JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:332::89

2001:470:1:332::89 was found in our database!

This IP was reported 698 times. Confidence of Abuse is 37%: ?

37%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	scan-38-09.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:332::89

Whois 2001:470:1:332::89

IP Abuse Reports for 2001:470:1:332::89:

This IP address has been reported a total of 698 times from 48 distinct sources. 2001:470:1:332::89 was first reported on June 16th 2022, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 as211431.net	2026-08-31 04:42:55 (1 hour ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 6kilowatti	2026-08-27 00:38:18 (4 days ago)	2026-08-27T03:38:18.341194+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-08-27T03:38:18.341194+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0332:0000:0000:0000:0089 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=48891 DPT=17689 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-08-25 05:08:50 (6 days ago)	Blocked by UFW (TCP on 7443) Source port: 51818 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 7443) Source port: 51818 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:0089) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-08-14 06:48:14 (2 weeks ago)	Blocked by UFW [83/tcp] Source port: 54244 TTL: null Packet length: 64 TOS: null This report was ge ... show more Blocked by UFW [83/tcp] Source port: 54244 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-13 09:01:50 (2 weeks ago)	Unauthorized connection to Telnet port 23	Port Scan
🇫🇮 as211431.net	2026-07-25 07:48:33 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 thororen	2026-07-25 00:33:23 (1 month ago)	Blocked by UFW [179/tcp] Source port: 43682 TTL: null Packet length: 64 TOS: null This report was g ... show more Blocked by UFW [179/tcp] Source port: 43682 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-07-21 03:37:22 (1 month ago)	2026-07-21T06:37:22.257715+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-07-21T06:37:22.257715+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0332:0000:0000:0000:0089 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=238 FLOWLBL=0 PROTO=TCP SPT=35708 DPT=85 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-07-17 03:23:32 (1 month ago)	Blocked by UFW (TCP on 7547) Source port: 47757 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 7547) Source port: 47757 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:0089) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-07-16 08:34:01 (1 month ago)	2001:0470:0001:0332:0000:0000:0000:0089 was recorded attempting unexpectedly to open a GRE tunnel.	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-07-15 05:42:04 (1 month ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 xmission.com	2026-06-29 01:09:54 (2 months ago)	Blocked by UFW (TCP on 8001) Source port: 57363 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 8001) Source port: 57363 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:0089) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-06-27 08:37:46 (2 months ago)	Unauthorized attempt on debian [5903/tcp] Source port: 47154 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5903/tcp] Source port: 47154 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-06-25 00:35:29 (2 months ago)	Unauthorized attempt on debian [2095/tcp] Source port: 58204 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [2095/tcp] Source port: 58204 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-06-23 02:53:33 (2 months ago)	Unauthorized attempt on debian [49664/tcp] Source port: 49966 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [49664/tcp] Source port: 49966 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 698 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 170.187.163.133

🇺🇸 64.225.121.73

🇬🇧 35.203.210.158

🇺🇸 2604:a940:301:225:0:4::

🇺🇸 195.184.76.179

🇺🇸 195.184.76.178

🇩🇪 167.94.146.32

🇺🇸 147.185.132.215

🇨🇳 123.168.183.167

🇨🇳 116.141.217.149

🇮🇳 103.163.44.204

🇫🇷 91.196.152.174

🇳🇱 89.21.67.171

🇬🇧 81.19.219.199

🇧🇬 79.124.60.218

🇺🇸 66.240.223.208

🇳🇱 45.148.10.157

🇮🇳 35.200.220.237

🇧🇪 35.195.125.247

🇧🇪 34.38.136.29