01\x02\x03\x0 ... show more _:80 2602:80d:1004::26 - - [30/Aug/2026:06:57:57 +0000] "\x16\x03\x01\x01\x06\x01\x00\x01\x02\x03\x03\x89\xCB\x9Ft\x13$\xDC\x06\x12\xBB4Q\x9CU\x8F\x97\xDF}\x22\xC8\x10Z\xFC\x85\xE5!\xFC\xF2BK\xEB\x03 n\xB8\x5C\xB8`\x17p\xA2\xB4H\xAB'F\xC8\xE8\x19\xD0\x90\|?\xAFl\xB8\xB2\xF9\xE0@\x03\xDD\xBBp[\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" ... show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-29 11:34:10 (1 day ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) \| path: / (+1 more) \| 2026-08-29 11:34 UTC show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-08-29 05:33:55 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-08-28 23:25:58 (2 days ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) \| path: /core/img/homescreen-lightmode.svg (+1 more) \| 2026-08-28 23:25 UTC show less	Bad Web Bot
🇩🇪 4server	2026-08-28 14:57:26 (2 days ago)	[FriAug2816:57:22.3852712026][security2:error][pid2806507:tid2806632][client2602:80d:1004::26:0]ModS ... show more [FriAug2816:57:22.3852712026][security2:error][pid2806507:tid2806632][client2602:80d:1004::26:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b$\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"apGh0nqUGcQm7r97m6RqTgAAAQ4\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 jbcrn	2026-08-28 09:04:10 (2 days ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercia ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercial-scrapers. Requested honeypot path: /favicon.ico. User-Agent: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) show less	Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-27 16:52:26 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 4server	2026-08-26 13:49:26 (4 days ago)	[WedAug2615:49:20.5074222026][security2:error][pid4000625:tid4000744][client2602:80d:1004::26:0]ModS ... show more [WedAug2615:49:20.5074222026][security2:error][pid4000625:tid4000744][client2602:80d:1004::26:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b$\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.rebirthing-lugano.ch\"][uri\"/\"][unique_id\"ao7u4EZC-9cYQwgtlwHKQwAAAQ0\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-26 08:35:46 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-08-25 22:40:53 (5 days ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) \| path: / (+1 more) \| 2026-08-25 22:40 UTC show less	Bad Web Bot
Anonymous	2026-08-25 07:45:05 (5 days ago)		DNS Compromise DDoS Attack
🇺🇸 Charlesiv	2026-08-24 16:00:13 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK ASN: 398722 (Censys, Inc.) Pr ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK ASN: 398722 (Censys, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-24T15:16:08Z Ray ID: a30351030f057396 UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) show less	Bad Web Bot
Anonymous	2026-08-22 17:55:11 (1 week ago)	2602:80d:1004::26 - - [22/Aug/2026:19:55:10 +0200] "GET / HTTP/1.1" 403 5713 "-" "Mozilla/5.0 (compa ... show more 2602:80d:1004::26 - - [22/Aug/2026:19:55:10 +0200] "GET / HTTP/1.1" 403 5713 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" ... show less	Web App Attack
🇫🇷 LRob	2026-08-22 04:58:11 (1 week ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) \| path: / show less	Bad Web Bot
🇩🇪 4server	2026-08-22 03:50:18 (1 week ago)	[SatAug2205:50:13.3183202026][security2:error][pid1958699:tid1958786][client2602:80d:1004::26:0]ModS ... show more [SatAug2205:50:13.3183202026][security2:error][pid1958699:tid1958786][client2602:80d:1004::26:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b$\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.fidmeyer.ch\"][uri\"/\"][unique_id\"aokcdc7xJ6Q27DstN5k1hAAAAME\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 254 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 192.185.176.174

🇺🇸 2607:f8b0:4023:1006::124

🇺🇸 2602:fdb8:131:2001::2:1

🇨🇳 182.127.153.88

🇨🇳 124.135.183.204

🇨🇳 111.29.52.71

🇧🇩 103.12.205.25

🇺🇸 69.48.204.84

🇨🇳 59.52.103.39

🇨🇳 39.152.202.26

🇧🇪 34.78.82.93

🇺🇸 12.150.243.22

🇰🇷 211.46.177.174

🇺🇸 207.46.13.127

🇫🇷 193.31.56.54

🇷🇺 193.24.123.55

🇳🇱 192.42.116.48

🇪🇨 190.131.138.255

🇦🇷 190.110.179.51

🇧🇩 182.48.68.82