This IP was reported 157 times. Confidence of
Abuse
is 83%: ?
83%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
157
times from
44 distinct
sources.
2602:80d:1007::bf was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SunMay2414:25:50.0863522026][security2:error][pid2528711:tid2528796][client2602:80d:1007::bf:0]ModS ...
show more[SunMay2414:25:50.0863522026][security2:error][pid2528711:tid2528796][client2602:80d:1007::bf:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"lascalasagl.ch\"][uri\"/\"][unique_id\"ahLuTr3NpYO_zkNNNRu1ZwAAAJI\"]
show less
Blocked by CrowdSec | Scenario: crowdsecurity/http-bad-user-agent | 2602:80d:1007::bf triggered 2 ev ...
show moreBlocked by CrowdSec | Scenario: crowdsecurity/http-bad-user-agent | 2602:80d:1007::bf triggered 2 events | Detected: 2026-05-22T15:22:57.290853996Z
show less
[WedMay2022:42:34.6491392026][security2:error][pid841852:tid841928][client2602:80d:1007::bf:0]ModSec ...
show more[WedMay2022:42:34.6491392026][security2:error][pid841852:tid841928][client2602:80d:1007::bf:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.specialfood.ch\"][uri\"/\"][unique_id\"ag4cupcRSz9jPfvDWySHKAAAAIY\"]
show less
[TueMay1902:51:29.4019692026][security2:error][pid2027956:tid2028046][client2602:80d:1007::bf:0]ModS ...
show more[TueMay1902:51:29.4019692026][security2:error][pid2027956:tid2028046][client2602:80d:1007::bf:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"osteriabreno.ch\"][uri\"/\"][unique_id\"agu0EWei9eIyX7C_LnTkSgAAAMQ\"]
show less
[SatMay1618:13:33.1839792026][security2:error][pid2534869:tid2534968][client2602:80d:1007::bf:0]ModS ...
show more[SatMay1618:13:33.1839792026][security2:error][pid2534869:tid2534968][client2602:80d:1007::bf:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.residence.chesasilva.ch\"][uri\"/\"][unique_id\"agiXrdv_WIWMxhd-7LgjagAAAQQ\"]
show less
[WedMay1305:04:59.4097602026][security2:error][pid1021123:tid1021240][client2602:80d:1007::bf:0]ModS ...
show more[WedMay1305:04:59.4097602026][security2:error][pid1021123:tid1021240][client2602:80d:1007::bf:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.manuclean.ch\"][uri\"/\"][unique_id\"agPqW6i7imF2S10bQUyBPwAAAQY\"]
show less