This IP was reported 212 times. Confidence of
Abuse
is 75%: ?
75%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
212
times from
72 distinct
sources.
2602:80d:1004::3a was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
crowdsecurity/http-bad-user-agent detected by CrowdSec IDS on zaena.us (5.161.105.50). Scenario: cro ...
show morecrowdsecurity/http-bad-user-agent detected by CrowdSec IDS on zaena.us (5.161.105.50). Scenario: crowdsecurity/http-bad-user-agent.
show less
[SunJul2616:50:45.7962252026][security2:error][pid1745728:tid1745789][client2602:80d:1004::3a:0]ModS ...
show more[SunJul2616:50:45.7962252026][security2:error][pid1745728:tid1745789][client2602:80d:1004::3a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"amYexfkU4iiXNUrABcM37QAAAIA\"]
show less
[FriJul2415:33:41.1780732026][security2:error][pid2771121:tid2771450][client2602:80d:1004::3a:0]ModS ...
show more[FriJul2415:33:41.1780732026][security2:error][pid2771121:tid2771450][client2602:80d:1004::3a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.eimeko.ch\"][uri\"/\"][unique_id\"amNptVEBwCBN32qAFzPiTQAAAIs\"]
show less
[FriJul2405:02:18.3059742026][security2:error][pid1564732:tid1564961][client2602:80d:1004::3a:0]ModS ...
show more[FriJul2405:02:18.3059742026][security2:error][pid1564732:tid1564961][client2602:80d:1004::3a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.hosting-dominio.com\"][uri\"/\"][unique_id\"amLVuuatRXM_v0leay3UzgAAAQk\"]
show less
Triggered crowdsecurity/http-bad-user-agent. More information at: https://app.crowdsec.net/cti/2602: ...
show moreTriggered crowdsecurity/http-bad-user-agent. More information at: https://app.crowdsec.net/cti/2602:80d:1004::3a
show less
[ThuJul2322:40:30.3984122026][security2:error][pid2218445:tid2218500][client2602:80d:1004::3a:0]ModS ...
show more[ThuJul2322:40:30.3984122026][security2:error][pid2218445:tid2218500][client2602:80d:1004::3a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"furgonianoleggio.ch\"][uri\"/\"][unique_id\"amJ8PuCfLi4qRAdPrzDHvQAAAFM\"]
show less
2602:80d:1004::3a has been banned for triggering http-bad-user-agent (2 events over 2.536865683s). T ...
show more2602:80d:1004::3a has been banned for triggering http-bad-user-agent (2 events over 2.536865683s). The user-agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) is not allowed.
show less