This IP was reported 246 times. Confidence of
Abuse
is 75%: ?
75%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
246
times from
60 distinct
sources.
2602:80d:1007::2a was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[FriOct1610:21:29.5822452026][security2:error][pid4181257:tid4181377][client2602:80d:1007::2a:0]ModS ...
show more[FriOct1610:21:29.5822452026][security2:error][pid4181257:tid4181377][client2602:80d:1007::2a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.4server.biz\"][uri\"/\"][unique_id\"atHeiQbVdfj51Iunsr9mvAAAAQ0\"]
show less
[ThuOct1515:22:02.9551612026][security2:error][pid4034792:tid4034924][client2602:80d:1007::2a:0]ModS ...
show more[ThuOct1515:22:02.9551612026][security2:error][pid4034792:tid4034924][client2602:80d:1007::2a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"asw-sa.com\"][uri\"/\"][unique_id\"atDTejBYTWTs04SxY9lnJAAAARQ\"]
show less
[TueOct1318:44:00.3104732026][security2:error][pid1309873:tid1309916][client2602:80d:1007::2a:0]ModS ...
show more[TueOct1318:44:00.3104732026][security2:error][pid1309873:tid1309916][client2602:80d:1007::2a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"essesolution.ch\"][uri\"/\"][unique_id\"as5f0ImbRRYEgIbdX6kQ3wAAAIc\"]
show less
Automated reconnaissance behaviour detected by CrowdSec - 2 suspicious requests across application p ...
show moreAutomated reconnaissance behaviour detected by CrowdSec - 2 suspicious requests across application paths. Classified as known-bad scanner user-agent (scenario "http-bad-user-agent", in our own server logs). Behavioural detection, auto-banned at the firewall.
show less
CrowdSec detected Malicious web crawler or bad web bot. Scenario: crowdsecurity/http-bad-user-agent. ...
show moreCrowdSec detected Malicious web crawler or bad web bot. Scenario: crowdsecurity/http-bad-user-agent. Automatic ban triggered. Detection time (UTC): 2026-10-13T14:14:56.729268356Z. Context: http_status=200
show less
[TueOct1301:44:30.4234232026][security2:error][pid276802:tid276935][client2602:80d:1007::2a:0]ModSec ...
show more[TueOct1301:44:30.4234232026][security2:error][pid276802:tid276935][client2602:80d:1007::2a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"as1w3q7-9-yduI1JSkSlUQAAAlg\"]
show less
[SatOct1016:35:00.3357282026][security2:error][pid1171432:tid1171456][client2602:80d:1007::2a:0]ModS ...
show more[SatOct1016:35:00.3357282026][security2:error][pid1171432:tid1171456][client2602:80d:1007::2a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.dellafoglia.ch\"][uri\"/\"][unique_id\"aspNFEADucbnPlkrmE7rVwAAAAM\"]
show less