This IP was reported 439 times. Confidence of
Abuse
is 100%: ?
100%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
439
times from
86 distinct
sources.
2602:80d:1007::33 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[FriOct1617:12:31.3015582026][security2:error][pid1342703:tid1342847][client2602:80d:1007::33:0]ModS ...
show more[FriOct1617:12:31.3015582026][security2:error][pid1342703:tid1342847][client2602:80d:1007::33:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.esengineering.ch\"][uri\"/\"][unique_id\"atI-349hT45dO8nygBCtpgAAARU\"]
show less
[TueOct1315:12:55.6463042026][security2:error][pid1106890:tid1106955][client2602:80d:1007::33:0]ModS ...
show more[TueOct1315:12:55.6463042026][security2:error][pid1106890:tid1106955][client2602:80d:1007::33:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"as4uV5j6FdCxHMUw76PXPwAAAQM\"]
show less
CrowdSec detected Malicious web crawler or bad web bot. Scenario: crowdsecurity/http-bad-user-agent. ...
show moreCrowdSec detected Malicious web crawler or bad web bot. Scenario: crowdsecurity/http-bad-user-agent. Automatic ban triggered. Detection time (UTC): 2026-10-12T20:45:10.252193464Z. Context: http_status=200
show less
2026/10/12 06:22:05 [error] 2324658#2324658: *1200586 FastCGI sent in stderr: "PHP message: BOT WARN ...
show more2026/10/12 06:22:05 [error] 2324658#2324658: *1200586 FastCGI sent in stderr: "PHP message: BOT WARNING: visitor used the honeypot: 2602:80d:1007::33, url was '[2001:19f0:7401:83f9:5400:6ff:fea1:ecae]' and abuseipdb '100', function: ELP_site_live" while reading upstream, client: 2602:80d:1007::33, server: www.elivecd.org, request: "GET / HTTP/1.1", upstream: "fastcgi://unix:/run/php/php8.4-fpm-elivewp.sock:", host: "[2001:19f0:7401:83f9:5400:6ff:fea1:ecae]"
...
show less
[SatOct1019:22:02.2549592026][security2:error][pid1340160:tid1340213][client2602:80d:1007::33:0]ModS ...
show more[SatOct1019:22:02.2549592026][security2:error][pid1340160:tid1340213][client2602:80d:1007::33:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"asp0OjaCim5ZXuk1JkUloQAAAUU\"]
show less