This IP was reported 235 times. Confidence of
Abuse
is 48%: ?
48%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
235
times from
61 distinct
sources.
2602:80d:1008::2c was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[ThuOct2205:08:35.1312362026][security2:error][pid625300:tid625349][client2602:80d:1008::2c:0]ModSec ...
show more[ThuOct2205:08:35.1312362026][security2:error][pid625300:tid625349][client2602:80d:1008::2c:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.gpwealth.ch\"][uri\"/\"][unique_id\"atl-M24lVhC33Jni5DvUqgAAAEg\"]
show less
[MonOct1903:37:46.1469592026][security2:error][pid452171:tid452258][client2602:80d:1008::2c:0]ModSec ...
show more[MonOct1903:37:46.1469592026][security2:error][pid452171:tid452258][client2602:80d:1008::2c:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.atelier-lara.ch\"][uri\"/\"][unique_id\"atV0asbHKK16ZYiZafEVHgAAAI4\"]
show less
[SatOct0317:38:01.2864092026][security2:error][pid3927843:tid3927891][client2602:80d:1008::2c:0]ModS ...
show more[SatOct0317:38:01.2864092026][security2:error][pid3927843:tid3927891][client2602:80d:1008::2c:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.asw-sa.com\"][uri\"/\"][unique_id\"asEhWXAsWADty2qZrBQuNgAAAUo\"]
show less
Port Scan
Brute-Force
Web App Attack
Showing 1 to
15
of 235 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩