This IP was reported 213 times. Confidence of
Abuse
is 100%: ?
100%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
213
times from
55 distinct
sources.
2602:80d:1007::5a was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SatAug0111:19:39.8453082026][security2:error][pid1322278:tid1322417][client2602:80d:1007::5a:0]ModS ...
show more[SatAug0111:19:39.8453082026][security2:error][pid1322278:tid1322417][client2602:80d:1007::5a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.gruppobalu.com\"][uri\"/images/favicon.ico\"][unique_id\"am26K13r49gNTCREO6C7DwAAARc\"]
show less
[SatAug0110:56:00.0054992026][security2:error][pid2805001:tid2805245][client2602:80d:1007::5a:0]ModS ...
show more[SatAug0110:56:00.0054992026][security2:error][pid2805001:tid2805245][client2602:80d:1007::5a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"salonesamire.ch\"][uri\"/wp-content/uploads/2020/09/cropped-favicon-2-192x192.png\"][unique_id\"am20n4iU6eHsGP_RgtPEFAAAAIQ\"]
show less
Hacking
Web App Attack
Anonymous
CrowdSec blocked IP for crowdsecurity/http-bad-user-agent on vps_agent
[ThuJul3003:20:27.1384702026][security2:error][pid2306120:tid2306230][client2602:80d:1007::5a:0]ModS ...
show more[ThuJul3003:20:27.1384702026][security2:error][pid2306120:tid2306230][client2602:80d:1007::5a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"amqm27cVbL8TVcgMDbXxmQAAAMw\"]
show less
[ThuJul3000:11:26.4444982026][security2:error][pid3215903:tid3216184][client2602:80d:1007::5a:0]ModS ...
show more[ThuJul3000:11:26.4444982026][security2:error][pid3215903:tid3216184][client2602:80d:1007::5a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"amp6jki08Wl6QndGrDwN-AAAANY\"]
show less
2602:80d:1007::5a has been banned for triggering http-bad-user-agent (2 events over 5.320587129s). T ...
show more2602:80d:1007::5a has been banned for triggering http-bad-user-agent (2 events over 5.320587129s). The user-agent http_access-log is not allowed.
show less
[TueJul2821:42:03.8734722026][security2:error][pid572071:tid572106][client2602:80d:1007::5a:0]ModSec ...
show more[TueJul2821:42:03.8734722026][security2:error][pid572071:tid572106][client2602:80d:1007::5a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.mgpublishing.ch\"][uri\"/\"][unique_id\"amkGC2QXDuzCbKbc96kL4wAAABg\"]
show less
[MonJul2703:11:17.9339352026][security2:error][pid2315539:tid2315677][client2602:80d:1007::5a:0]ModS ...
show more[MonJul2703:11:17.9339352026][security2:error][pid2315539:tid2315677][client2602:80d:1007::5a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"sanierung-pilzen-schimmel-schweiz.ch\"][uri\"/\"][unique_id\"amawNYquORlNfkcgULJZaAAAARA\"]
show less
2602:80d:1007::5a has been banned for triggering http-bad-user-agent (2 events over 822.593782ms). T ...
show more2602:80d:1007::5a has been banned for triggering http-bad-user-agent (2 events over 822.593782ms). The user-agent http_access-log is not allowed.
show less
Bad Web Bot
Showing 1 to
15
of 213 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩