This IP was reported 382 times. Confidence of
Abuse
is 100%: ?
100%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
382
times from
76 distinct
sources.
2602:80d:1007::33 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SunMay2422:41:50.5808412026][security2:error][pid1146675:tid1146839][client2602:80d:1007::33:0]ModS ...
show more[SunMay2422:41:50.5808412026][security2:error][pid1146675:tid1146839][client2602:80d:1007::33:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"ahNijqfDDBaWmput45LxLgAAAE8\"]
show less
[SatMay2318:06:51.6397992026][security2:error][pid1208683:tid1208800][client2602:80d:1007::33:0]ModS ...
show more[SatMay2318:06:51.6397992026][security2:error][pid1208683:tid1208800][client2602:80d:1007::33:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.serversvizzera.ch\"][uri\"/\"][unique_id\"ahHQmxJ3RiDBHV_E31JjsAAAAQk\"]
show less
[FriMay2208:01:05.2500072026][security2:error][pid3110211:tid3110343][client2602:80d:1007::33:0]ModS ...
show more[FriMay2208:01:05.2500072026][security2:error][pid3110211:tid3110343][client2602:80d:1007::33:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mgpublishing.ch\"][uri\"/\"][unique_id\"ag_xIWYKYJUKVXY13Vf9IwAAAQ0\"]
show less
[ThuMay2114:41:21.9408522026][security2:error][pid3491465:tid3491467][client2602:80d:1007::33:0]ModS ...
show more[ThuMay2114:41:21.9408522026][security2:error][pid3491465:tid3491467][client2602:80d:1007::33:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.r102.ch\"][uri\"/\"][unique_id\"ag79caWztunGwcGcd1PFBQAAAAA\"]
show less
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
Web App Attack
Hacking
Anonymous
2026-05-19T05:34:07.480413+02:00 mx1 sshd-session[1785878]: Connection closed by 2602:80d:1007::33 p ...
show more2026-05-19T05:34:07.480413+02:00 mx1 sshd-session[1785878]: Connection closed by 2602:80d:1007::33 port 4210 [preauth]
show less
[TueMay1901:15:47.6604582026][security2:error][pid2430985:tid2431002][client2602:80d:1007::33:0]ModS ...
show more[TueMay1901:15:47.6604582026][security2:error][pid2430985:tid2431002][client2602:80d:1007::33:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"agudoxf5w8Dw7E7cGJ8L1wAAAE4\"]
show less