JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:332::17f

2001:470:1:332::17f was found in our database!

This IP was reported 1,528 times. Confidence of Abuse is 58%: ?

58%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	scan-51-09.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:332::17f

Whois 2001:470:1:332::17f

IP Abuse Reports for 2001:470:1:332::17f:

This IP address has been reported a total of 1,528 times from 69 distinct sources. 2001:470:1:332::17f was first reported on June 30th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-22 02:48:55 (2 days ago)	Blocked by UFW (TCP on 81) Source port: 51159 Packet length: 60 This report (for 2001:0470:0001:033 ... show more Blocked by UFW (TCP on 81) Source port: 51159 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:017f) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-08-22 01:00:41 (2 days ago)	Unauthorized attempt on debian [5443/tcp] Source port: 42512 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5443/tcp] Source port: 42512 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 vincent_EUDIER	2026-08-19 06:00:00 (5 days ago)	ET SCAN Suspicious inbound to mySQL port 3306	Port Scan
Anonymous	2026-08-18 06:15:20 (6 days ago)	Blocked by UFW [993/tcp] \| SPT: 41462 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/se ... show more Blocked by UFW [993/tcp] \| SPT: 41462 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 as211431.net	2026-08-13 07:57:35 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.70 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 xmission.com	2026-08-13 05:27:44 (1 week ago)	Blocked by UFW (TCP on 17689) Source port: 35632 Packet length: 60 This report (for 2001:0470:0001: ... show more Blocked by UFW (TCP on 17689) Source port: 35632 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:017f) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇭 Sawasdee	2026-08-12 00:51:06 (1 week ago)	SSH break in attempt ...	SSH
🇹🇭 Sawasdee	2026-08-10 07:30:09 (1 week ago)	Port Scan/VNC login attempt ...	Port Scan
🇺🇸 cazae	2026-08-10 04:57:10 (2 weeks ago)	Unauthorized attempt on debian [6443/tcp] Source port: 52304 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [6443/tcp] Source port: 52304 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-08-05 08:59:53 (2 weeks ago)	Blocked by UFW [5802/tcp] Source port: 54959 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [5802/tcp] Source port: 54959 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-08-01 02:27:42 (3 weeks ago)	Unauthorized attempt on coresecret [8443/tcp] Source port: 47243 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [8443/tcp] Source port: 47243 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Entalpi.net	2026-07-31 05:42:18 (3 weeks ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇺🇸 cazae	2026-07-31 05:24:00 (3 weeks ago)	Unauthorized attempt on debian [8088/tcp] Source port: 48367 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8088/tcp] Source port: 48367 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 tr1n	2026-07-28 07:53:36 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 6939 (Hurricane ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 6939 (Hurricane Electric LLC) \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| Timestamp: 2026-07-28T07:53:36Z \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 xmission.com	2026-07-26 09:04:18 (4 weeks ago)	Blocked by UFW (TCP on 5800) Source port: 50833 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 5800) Source port: 50833 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:017f) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 1528 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 160.251.202.50

🇨🇦 144.217.243.186

🇧🇷 138.99.99.5

🇨🇳 111.22.5.101

🇺🇸 104.35.4.255

🇨🇿 78.44.192.210

🇺🇸 66.132.195.18

🇺🇸 66.132.186.222

🇰🇷 59.8.107.113

🇫🇷 31.220.76.64

🇺🇸 2400:cb00:119:1000:a15f:e1d6:9e9b:b539

🇰🇷 222.99.52.202

🇸🇬 213.35.106.249

🇨🇼 190.88.137.74

🇺🇸 174.169.87.211

🇺🇸 162.216.150.212

🇺🇸 162.216.149.128

🇭🇰 144.48.243.18

🇮🇩 116.197.135.133

🇺🇸 103.203.57.2