This IP was reported 148 times. Confidence of
Abuse
is 78%: ?
78%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
148
times from
38 distinct
sources.
2602:80d:1007::f was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SatAug2914:36:08.9547292026][security2:error][pid4078369:tid4078500][client2602:80d:1007::f:0]ModSe ...
show more[SatAug2914:36:08.9547292026][security2:error][pid4078369:tid4078500][client2602:80d:1007::f:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"apLSOKcTbHc22Vc63TKRqAAAARQ\"]
show less
Malformed or malicious web request
2602:80d:1007::f - - [28/Aug/2026:05:38:36 +0200] "PRI * HTTP/2.0 ...
show moreMalformed or malicious web request
2602:80d:1007::f - - [28/Aug/2026:05:38:36 +0200] "PRI * HTTP/2.0" 400 157 "-" "-"
show less
[TueAug2516:25:36.3498982026][security2:error][pid2600387:tid2600540][client2602:80d:1007::f:0]ModSe ...
show more[TueAug2516:25:36.3498982026][security2:error][pid2600387:tid2600540][client2602:80d:1007::f:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.elyon2.ch\"][uri\"/images/favicon.ico\"][unique_id\"ao2l4DmsXl-19sSYM0xL-QAAAQ4\"]
show less
[WedAug1915:55:27.0871182026][security2:error][pid2525421:tid2525547][client2602:80d:1007::f:0]ModSe ...
show more[WedAug1915:55:27.0871182026][security2:error][pid2525421:tid2525547][client2602:80d:1007::f:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"giuliani.li\"][uri\"/\"][unique_id\"aoW1z_nHGTaItfQgIvnYKgAAAIc\"]
show less
Port Scan
Brute-Force
Web App Attack
Showing 1 to
15
of 148 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩