AbuseIPDB » 2602:80d:1004::3a

2602:80d:1004::3a was found in our database!

This IP was reported 36 times. Confidence of Abuse is 31%: ?

31%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Censys Inc.
Usage Type	Search Engine Spider
Hostname(s)	scanner-206.hk2.censys-scanner.com
Domain Name	censys.io
Country	United States of America
City	Ann Arbor, Michigan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 2602:80d:1004::3a

Whois 2602:80d:1004::3a

IP Abuse Reports for 2602:80d:1004::3a:

This IP address has been reported a total of 36 times from 20 distinct sources. 2602:80d:1004::3a was first reported on April 22nd 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Murazaki	2024-10-10 22:00:20 (4 days ago)	2602:80d:1004::3a - - [10/Oct/2024:02:19:49 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03^\x8 ... show more2602:80d:1004::3a - - [10/Oct/2024:02:19:49 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03^\x80\x1Ft\x8B\xB91x\xC6\xB8\x05\xC8\xA9{\xF5\x89?n\xCD\xB3\x01@\xFD\x06\xC8ER_\xCCl\x11\xEF \x05m\xCC\x1D\xBE_\x12\xBA\xD8\xEFKs\xF1;5)\xB9Uk+\xECx\xCCF~\x84:\x00r4\x10v\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 500 170 "-" "-" "-" ... show less	Hacking
spyra.rocks	2024-10-10 00:52:42 (5 days ago)	NGINX	Bad Web Bot
spyra.rocks	2024-10-05 14:36:14 (1 week ago)	NGINX	Bad Web Bot
spyra.rocks	2024-10-03 22:01:13 (1 week ago)	NGINX	Bad Web Bot
spyra.rocks	2024-09-27 16:42:14 (2 weeks ago)	NGINX	Bad Web Bot
hostseries	2024-09-25 21:52:44 (2 weeks ago)	Trigger: PS_LIMIT	Brute-Force
keep_out	2024-09-20 23:08:56 (3 weeks ago)	nginx-400 from fail2ban-202 ...	Web App Attack
spyra.rocks	2024-09-19 00:12:29 (3 weeks ago)	NGINX	Bad Web Bot
spyra.rocks	2024-09-12 04:03:45 (1 month ago)	NGINX	Bad Web Bot
lavnet.net	2024-09-09 21:22:57 (1 month ago)	[Mon Sep 09 21:22:43.400528 2024] [authz_core:error] [pid 857065:tid 857065] [client 2602:80d:1004:: ... show more[Mon Sep 09 21:22:43.400528 2024] [authz_core:error] [pid 857065:tid 857065] [client 2602:80d:1004::3a:54878] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php [Mon Sep 09 21:22:43.400963 2024] [authz_core:error] [pid 857065:tid 857065] [client 2602:80d:1004::3a:54878] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php [Mon Sep 09 21:22:57.132419 2024] [authz_core:error] [pid 1083121:tid 1083121] [client 2602:80d:1004::3a:39960] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php ... show less	Brute-Force
Dennis	2024-08-17 02:08:01 (1 month ago)	2602:80d:1004::3a has been banned for triggering http-bad-user-agent (2 events over 835.598031ms). T ... show more2602:80d:1004::3a has been banned for triggering http-bad-user-agent (2 events over 835.598031ms). The user-agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) is not allowed. show less	Bad Web Bot
Anonymous	2024-08-15 18:35:21 (1 month ago)		DNS Compromise DDoS Attack
geot	2024-08-14 00:04:50 (2 months ago)	PRI * HTTP/2.0	Port Scan Hacking
geot	2024-08-06 12:32:28 (2 months ago)	PRI * HTTP/2.0	Port Scan Hacking
w-e-c-l-o-u-d-i-t	2024-08-04 03:07:20 (2 months ago)	(mod_security) mod_security (id:210832) triggered by 2602:80d:1004::3a (scanner-206.hk2.censys-scann ... show more(mod_security) mod_security (id:210832) triggered by 2602:80d:1004::3a (scanner-206.hk2.censys-scanner.com): 1 in the last 600 secs; Ports: *; Direction: 0; Trigger: LF_MODSEC show less	Brute-Force SSH