This IP was reported 372 times. Confidence of
Abuse
is 75%: ?
75%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
372
times from
79 distinct
sources.
2602:80d:1007::30 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[WedOct1416:33:17.8987322026][security2:error][pid2622529:tid2622625][client2602:80d:1007::30:0]ModS ...
show more[WedOct1416:33:17.8987322026][security2:error][pid2622529:tid2622625][client2602:80d:1007::30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.eimeko.ch\"][uri\"/\"][unique_id\"as-SrXOWmWlobgoq1id3UwAAAgg\"]
show less
Automated reconnaissance behaviour detected by CrowdSec - 2 suspicious requests across application p ...
show moreAutomated reconnaissance behaviour detected by CrowdSec - 2 suspicious requests across application paths. Classified as known-bad scanner user-agent (scenario "http-bad-user-agent", in our own server logs). Behavioural detection, auto-banned at the firewall.
show less
[MonOct1213:21:38.8269482026][security2:error][pid3738018:tid3738142][client2602:80d:1007::30:0]ModS ...
show more[MonOct1213:21:38.8269482026][security2:error][pid3738018:tid3738142][client2602:80d:1007::30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"aszCwomUV-srsNek9vZ8FgAAAZI\"]
show less
[SunOct1115:29:13.6757262026][security2:error][pid2478344:tid2478404][client2602:80d:1007::30:0]ModS ...
show more[SunOct1115:29:13.6757262026][security2:error][pid2478344:tid2478404][client2602:80d:1007::30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"gm-swiss.ch\"][uri\"/\"][unique_id\"asuPKdhonWNaDpxZwku6GwAAAZg\"]
show less
[FriOct0919:23:58.8865312026][security2:error][pid2932554:tid2932619][client2602:80d:1007::30:0]ModS ...
show more[FriOct0919:23:58.8865312026][security2:error][pid2932554:tid2932619][client2602:80d:1007::30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"askjLrLfpwMIVfpt36s5UwAAAMQ\"]
show less
[FriOct0905:51:24.1541522026][security2:error][pid3281155:tid3281203][client2602:80d:1007::30:0]ModS ...
show more[FriOct0905:51:24.1541522026][security2:error][pid3281155:tid3281203][client2602:80d:1007::30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.tecnospinasagl.ch\"][uri\"/\"][unique_id\"ashkvNRlMlmoR6iphLp3tAAAAMg\"]
show less