This IP was reported 163 times. Confidence of
Abuse
is 100%: ?
100%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
163
times from
52 distinct
sources.
2602:80d:1007::2b was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SatAug0118:12:40.8505862026][security2:error][pid1714444:tid1714545][client2602:80d:1007::2b:0]ModS ...
show more[SatAug0118:12:40.8505862026][security2:error][pid1714444:tid1714545][client2602:80d:1007::2b:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"am4a-OJVxQ3aWfUbPmv17QAAAMg\"]
show less
2602:80d:1007::2b has been banned for triggering http-bad-user-agent (2 events over 8.951817252s). T ...
show more2602:80d:1007::2b has been banned for triggering http-bad-user-agent (2 events over 8.951817252s). The user-agent http_access-log is not allowed.
show less
[ThuJul3009:25:04.2491792026][security2:error][pid2650309:tid2650382][client2602:80d:1007::2b:0]ModS ...
show more[ThuJul3009:25:04.2491792026][security2:error][pid2650309:tid2650382][client2602:80d:1007::2b:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.sisuconsulting.net\"][uri\"/\"][unique_id\"amr8UKV8IKmxHkqvtnEtOQAAAIw\"]
show less
CrowdSec: Ip 2602:80d:1007::2b performed 'crowdsecurity/http-bad-user-agent' (2 events over 4.256067 ...
show moreCrowdSec: Ip 2602:80d:1007::2b performed 'crowdsecurity/http-bad-user-agent' (2 events over 4.256067861s) at 2026-07-30 04:07:48.12218676 +0000 UTC (scenario: crowdsecurity/http-bad-user-agent)
show less
[TueJul2807:31:25.4756852026][security2:error][pid3922768:tid3922878][client2602:80d:1007::2b:0]ModS ...
show more[TueJul2807:31:25.4756852026][security2:error][pid3922768:tid3922878][client2602:80d:1007::2b:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"amg-rX7n3uiYT4UtS84OpwAAANg\"]
show less