This IP was reported 177 times. Confidence of
Abuse
is 100%: ?
100%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
177
times from
53 distinct
sources.
2602:80d:1008::68 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2602:80d:1008::68 - - [23/Aug/2026:15:51:50 +0200] "x16x03x01x00xEEx01x00x00xEAx03x03xF8x975hx7FxEBL ...
show more2602:80d:1008::68 - - [23/Aug/2026:15:51:50 +0200] "x16x03x01x00xEEx01x00x00xEAx03x03xF8x975hx7FxEBLxC4xAExB3xF7xCF,xB1xF5x15x17xAF]xD6x86L.xD5xFB~xACxE2xE77x05xA0 x
...
show less
CrowdSec detected Malicious web crawler or bad web bot. Scenario: crowdsecurity/http-bad-user-agent. ...
show moreCrowdSec detected Malicious web crawler or bad web bot. Scenario: crowdsecurity/http-bad-user-agent. Automatic ban triggered. Detection time (UTC): 2026-08-21T21:25:40.55482439Z. Context: http_status=200
show less
Blocked by UFW (TCP on 443)
Source port: 17550
Packet length: 80
This report (for 2602:080d:1008:00 ...
show moreBlocked by UFW (TCP on 443)
Source port: 17550
Packet length: 80
This report (for 2602:080d:1008:0000:0000:0000:0000:0068) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
[WedAug1916:40:21.8277372026][security2:error][pid2567528:tid2567564][client2602:80d:1008::68:0]ModS ...
show more[WedAug1916:40:21.8277372026][security2:error][pid2567528:tid2567564][client2602:80d:1008::68:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.cbri.ch\"][uri\"/\"][unique_id\"aoXAVYOROAaoKDl2eFmZrgAAAMA\"]
show less
[MonAug1710:52:15.8137232026][security2:error][pid1100851:tid1100871][client2602:80d:1008::68:0]ModS ...
show more[MonAug1710:52:15.8137232026][security2:error][pid1100851:tid1100871][client2602:80d:1008::68:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"vulcanoricambi.ch\"][uri\"/\"][unique_id\"aoLLv-0OoTNKtGcB71_xOAAAABE\"]
show less