This IP was reported 215 times. Confidence of
Abuse
is 97%: ?
97%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
215
times from
56 distinct
sources.
2602:80d:1007::2d was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2602:80d:1007::2d has been banned for triggering http-bad-user-agent (2 events over 6.754837759s). T ...
show more2602:80d:1007::2d has been banned for triggering http-bad-user-agent (2 events over 6.754837759s). The user-agent http_access-log is not allowed.
show less
[MonMay0403:10:37.1068412026][security2:error][pid3743588:tid3743681][client2602:80d:1007::2d:0]ModS ...
show more[MonMay0403:10:37.1068412026][security2:error][pid3743588:tid3743681][client2602:80d:1007::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"balso.autoeuro.lv\"][uri\"/\"][unique_id\"affyDdBrpqh0IRJDEQvgPAAAAMM\"]
show less
[FriMay0121:11:22.2256052026][security2:error][pid738475:tid740168][client2602:80d:1007::2d:0]ModSec ...
show more[FriMay0121:11:22.2256052026][security2:error][pid738475:tid740168][client2602:80d:1007::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"afT62n5NPzxJ9daYdDvMuAAAAQ0\"]
show less
Hacking
Web App Attack
Anonymous
Fail2Ban triggered
Web App Attack
Anonymous
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
[TueApr2806:50:25.0692352026][security2:error][pid197761:tid197901][client2602:80d:1007::2d:0]ModSec ...
show more[TueApr2806:50:25.0692352026][security2:error][pid197761:tid197901][client2602:80d:1007::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.titrasloco.com\"][uri\"/\"][unique_id\"afA8kabKzEViUuDpXOQfnwAAAcQ\"]
show less
Repeated bad requests to web service - Repeat offender 2602:80d:1007::2d banned at least 2 times in ...
show moreRepeated bad requests to web service - Repeat offender 2602:80d:1007::2d banned at least 2 times in the last 7 days
show less
[SatApr2513:03:35.5455412026][security2:error][pid670705:tid670797][client2602:80d:1007::2d:0]ModSec ...
show more[SatApr2513:03:35.5455412026][security2:error][pid670705:tid670797][client2602:80d:1007::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"aeyfh41n1zESui54AX-rzgAAAc0\"]
show less
[ThuApr2322:15:53.4682922026][security2:error][pid2549304:tid2549384][client2602:80d:1007::2d:0]ModS ...
show more[ThuApr2322:15:53.4682922026][security2:error][pid2549304:tid2549384][client2602:80d:1007::2d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.mjgold.ch\"][uri\"/\"][unique_id\"aep9-R1K_uYVj_QjTa3LEAAAAJM\"]
show less