AbuseIPDB » 2602:80d:1004::2b

2602:80d:1004::2b was found in our database!

This IP was reported 44 times. Confidence of Abuse is 31%: ?

31%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Censys Inc.
Usage Type	Search Engine Spider
Hostname(s)	scanner-204.hk2.censys-scanner.com
Domain Name	censys.io
Country	United States of America
City	Ann Arbor, Michigan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 2602:80d:1004::2b

Whois 2602:80d:1004::2b

IP Abuse Reports for 2602:80d:1004::2b:

This IP address has been reported a total of 44 times from 26 distinct sources. 2602:80d:1004::2b was first reported on April 21st 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
spyra.rocks	2024-08-24 21:18:05 (2 weeks ago)	NGINX	Bad Web Bot
rooot	2024-08-18 07:53:40 (3 weeks ago)	2024-08-18T09:53:32.725690+02:00 kittycat kernel: [556059.417400] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=0 ... show more2024-08-18T09:53:32.725690+02:00 kittycat kernel: [556059.417400] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:46:06:c1:28:99:3a:4d:23:91:86:dd SRC=2602:080d:1004:0000:0000:0000:0000:002b DST=2a02:c207:3009:1696:9420:b00b:1350:0000 LEN=80 TC=0 HOPLIMIT=56 FLOWLBL=595827 PROTO=TCP SPT=33252 DPT=80 WINDOW=43200 RES=0x00 SYN URGP=0 2024-08-18T09:53:33.462345+02:00 kittycat kernel: [556060.153018] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:46:06:c1:28:99:3a:4d:23:91:86:dd SRC=2602:080d:1004:0000:0000:0000:0000:002b DST=2a02:c207:3009:1696:9420:b00b:1350:0000 LEN=80 TC=0 HOPLIMIT=56 FLOWLBL=465844 PROTO=TCP SPT=48134 DPT=443 WINDOW=43200 RES=0x00 SYN URGP=0 2024-08-18T09:53:33.778494+02:00 kittycat kernel: [556060.470393] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:46:06:c1:28:99:3a:4d:23:91:86:dd SRC=2602:080d:1004:0000:0000:0000:0000:002b DST=2a02:c207:3009:1696:9420:b00b:1350:0000 LEN=80 TC=0 HOPLIMIT=56 FLOWLBL=316745 PROTO=TCP SPT=33252 DPT=80 WINDOW=43200 RES=0x00 SYN URGP=0 2024-08-18T0 ... show less	Port Scan Brute-Force
ghostwarriors	2024-08-17 19:50:28 (3 weeks ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
Anonymous	2024-08-17 19:37:45 (3 weeks ago)	Fail2Ban triggered	Web App Attack
Kinsei Engineering Inc.	2024-08-15 21:25:03 (3 weeks ago)	UFW:High-frequency access to unused ports	Port Scan
w-e-c-l-o-u-d-i-t	2024-08-04 01:24:38 (1 month ago)	(mod_security) mod_security (id:210832) triggered by 2602:80d:1004::2b (scanner-204.hk2.censys-scann ... show more(mod_security) mod_security (id:210832) triggered by 2602:80d:1004::2b (scanner-204.hk2.censys-scanner.com): 1 in the last 600 secs; Ports: *; Direction: 0; Trigger: LF_MODSEC show less	Brute-Force SSH
Admins@FBN	2024-07-29 07:44:27 (1 month ago)	FW-PortScan: Traffic Blocked srcport=50650 dstport=80	Port Scan
keep_out	2024-07-18 21:30:49 (1 month ago)	web scan ...	Web App Attack
MarkGGN	2024-07-16 01:03:03 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Bad Web Bot Web App Attack
geot	2024-07-14 14:37:35 (1 month ago)	PRI * HTTP/2.0	Port Scan Hacking
Murazaki	2024-07-10 22:01:50 (2 months ago)	_ 2602:80d:1004::2b - - [10/Jul/2024:10:38:11 +0200] "PRI * HTTP/2.0" 400 150 "-" "-" "-" ...	Hacking
Anonymous	2024-07-09 14:58:03 (2 months ago)		DNS Compromise DDoS Attack
vestibtech	2024-07-09 03:45:21 (2 months ago)	[Sun Jul 07 09:23:11.919971 2024] [authz_core:error] [pid 401556:tid 401644] [client 2602:80d:1004:: ... show more[Sun Jul 07 09:23:11.919971 2024] [authz_core:error] [pid 401556:tid 401644] [client 2602:80d:1004::2b:45028] AH01630: client denied by server configuration: /home/vestibte/public_html/0_site/ [Sun Jul 07 09:23:11.921886 2024] [authz_core:error] [pid 401556:tid 401644] [client 2602:80d:1004::2b:45028] AH01630: client denied by server configuration: /home/vestibte/public_rsrc/ErrDocs/error.php [Mon Jul 08 21:45:20.419771 2024] [authz_core:error] [pid 485736:tid 486097] [client 2602:80d:1004::2b:56396] AH01630: client denied by server configuration: /home/vestibte/public_html/0_site/ ... show less	Bad Web Bot
spyra.rocks	2024-07-05 01:13:09 (2 months ago)	NGINX	Bad Web Bot
london2038.com	2024-06-25 05:17:36 (2 months ago)	Malformed or malicious web request 2602:80d:1004::2b - - [25/Jun/2024:07:17:32 +0200] "PRI * H ... show moreMalformed or malicious web request 2602:80d:1004::2b - - [25/Jun/2024:07:17:32 +0200] "PRI * HTTP/2.0" 400 157 "-" "-" show less	Hacking Web App Attack