JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2602:80d:1007::4f

2602:80d:1007::4f was found in our database!

This IP was reported 236 times. Confidence of Abuse is 97%: ?

97%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Domain Name	censys.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2602:80d:1007::4f

Whois 2602:80d:1007::4f

IP Abuse Reports for 2602:80d:1007::4f:

This IP address has been reported a total of 236 times from 58 distinct sources. 2602:80d:1007::4f was first reported on March 25th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 gomasy	2026-08-26 03:52:24 (3 hours ago)	_:80 2602:80d:1007::4f - - [26/Aug/2026:12:52:23 +0900] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x0 ... show more _:80 2602:80d:1007::4f - - [26/Aug/2026:12:52:23 +0900] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xAD\x8D(\x0E-o\xBD\xA7Gh\xFB\xEFpBs\|\x91\x87\xA9\xF4_\xD4\xD7`\x84\x91\x0F\xCDk\xC8]\xB7 ^\x08=\x98\x22\xF4\x80\xEA\x7F\xDF\xAC\x0E\xA2[\xF4r\xB2\xBA\xE5\xCD\xB4\x08\xC3\xE3" 500 170 "-" "-" ... show less	Web App Attack
🇺🇸 Starburst SysOp Team	2026-08-25 12:39:25 (19 hours ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-14)	Hacking Bad Web Bot
🇫🇮 6kilowatti	2026-08-25 01:21:32 (1 day ago)	2602:80d:1007::4f - - [25/Aug/2026:04:21:30 +0300] "GET /security.txt HTTP/1.1" 404 1823 "-" "Mozill ... show more 2602:80d:1007::4f - - [25/Aug/2026:04:21:30 +0300] "GET /security.txt HTTP/1.1" 404 1823 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" ... show less	Web App Attack
🇯🇵 gomasy	2026-08-24 22:35:57 (1 day ago)	_:443 2602:80d:1007::4f - - [25/Aug/2026:07:35:57 +0900] "\x00\x04\x08*\x10\x00" 500 170 "-" "-" ...	Web App Attack
🇺🇸 LotPhantom	2026-08-24 15:45:36 (1 day ago)	2602:80d:1007::4f - - [24/Aug/2026:15:44:35 +0000] "GET / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compat ... show more 2602:80d:1007::4f - - [24/Aug/2026:15:44:35 +0000] "GET / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "0" ... show less	Web App Attack
🇭🇺 kranem	2026-08-23 03:00:16 (3 days ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 398324 (Censys, Inc.) Protocol: HTTP/1.1 ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 398324 (Censys, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-23T01:54:10Z User-Agent: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) show less	Bad Web Bot
🇩🇪 LRob	2026-08-21 03:34:31 (5 days ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) \| path: / (+1 more) show less	Bad Web Bot
Anonymous	2026-08-19 04:35:28 (1 week ago)	2602:80d:1007::4f - - [19/Aug/2026:04:35:28 +0000] "\x16\x03\x01" 400 432 "-" "-" ...	Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-08-18 20:46:33 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 4server	2026-08-18 02:02:01 (1 week ago)	[TueAug1804:01:58.8379732026][security2:error][pid357410:tid357513][client2602:80d:1007::4f:0]ModSec ... show more [TueAug1804:01:58.8379732026][security2:error][pid357410:tid357513][client2602:80d:1007::4f:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.special-home.ch\"][uri\"/\"][unique_id\"aoO9FpfustzOiy9znxrrlgAAAIM\"] show less	Port Scan Brute-Force Web App Attack
🇯🇵 gomasy	2026-08-17 21:14:10 (1 week ago)	_:80 2602:80d:1007::4f - - [18/Aug/2026:06:14:09 +0900] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x0 ... show more _:80 2602:80d:1007::4f - - [18/Aug/2026:06:14:09 +0900] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x10wF_\xBAH3\x93" 500 170 "-" "-" ... show less	Web App Attack
🇯🇵 gomasy	2026-08-17 07:27:19 (1 week ago)	_:80 2602:80d:1007::4f - - [17/Aug/2026:16:27:18 +0900] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x0 ... show more _:80 2602:80d:1007::4f - - [17/Aug/2026:16:27:18 +0900] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x8B\x8C\x0C\xE38\xA6H\xC1m\xC4\x19M \x07e\x92\xA9U\xBC\x8D)e\xD3\x04\x99\xCD\xFB\xB5\xF0\x83\x19# \xEA\xEE\xE2\xE8\xC3\x0C\x01w\xED\x85\xE8\x17\xC7\x9A\x0E\xEB\xE9-\xDF\xB8\xC2\x03\x94\x9C\xB6\x9Cn\xDF\xD1\x19\x10V\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 500 170 "-" "-" ... show less	Web App Attack
Anonymous	2026-08-16 14:06:01 (1 week ago)	2602:80d:1007::4f - - [16/Aug/2026:14:06:01 +0000] "\x16\x03\x01" 400 432 "-" "-" ...	Bad Web Bot Web App Attack
🇩🇪 yvoictra	2026-08-16 03:09:01 (1 week ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-bad-user-agent	Web App Attack
🇹🇷 neron	2026-08-15 21:06:48 (1 week ago)	CrowdSec blocked: http:scan detected via OPNsense firewall	Hacking Web App Attack

Showing 1 to 15 of 236 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 171.38.238.73

🇨🇦 142.198.181.179

🇯🇵 115.179.102.180

🇺🇸 85.239.151.10

🇧🇪 34.78.135.95

🇺🇸 216.73.216.108

🇧🇷 201.75.188.172

🇺🇸 150.107.38.111

🇸🇬 146.190.86.151

🇮🇳 103.186.222.208

🇪🇸 85.152.57.60

🇧🇬 79.124.62.230

🇹🇷 78.174.112.103

🇺🇸 70.127.212.95

🇺🇸 66.240.205.34

🇺🇸 20.42.110.118

🇻🇳 14.179.132.152

🇲🇽 186.96.145.241

🇺🇸 162.216.150.129

🇸🇬 143.198.80.191