This IP was reported 133 times. Confidence of
Abuse
is 85%: ?
85%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
133
times from
43 distinct
sources.
2602:80d:1007::cb was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[MonMay1106:02:05.0432312026][security2:error][pid1966765:tid1966884][client2602:80d:1007::cb:0]ModS ...
show more[MonMay1106:02:05.0432312026][security2:error][pid1966765:tid1966884][client2602:80d:1007::cb:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"cxservices.ch\"][uri\"/\"][unique_id\"agFUvT5LBJTKwuBQ92KcbQAAAQg\"]
show less
Port Scan
Brute-Force
Web App Attack
Anonymous
Scenarios: http-bad-user-agent
Total requests: 4
[10/May/2026:18:47:00 +0000] [Client: 2602:80d:1007 ...
show moreScenarios: http-bad-user-agent
Total requests: 4
[10/May/2026:18:47:00 +0000] [Client: 2602:80d:1007::cb] GET [200] "/ HTTP/1.1" User-Agent: "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
[10/May/2026:18:47:02 +0000] [Client: 2602:80d:1007::cb] PRI [400] "* HTTP/2.0" User-Agent: "-"
[10/May/2026:18:47:02 +0000] [Client: 2602:80d:1007::cb] [400] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03`\x86\xB2\x82\xB7\x05\x03WD\x96#\xB7\xEEj\xC7\x9B\xE3\xF4uh\xDB2Q?\xA8\x18\xCC\x06\xCC\x9E\xF5F \x13\xC3pyL\xB3;\xAB$\xC4DS\x07\xEFd\x835\x1F!\xF9$^\xB6df\xE6\xFC\x9A\xEC\xCD8y\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" User-Agent: "-"
[10/May/2026:18:47:03 +0000] [Client: 2602:80d:1007::cb] GET [200] "/favicon.ico HTTP/1.1" User-Agent: "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
show less
2602:80d:1007::cb has been banned for triggering http-bad-user-agent (2 events over 3.880505556s). T ...
show more2602:80d:1007::cb has been banned for triggering http-bad-user-agent (2 events over 3.880505556s). The user-agent http_access-log is not allowed.
show less
[WedMay0614:02:22.8055382026][security2:error][pid3180650:tid3180786][client2602:80d:1007::cb:0]ModS ...
show more[WedMay0614:02:22.8055382026][security2:error][pid3180650:tid3180786][client2602:80d:1007::cb:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.aaaa6877.org\"][uri\"/\"][unique_id\"afstzmaMz8edCH6zpMoLSQAAARg\"]
show less
2026-05-05T16:32:15.655228+02:00 mx1 sshd-session[1347496]: Connection closed by 2602:80d:1007::cb p ...
show more2026-05-05T16:32:15.655228+02:00 mx1 sshd-session[1347496]: Connection closed by 2602:80d:1007::cb port 45396 [preauth]
show less
[TueMay0508:05:48.1243502026][security2:error][pid1297418:tid1297492][client2602:80d:1007::cb:0]ModS ...
show more[TueMay0508:05:48.1243502026][security2:error][pid1297418:tid1297492][client2602:80d:1007::cb:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.safeoncloud.ch\"][uri\"/\"][unique_id\"afmIvMDni3bFu-ZTNUKmIQAAAIo\"]
show less