This IP was reported 8 times. Confidence of
Abuse
is 27%: ?
27%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
8
times from
4 distinct
sources.
2602:80d:1008::b5 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[TueOct1318:28:49.6959912026][security2:error][pid1298328:tid1298471][client2602:80d:1008::b5:0]ModS ...
show more[TueOct1318:28:49.6959912026][security2:error][pid1298328:tid1298471][client2602:80d:1008::b5:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.viveretrentino.it\"][uri\"/\"][unique_id\"as5cQbTiICWETIBgyHPWzQAAAVg\"]
show less
[TueOct1307:42:48.4259352026][security2:error][pid629157:tid629266][client2602:80d:1008::b5:0]ModSec ...
show more[TueOct1307:42:48.4259352026][security2:error][pid629157:tid629266][client2602:80d:1008::b5:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.serversvizzera.ch\"][uri\"/\"][unique_id\"as3E2DrE1Huj9JJ2NwDlkAAAANQ\"]
show less
CrowdSec: suspicious activity detected by CrowdSec. Scenario=crowdsecurity/http-bad-user-agent; even ...
show moreCrowdSec: suspicious activity detected by CrowdSec. Scenario=crowdsecurity/http-bad-user-agent; events=2; window=2026-10-12T06:08:10.416460701Z .. 2026-10-12T06:08:16.511700144Z. Tried: GET / | GET /favicon.ico. Automated report, no manual review.
show less
[SatOct1007:26:05.8905682026][security2:error][pid633536:tid633562][client2602:80d:1008::b5:0]ModSec ...
show more[SatOct1007:26:05.8905682026][security2:error][pid633536:tid633562][client2602:80d:1008::b5:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/\"][unique_id\"asnMbR2HJlKIYPsxWo98VQAAAEk\"]
show less