This IP was reported 58 times. Confidence of
Abuse
is 59%: ?
59%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
58
times from
27 distinct
sources.
2602:80d:1007::cd was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[WedJun0317:05:47.5394882026][security2:error][pid1922962:tid1923016][client2602:80d:1007::cd:0]ModS ...
show more[WedJun0317:05:47.5394882026][security2:error][pid1922962:tid1923016][client2602:80d:1007::cd:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"aiBCy622sc38SczFwHu7PgAAAEk\"]
show less
[SunMay3116:36:48.0133512026][security2:error][pid4024994:tid4025241][client2602:80d:1007::cd:0]ModS ...
show more[SunMay3116:36:48.0133512026][security2:error][pid4024994:tid4025241][client2602:80d:1007::cd:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a02:29b8:dc01:545::625:de4f\"][uri\"/\"][unique_id\"ahxHgMiChMElajcBlrvKFwAAARU\"]
show less
[SatMay3009:28:44.2775272026][security2:error][pid3455773:tid3455831][client2602:80d:1007::cd:0]ModS ...
show more[SatMay3009:28:44.2775272026][security2:error][pid3455773:tid3455831][client2602:80d:1007::cd:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.gustotondo.ch\"][uri\"/\"][unique_id\"ahqRrDymTas79vF3wlJ7qAAAAEs\"]
show less
[WedMay2720:38:54.3306242026][security2:error][pid3590034:tid3590100][client2602:80d:1007::cd:0]ModS ...
show more[WedMay2720:38:54.3306242026][security2:error][pid3590034:tid3590100][client2602:80d:1007::cd:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.buletti-panettoni.ch\"][uri\"/\"][unique_id\"ahc6PlsH_xlyelIHRLrC4wAAAIU\"]
show less
[WedMay2019:15:21.6573422026][security2:error][pid614043:tid614141][client2602:80d:1007::cd:0]ModSec ...
show more[WedMay2019:15:21.6573422026][security2:error][pid614043:tid614141][client2602:80d:1007::cd:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.ilmiotrentino.it\"][uri\"/\"][unique_id\"ag3sKfIhTNI_EzoG-37wPwAAAMs\"]
show less
[MonMay1819:24:42.7855972026][security2:error][pid533142:tid533152][client2602:80d:1007::cd:0]ModSec ...
show more[MonMay1819:24:42.7855972026][security2:error][pid533142:tid533152][client2602:80d:1007::cd:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.vetreriaperletti.ch\"][uri\"/\"][unique_id\"agtLWhNrE9T6qGsxGhZVjAAAAEg\"]
show less
Hacking
Web App Attack
Anonymous
2026-05-18T04:38:03.285991+02:00 mx1 sshd-session[3409312]: Connection closed by 2602:80d:1007::cd p ...
show more2026-05-18T04:38:03.285991+02:00 mx1 sshd-session[3409312]: Connection closed by 2602:80d:1007::cd port 15320 [preauth]
show less