AbuseIPDB » 2602:80d:1007::64
2602:80d:1007::64 was found in our database!
This IP was reported 181 times. Confidence of Abuse is 91%: ?
Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.
| ISP | Censys, Inc. |
|---|---|
| Usage Type | Commercial |
| ASN | AS398324 |
| Domain Name | censys.com |
| Country | 🇺🇸 United States of America |
| City | Chicago, Illinois |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 2602:80d:1007::64:
This IP address has been reported a total of 181 times from 50 distinct sources. 2602:80d:1007::64 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇩🇪 4server |
|
Port Scan Brute-Force Web App Attack | ||
| Anonymous |
2602:80d:1007::64 - - [10/Apr/2026:01:41:32 +0000] "\x16\x03\x01\x01\x07\x01" 400 432 "-" "-"
...
|
Bad Web Bot Web App Attack | ||
| 🇩🇪 ecs.ge |
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
|
Web App Attack Hacking | ||
| Anonymous |
2602:80d:1007::64 - - [08/Apr/2026:19:10:46 +0000] "\x16\x03\x01\x01\x10\x01" 400 432 "-" "-"
...
|
Bad Web Bot Web App Attack | ||
| 🇩🇰 swrlly |
1 unauthorized webserver connection
|
Web App Attack | ||
| 🇩🇪 pscriptos |
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
|
Web App Attack Bad Web Bot | ||
| 🇳🇱 ParaBug |
2602:80d:1007::64 - - [05/Apr/2026:14:02:08 +0200] "\x16\x03\x01\x01\n" 400 432 "-" "-"
...
|
Phishing Brute-Force Web App Attack | ||
| 🇫🇷 pm33 |
Unsolicited connection attempts or aggressive port scan.
|
Port Scan | ||
| 🇺🇸 VanKoh |
|
DDoS Attack Web App Attack | ||
| 🇺🇸 Starburst SysOp Team |
Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-17)
|
Hacking Bad Web Bot | ||
| Anonymous |
Fail2Ban triggered
|
Bad Web Bot | ||
| 🇺🇸 Starburst SysOp Team |
Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-17)
|
Hacking Bad Web Bot | ||
| 🇫🇮 6kilowatti |
2602:80d:1007::64 - - [25/Mar/2026:19:51:39 +0200] "PRI * HTTP/2.0" 400 157 "-" "-"
...
|
Web App Attack | ||
| Anonymous |
2602:80d:1007::64 - - [24/Mar/2026:21:03:06 +0000] "\x16\x03\x01\x01\x02\x01" 400 432 "-" "-"
...
|
Bad Web Bot Web App Attack | ||
| 🇫🇮 6kilowatti |
2602:80d:1007::64 - - [23/Mar/2026:17:45:52 +0200] "PRI * HTTP/2.0" 400 157 "-" "-"
...
|
Web App Attack |
Showing 166 to 180 of 181 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩