JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2602:80d:1004::39

2602:80d:1004::39 was found in our database!

This IP was reported 198 times. Confidence of Abuse is 57%: ?

57%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398722
Hostname(s)	scanner-206.hk2.censys-scanner.com
Domain Name	censys.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2602:80d:1004::39

Whois 2602:80d:1004::39

IP Abuse Reports for 2602:80d:1004::39:

This IP address has been reported a total of 198 times from 64 distinct sources. 2602:80d:1004::39 was first reported on April 21st 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 LRob	2026-07-08 16:20:39 (13 hours ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/"] \| UA: ["Mozilla/5.0 (compatible; CensysInsp ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/"] \| UA: ["Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"] show less	Bad Web Bot
🇩🇪 4server	2026-07-08 14:49:03 (15 hours ago)	[WedJul0816:48:58.2922622026][security2:error][pid2856523:tid2856588][client2602:80d:1004::39:0]ModS ... show more [WedJul0816:48:58.2922622026][security2:error][pid2856523:tid2856588][client2602:80d:1004::39:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"ak5jWif-OwlZb_4H968fjwAAAIQ\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-07-07 10:01:40 (1 day ago)	[TueJul0712:01:37.6029582026][security2:error][pid1215430:tid1215481][client2602:80d:1004::39:0]ModS ... show more [TueJul0712:01:37.6029582026][security2:error][pid1215430:tid1215481][client2602:80d:1004::39:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.feldenkraisticino.ch\"][uri\"/\"][unique_id\"akzOgdD-Wo4DaUBmGoioxAAAAEE\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 Charlesiv	2026-07-07 02:20:48 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK ASN: 398722 (Censys, Inc.) Pr ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK ASN: 398722 (Censys, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-07-07T00:26:08Z Ray ID: a172b748dac27afa UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) show less	Bad Web Bot
🇨🇭 4server	2026-07-05 15:26:15 (3 days ago)	[SunJul0517:26:12.3491122026][security2:error][pid3455218:tid3455351][client2602:80d:1004::39:0]ModS ... show more [SunJul0517:26:12.3491122026][security2:error][pid3455218:tid3455351][client2602:80d:1004::39:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"akp3lLLfjamyrvuEcfRfEgAAABQ\"] show less	Hacking Web App Attack
🇸🇬 Starburst SysOp Team	2026-07-05 10:22:26 (3 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-sin2-2)	Hacking Bad Web Bot
🇩🇪 filstal.org	2026-07-03 20:41:43 (5 days ago)	Bad bot activity detected (automated scraping/probing).	Bad Web Bot Web App Attack
🇦🇺 Anytech	2026-06-28 01:16:57 (1 week ago)	Blocked by Conn-Monitor: Automated bot activity	Web App Attack
🇺🇸 oralunal	2026-06-27 10:25:46 (1 week ago)	IP banned by Fail2Ban in jail its-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-24 06:13:51 (2 weeks ago)	[WedJun2408:13:46.8674762026][security2:error][pid3880602:tid3880661][client2602:80d:1004::39:0]ModS ... show more [WedJun2408:13:46.8674762026][security2:error][pid3880602:tid3880661][client2602:80d:1004::39:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.cbri.ch\"][uri\"/\"][unique_id\"ajt1mqsHzta1eT7iu07BUwAAAMQ\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-06-22 20:25:09 (2 weeks ago)	[MonJun2222:25:05.0426762026][security2:error][pid2175485:tid2175522][client2602:80d:1004::39:0]ModS ... show more [MonJun2222:25:05.0426762026][security2:error][pid2175485:tid2175522][client2602:80d:1004::39:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.cst-ranghetti.ch\"][uri\"/\"][unique_id\"ajmaIWaCgaXBwkYHFGxeKAAAABY\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-06-20 20:36:41 (2 weeks ago)	[SatJun2022:36:35.7475242026][security2:error][pid3743230:tid3743243][client2602:80d:1004::39:0]ModS ... show more [SatJun2022:36:35.7475242026][security2:error][pid3743230:tid3743243][client2602:80d:1004::39:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.monteco-suisse.ch\"][uri\"/\"][unique_id\"ajb509gLbX_PKmzQP6i4KwAAAIo\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 NonOggiCaroMio	2026-06-14 07:11:24 (3 weeks ago)	Arruso ca si: crowdsecurity/http-bad-user-agent	Brute-Force
🇩🇪 4server	2026-06-13 06:46:46 (3 weeks ago)	[SatJun1308:46:41.0836662026][security2:error][pid722144:tid722219][client2602:80d:1004::39:0]ModSec ... show more [SatJun1308:46:41.0836662026][security2:error][pid722144:tid722219][client2602:80d:1004::39:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.lascalasagl.ch\"][uri\"/\"][unique_id\"aiz80deDsZtBNRh59VJ62gAAAIw\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-06-12 10:27:17 (3 weeks ago)	Scenarios: http-bad-user-agent Total requests: 9 [12/Jun/2026:10:26:29 +0000] [Client: 2602:80d:1004 ... show more Scenarios: http-bad-user-agent Total requests: 9 [12/Jun/2026:10:26:29 +0000] [Client: 2602:80d:1004::39] GET [200] "/ HTTP/1.1" User-Agent: "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" [12/Jun/2026:10:26:32 +0000] [Client: 2602:80d:1004::39] PRI [400] "* HTTP/2.0" User-Agent: "-" [12/Jun/2026:10:26:33 +0000] [Client: 2602:80d:1004::39] [400] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03l\xBF\xCC\x8DW\xA2" User-Agent: "-" [12/Jun/2026:10:27:16 +0000] [Client: 2602:80d:1004::39] GET [200] "/robots.txt HTTP/1.1" User-Agent: "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" [12/Jun/2026:10:27:18 +0000] [Client: 2602:80d:1004::39] GET [200] "/favicon.ico HTTP/1.1" User-Agent: "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" [12/Jun/2026:10:27:18 +0000] [Client: 2602:80d:1004::39] [400] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03g\xED\xA2\xE3\xCDW\x5C\x98\x98\x80\x934\xA3\xD6\xE9\x81+n" User-Agent: "-" show less	Web App Attack

Showing 1 to 15 of 198 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.131

🇭🇰 123.58.210.86

🇺🇸 45.156.129.60

🇺🇸 2607:f8b0:400e:c02::125

🇬🇧 216.226.76.30

🇺🇸 192.34.128.202

🇧🇷 177.38.71.226

🇵🇱 176.53.159.197

🇨🇳 175.30.48.201

🇨🇳 171.12.10.220

🇳🇱 160.119.71.92

🇨🇳 116.181.11.15

🇰🇷 112.161.26.125

🇫🇷 51.68.107.149

🇩🇪 216.132.188.48

🇵🇱 176.53.159.198

🇮🇩 165.154.48.160

🇺🇸 162.216.149.166

🇫🇷 91.196.152.184

🇳🇱 91.92.42.19