This IP was reported 209 times. Confidence of
Abuse
is 54%: ?
54%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
209
times from
68 distinct
sources.
2602:80d:1004::27 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[MonJun2914:59:35.6810722026][security2:error][pid3033298:tid3033366][client2602:80d:1004::27:0]ModS ...
show more[MonJun2914:59:35.6810722026][security2:error][pid3033298:tid3033366][client2602:80d:1004::27:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.martinairsagl.ch\"][uri\"/\"][unique_id\"akJsN2Muzi_4JFbfwymtuQAAAIY\"]
show less
[TueJun2320:04:25.0429522026][security2:error][pid3016851:tid3016978][client2602:80d:1004::27:0]ModS ...
show more[TueJun2320:04:25.0429522026][security2:error][pid3016851:tid3016978][client2602:80d:1004::27:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.vivereintrentino.it\"][uri\"/\"][unique_id\"ajrKqf-j1O3MPCAlS8_Z8wAAAII\"]
show less
CrowdSec: Ip 2602:80d:1004::27 performed 'crowdsecurity/http-bad-user-agent' (2 events over 1.145679 ...
show moreCrowdSec: Ip 2602:80d:1004::27 performed 'crowdsecurity/http-bad-user-agent' (2 events over 1.145679559s) at 2026-06-19 17:18:56.064264102 +0000 UTC (scenario: crowdsecurity/http-bad-user-agent)
show less
[TueJun1603:34:33.3847182026][security2:error][pid1729705:tid1729958][client2602:80d:1004::27:0]ModS ...
show more[TueJun1603:34:33.3847182026][security2:error][pid1729705:tid1729958][client2602:80d:1004::27:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.distributori-sigarette-ticino.ch\"][uri\"/\"][unique_id\"ajCoKY2dgOt3Z2OJQh-ULwAAARc\"]
show less
[MonJun1514:01:24.7896312026][security2:error][pid72768:tid72872][client2602:80d:1004::27:0]ModSecur ...
show more[MonJun1514:01:24.7896312026][security2:error][pid72768:tid72872][client2602:80d:1004::27:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.bozza2-flying.artisteer-italia.org\"][uri\"/\"][unique_id\"ai_plKfwTEtp9SNMy9kuJgAAAII\"]
show less
[SatJun1300:11:54.1860322026][security2:error][pid2171836:tid2173269][client2602:80d:1004::27:0]ModS ...
show more[SatJun1300:11:54.1860322026][security2:error][pid2171836:tid2173269][client2602:80d:1004::27:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.hostingedomini.ch\"][uri\"/\"][unique_id\"aiyEKtsQ9Qq3p22hpDot7wAAAIE\"]
show less
[WedJun1021:26:58.5341522026][security2:error][pid844517:tid844583][client2602:80d:1004::27:0]ModSec ...
show more[WedJun1021:26:58.5341522026][security2:error][pid844517:tid844583][client2602:80d:1004::27:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"robertselitrenny.ch\"][uri\"/\"][unique_id\"aim6gnZlKQIhWyVisfGrpQAAAIM\"]
show less
Port Scan
Brute-Force
Web App Attack
Showing 1 to
15
of 209 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩