Intermediate Threat
Threat level 5/10 for 2602:80d:1005::15 from 2 reports.
Concerning behaviors alongside normal activity. 35% confidence.
More threatening than 50% of monitored IPs
IP Address
2602:80d:1005::15
IPv6
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
United States
Location
Censys, Inc.
ASN 398705
2
Reports
Honeypot
Data Source
Threat Categories
Bad Web Bot
2
Technical Details
Bad web bots ignore robots.txt, scrape content aggressively, and may probe for vulnerabilities.
Recommended Mitigations
Implement bot detection, rate limiting, and use services like Cloudflare Bot Management.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 days indicates persistent threat actor operations.
First Observed
30. October 2026
Last Activity
31. October 2026
Recent (7 days)
2 incidents
High-Risk Network Association
This IP belongs to a network (ASN 398705) with elevated threat levels. The ISP Censys, Inc. hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Monitor for behavior pattern changes indicating escalation.
Long-term blocking recommended.
Reputation Summary
Threat Level
5/10
Medium
Medium
Activity Frequency
2/10
Very Low
Confidence Score
35%
Medium Confidence
Confidence History
30. Oct 2026 - 31. Oct 2026
35%
Current
Stable
Trend
Security Reports (2)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Bad Web Bot | Honeypot | 75% |
| Bad Web Bot | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 2602:80d:1005::15
- IP Version
- IPv6
- Network Type
- Public
- Tor Network
- No
Geolocation
- Country
-
US
- ASN
- AS398705
- ISP
- Censys, Inc.
DNS Information
- Reverse DNS
- scanner-202.fr7.censys-scanner.com
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 2
- First Reported
- 30 Oct 2026
- Last Reported
- 31 Oct 2026, 10:13
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS398705
Censys, Inc.
US
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
45
Total IPs Monitored
6,021
Total Reports
133.8
Reports per IP
Network Context
This IP address belongs to Censys, Inc. (AS398705), which manages 45 IP addresses in our monitoring system. Out of these, 6,021 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
50
%
Global Threat Ranking
This IP is more threatening than 50% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 1,306,583 reported IPs worldwide
Threat Level
5/10
avg: 6.0
-
Total Reports
2
avg: 7
--
Network Comparison
Compared against 51 IPs in ASN 398705
Threat Level
5/10
network avg: 8.2
-
Total Reports
2
network avg: 337
--
Network Censys, Inc. has overall threat level 7/10
Geographic Comparison
Compared against 202,282 IPs in US
Threat Level
5/10
country avg: 6.6
-
Total Reports
2
country avg: 16
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Oct 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Friday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
4/10
Current Threat
4/10
Distribution of threat categories reported over time.
Top Threat Categories
Bad Web Bot
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
1,190,807 threat incidents tracked globally • Last 24h: 25,959 Logs
FEED
Top Threat Sources
-
01
Brazil260,514 21.9% -
02
United States202,282 17%
-
03
India102,881 8.6% -
04
China49,942 4.2% -
05
Argentina42,299 3.6% -
06
SC29,420 2.5% -
07
Mexico27,731 2.3% -
08
Russia26,744 2.2% -
09
Colombia24,219 2% -
10
Germany23,370 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.8/10
Avg Threat
75%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
167.94.146.54
8/10
Confidence
86%
Reports
1,005
Location
US
US
167.94.146.51
8/10
Confidence
85%
Reports
1,198
Location
US
US
167.94.146.56
8/10
Confidence
84%
Reports
1,043
Location
US
US
167.94.146.55
8/10
Confidence
83%
Reports
1,005
Location
US
US
167.94.146.63
8/10
Confidence
83%
Reports
986
Location
US
US
167.94.146.52
8/10
Confidence
82%
Reports
1,129
Location
US
US
167.94.146.48
8/10
Confidence
82%
Reports
1,055
Location
US
US
167.94.146.62
8/10
Confidence
82%
Reports
1,025
Location
US
US
167.94.146.57
8/10
Confidence
82%
Reports
984
Location
US
US
167.94.146.49
8/10
Confidence
81%
Reports
1,128
Location
US
US
167.94.146.50
8/10
Confidence
81%
Reports
974
Location
US
US
167.94.146.59
8/10
Confidence
81%
Reports
954
Location
US
US
167.94.146.61
8/10
Confidence
81%
Reports
937
Location
US
US
167.94.146.60
8/10
Confidence
79%
Reports
1,093
Location
US
US
167.94.146.53
8/10
Confidence
79%
Reports
1,082
Location
US
US
167.94.146.58
8/10
Confidence
79%
Reports
967
Location
US
US
2602:80d:1005::11
8/10
Confidence
57%
Reports
4
Location
US
US
2602:80d:1005::18
8/10
Confidence
48%
Reports
4
Location
US
US
2602:80d:1005::f
6/10
Confidence
44%
Reports
3
Location
US
US
2602:80d:1005::16
6/10
Confidence
40%
Reports
3
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
35.196.98.155
8/10
Confidence
100%
Reports
53
ISP
Google LLC
104.28.201.73
10/10
Confidence
100%
Reports
51
ISP
Cloudflare, Inc.
52.168.141.47
10/10
Confidence
100%
Reports
44
ISP
MICROSOFT-CORP-...
166.62.41.13
10/10
Confidence
100%
Reports
34
ISP
GoDaddy.com, LLC
77.239.124.46
10/10
Confidence
100%
Reports
32
ISP
Banatsync Srl
104.28.228.77
8/10
Confidence
100%
Reports
31
ISP
Cloudflare, Inc.
104.28.228.78
10/10
Confidence
100%
Reports
30
ISP
Cloudflare, Inc.
104.28.196.77
8/10
Confidence
100%
Reports
29
ISP
Cloudflare, Inc.
104.28.196.78
8/10
Confidence
100%
Reports
29
ISP
Cloudflare, Inc.
199.19.225.232
10/10
Confidence
100%
Reports
25
ISP
FranTech Solutions
143.110.145.158
10/10
Confidence
100%
Reports
24
ISP
DigitalOcean, LLC
157.230.218.106
10/10
Confidence
100%
Reports
24
ISP
DigitalOcean, LLC
34.139.102.100
8/10
Confidence
100%
Reports
23
ISP
Google LLC
34.74.37.180
8/10
Confidence
100%
Reports
21
ISP
Google LLC
50.114.236.21
10/10
Confidence
100%
Reports
21
ISP
CNServer LLC
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
35%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
34.187.80.213
10/10
Confidence
35%
Reports
3
Location
NL
NL
105.157.238.207
10/10
Confidence
35%
Reports
3
Location
MA
MA
102.206.95.208
10/10
Confidence
35%
Reports
3
Location
ZA
ZA
36.80.161.149
10/10
Confidence
35%
Reports
3
Location
ID
ID
102.89.47.139
10/10
Confidence
35%
Reports
3
Location
NG
NG
34.23.92.237
10/10
Confidence
35%
Reports
3
Location
US
US
165.232.99.67
10/10
Confidence
35%
Reports
3
Location
GB
GB
117.213.236.31
10/10
Confidence
35%
Reports
3
Location
IN
IN
103.171.41.246
10/10
Confidence
35%
Reports
3
Location
IN
IN
144.89.87.103
10/10
Confidence
35%
Reports
4
Location
US
US
31.97.77.176
10/10
Confidence
35%
Reports
3
Location
DE
DE
34.26.95.76
10/10
Confidence
35%
Reports
5
Location
US
US
175.107.205.11
10/10
Confidence
35%
Reports
3
Location
PK
PK
34.32.216.134
10/10
Confidence
35%
Reports
5
Location
NL
NL
176.41.130.86
10/10
Confidence
35%
Reports
3
Location
TR
TR