JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:332::df

2001:470:1:332::df was found in our database!

This IP was reported 697 times. Confidence of Abuse is 29%: ?

29%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	scan-40-1f.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:332::df

Whois 2001:470:1:332::df

IP Abuse Reports for 2001:470:1:332::df:

This IP address has been reported a total of 697 times from 50 distinct sources. 2001:470:1:332::df was first reported on May 26th 2022, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-26 03:26:24 (6 hours ago)	Blocked by UFW (TCP on 7443) Source port: 56271 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 7443) Source port: 56271 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:00df) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-08-13 01:21:31 (1 week ago)	Unauthorized attempt on coresecret [2095/tcp] Source port: 51994 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [2095/tcp] Source port: 51994 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-07-29 02:55:52 (4 weeks ago)	Unauthorized attempt on coresecret [8880/tcp] Source port: 55862 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [8880/tcp] Source port: 55862 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-07-25 00:08:43 (1 month ago)	Unauthorized attempt on cendev [1883/tcp] Source port: 48802 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on cendev [1883/tcp] Source port: 48802 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-07-22 04:22:44 (1 month ago)	Unauthorized attempt on cendev [5985/tcp] Source port: 55392 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on cendev [5985/tcp] Source port: 55392 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-07-21 08:54:58 (1 month ago)	Unauthorized attempt on debian [5222/tcp] Source port: 54578 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5222/tcp] Source port: 54578 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-07-20 08:03:28 (1 month ago)	Unauthorized attempt on debian [1801/tcp] Source port: 56595 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [1801/tcp] Source port: 56595 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇺 kranem	2026-07-14 06:00:30 (1 month ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (Hurricane Electric LLC) Protocol: H ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (Hurricane Electric LLC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-07-14T03:59:22Z User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇮 6kilowatti	2026-07-07 03:09:53 (1 month ago)	2026-07-07T06:09:52.289778+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-07-07T06:09:52.289778+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0332:0000:0000:0000:00df DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=54267 DPT=9200 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cazae	2026-07-04 03:41:01 (1 month ago)	Unauthorized attempt on debian [800/tcp] Source port: 45483 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on debian [800/tcp] Source port: 45483 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-30 07:23:55 (1 month ago)	Blocked by UFW on LAXHH [3128/tcp] \| SPT: 48171 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: git ... show more Blocked by UFW on LAXHH [3128/tcp] \| SPT: 48171 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-29 08:09:26 (1 month ago)	Blocked by UFW (TCP on 1723) Source port: 53652 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 1723) Source port: 53652 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:00df) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-06-28 04:15:20 (1 month ago)	Unauthorized attempt on coresecret [89/tcp] Source port: 46070 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on coresecret [89/tcp] Source port: 46070 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-06-27 08:59:05 (1 month ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 cazae	2026-06-21 04:54:39 (2 months ago)	Unauthorized attempt on debian [449/tcp] Source port: 57497 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on debian [449/tcp] Source port: 57497 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 697 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.201

🇺🇸 147.185.132.133

🇸🇬 47.128.50.6

🇨🇳 221.228.203.3

🇳🇱 185.136.15.13

🇪🇸 185.74.240.227

🇧🇷 179.176.210.17

🇧🇷 179.82.75.224

🇺🇸 172.253.195.209

🇺🇸 152.32.207.234

🇧🇷 148.227.86.221

🇲🇦 105.156.169.183

🇺🇸 103.153.183.69

🇻🇳 103.48.192.48

🇺🇸 71.6.233.140

🇫🇮 34.88.29.206

🇺🇦 194.44.215.185

🇫🇷 185.187.169.232

🇧🇷 177.145.127.129

🇧🇷 168.228.202.78