Cautionary Risk
IP 2602:80d:1005::f rated 6/10 from 3 security events.
Mixed behavior profile detected. Confidence: 44%.
More threatening than 67% of monitored IPs
IP Address
2602:80d:1005::f
IPv6
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
United States
Location
Censys, Inc.
ASN 398705
3
Reports
Honeypot
Data Source
Threat Categories
Bad Web Bot
3
Technical Details
Bad web bots ignore robots.txt, scrape content aggressively, and may probe for vulnerabilities.
Recommended Mitigations
Implement bot detection, rate limiting, and use services like Cloudflare Bot Management.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
23. October 2026
Last Activity
30. October 2026
Recent (7 days)
2 incidents
High-Risk Network Association
This IP belongs to a network (ASN 398705) with elevated threat levels. The ISP Censys, Inc. hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Apply balanced security measures based on risk tolerance.
Long-term blocking recommended.
Reputation Summary
Threat Level
6/10
Medium
High
Activity Frequency
2/10
Very Low
Confidence Score
42%
Medium Confidence
Confidence History
23. Oct 2026 - 30. Oct 2026
44%
Current
Stable
Trend
Security Reports (3)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Bad Web Bot | Honeypot | 75% | |
| Bad Web Bot | Honeypot | 75% | |
| Bad Web Bot | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 2602:80d:1005::f
- IP Version
- IPv6
- Network Type
- Public
- Tor Network
- No
Geolocation
- Country
-
US
- ASN
- AS398705
- ISP
- Censys, Inc.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 3
- First Reported
- 26 Oct 2026
- Last Reported
- 30 Oct 2026, 07:39
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS398705
Censys, Inc.
US
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
45
Total IPs Monitored
6,021
Total Reports
133.8
Reports per IP
Network Context
This IP address belongs to Censys, Inc. (AS398705), which manages 45 IP addresses in our monitoring system. Out of these, 6,021 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
67
%
Global Threat Ranking
This IP is more threatening than 67% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 1,306,389 reported IPs worldwide
Threat Level
6/10
avg: 6.0
=
Total Reports
3
avg: 7
--
Network Comparison
Compared against 51 IPs in ASN 398705
Threat Level
6/10
network avg: 8.2
-
Total Reports
3
network avg: 337
--
Network Censys, Inc. has overall threat level 7/10
Geographic Comparison
Compared against 202,196 IPs in US
Threat Level
6/10
country avg: 6.6
=
Total Reports
3
country avg: 16
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
23 Oct 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Friday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
4/10
Current Threat
4/10
Distribution of threat categories reported over time.
Top Threat Categories
Bad Web Bot
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
1,190,628 threat incidents tracked globally • Last 24h: 31,798 Logs
FEED
Top Threat Sources
-
01
Brazil260,506 21.9% -
02
United States202,240 17%
-
03
India102,866 8.6% -
04
China49,933 4.2% -
05
Argentina42,293 3.6% -
06
SC29,419 2.5% -
07
Mexico27,728 2.3% -
08
Russia26,742 2.2% -
09
Colombia24,219 2% -
10
Germany23,340 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.9/10
Avg Threat
74%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
167.94.146.54
8/10
Confidence
86%
Reports
1,004
Location
US
US
167.94.146.51
8/10
Confidence
85%
Reports
1,197
Location
US
US
167.94.146.56
8/10
Confidence
84%
Reports
1,042
Location
US
US
167.94.146.55
8/10
Confidence
83%
Reports
1,005
Location
US
US
167.94.146.63
8/10
Confidence
83%
Reports
986
Location
US
US
167.94.146.52
8/10
Confidence
82%
Reports
1,128
Location
US
US
167.94.146.48
8/10
Confidence
82%
Reports
1,054
Location
US
US
167.94.146.62
8/10
Confidence
82%
Reports
1,025
Location
US
US
167.94.146.49
8/10
Confidence
81%
Reports
1,128
Location
US
US
167.94.146.57
8/10
Confidence
81%
Reports
983
Location
US
US
167.94.146.50
8/10
Confidence
81%
Reports
973
Location
US
US
167.94.146.59
8/10
Confidence
81%
Reports
954
Location
US
US
167.94.146.61
8/10
Confidence
81%
Reports
937
Location
US
US
167.94.146.60
8/10
Confidence
79%
Reports
1,093
Location
US
US
167.94.146.53
8/10
Confidence
79%
Reports
1,082
Location
US
US
167.94.146.58
8/10
Confidence
79%
Reports
967
Location
US
US
2602:80d:1005::18
8/10
Confidence
48%
Reports
4
Location
US
US
2602:80d:1005::16
6/10
Confidence
40%
Reports
3
Location
US
US
2602:80d:1005::11
8/10
Confidence
39%
Reports
3
Location
US
US
2602:80d:1005::13
8/10
Confidence
34%
Reports
3
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
35.196.98.155
8/10
Confidence
100%
Reports
53
ISP
Google LLC
104.28.201.73
10/10
Confidence
100%
Reports
51
ISP
Cloudflare, Inc.
52.168.141.47
10/10
Confidence
100%
Reports
44
ISP
MICROSOFT-CORP-...
166.62.41.13
10/10
Confidence
100%
Reports
34
ISP
GoDaddy.com, LLC
77.239.124.46
10/10
Confidence
100%
Reports
32
ISP
Banatsync Srl
104.28.228.77
8/10
Confidence
100%
Reports
31
ISP
Cloudflare, Inc.
104.28.228.78
10/10
Confidence
100%
Reports
30
ISP
Cloudflare, Inc.
104.28.196.77
8/10
Confidence
100%
Reports
29
ISP
Cloudflare, Inc.
104.28.196.78
8/10
Confidence
100%
Reports
29
ISP
Cloudflare, Inc.
199.19.225.232
10/10
Confidence
100%
Reports
25
ISP
FranTech Solutions
143.110.145.158
10/10
Confidence
100%
Reports
24
ISP
DigitalOcean, LLC
157.230.218.106
10/10
Confidence
100%
Reports
24
ISP
DigitalOcean, LLC
34.139.102.100
8/10
Confidence
100%
Reports
23
ISP
Google LLC
34.74.37.180
8/10
Confidence
100%
Reports
21
ISP
Google LLC
50.114.236.21
10/10
Confidence
100%
Reports
21
ISP
CNServer LLC
IPs with similar threat level and confidence scores.
15
Related IPs
7.5/10
Avg Threat
44%
Avg Confidence
9
High Threat
High-risk network: Majority of related IPs are flagged
193.24.123.94
8/10
Confidence
44%
Reports
27
Location
RU
RU
161.123.6.152
6/10
Confidence
44%
Reports
5
Location
US
US
173.254.209.188
6/10
Confidence
44%
Reports
7
Location
US
US
213.188.93.29
6/10
Confidence
44%
Reports
7
Location
US
US
149.19.231.201
6/10
Confidence
44%
Reports
7
Location
US
US
86.106.120.93
6/10
Confidence
44%
Reports
7
Location
US
US
204.1.235.69
6/10
Confidence
44%
Reports
8
Location
US
US
185.146.226.60
7/10
Confidence
44%
Reports
3
Location
PL
PL
91.150.165.17
7/10
Confidence
44%
Reports
3
Location
PL
PL
85.203.23.45
8/10
Confidence
44%
Reports
10
Location
SG
SG
185.209.196.153
8/10
Confidence
44%
Reports
4
Location
DE
DE
122.96.28.238
10/10
Confidence
44%
Reports
5
Location
CN
CN
87.116.161.60
8/10
Confidence
44%
Reports
11
Location
RS
RS
64.227.87.10
10/10
Confidence
44%
Reports
4
Location
US
US
194.187.176.153
10/10
Confidence
44%
Reports
7
Location
DE
DE