This IP was reported 271 times. Confidence of
Abuse
is 64%: ?
64%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
271
times from
89 distinct
sources.
2602:80d:1004::30 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SunAug1618:39:30.2755652026][security2:error][pid615460:tid615473][client2602:80d:1004::30:0]ModSec ...
show more[SunAug1618:39:30.2755652026][security2:error][pid615460:tid615473][client2602:80d:1004::30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/wiki\"][unique_id\"aoHnwo1jr8GzHriVQC5IEAAAAQk\"]
show less
CrowdSec: Ip 2602:80d:1004::30 performed 'crowdsecurity/http-bad-user-agent' (2 events over 4.907779 ...
show moreCrowdSec: Ip 2602:80d:1004::30 performed 'crowdsecurity/http-bad-user-agent' (2 events over 4.907779502s) at 2026-08-16 10:14:09.67946779 +0000 UTC (scenario: crowdsecurity/http-bad-user-agent)
show less
[SatAug1523:35:54.6563642026][security2:error][pid20563:tid20927][client2602:80d:1004::30:0]ModSecur ...
show more[SatAug1523:35:54.6563642026][security2:error][pid20563:tid20927][client2602:80d:1004::30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"aoDbumBXbxl9w1zYpPNuaAAAAVM\"]
show less
[FriAug1423:07:22.6831232026][security2:error][pid2319676:tid2319679][client2602:80d:1004::30:0]ModS ...
show more[FriAug1423:07:22.6831232026][security2:error][pid2319676:tid2319679][client2602:80d:1004::30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"an-Dis5AS_anSW8Qfdui7wAAAIA\"]
show less
Requests sent with a known malicious or scanner user-agent | req: / | 2 distinct paths | UA: Mozilla ...
show moreRequests sent with a known malicious or scanner user-agent | req: / | 2 distinct paths | UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
show less
[ThuAug0605:28:15.1767542026][security2:error][pid3495765:tid3495793][client2602:80d:1004::30:0]ModS ...
show more[ThuAug0605:28:15.1767542026][security2:error][pid3495765:tid3495793][client2602:80d:1004::30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.globalhorizon.ch\"][uri\"/\"][unique_id\"anP_T0nnLLuJBraSLjw2PgAAABE\"]
show less
[TueAug0416:35:58.9416702026][security2:error][pid1076981:tid1077257][client2602:80d:1004::30:0]ModS ...
show more[TueAug0416:35:58.9416702026][security2:error][pid1076981:tid1077257][client2602:80d:1004::30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"anH4zk3Gfd0SBxVBBxdzLgAAAVg\"]
show less