JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:332::e1

2001:470:1:332::e1 was found in our database!

This IP was reported 704 times. Confidence of Abuse is 28%: ?

28%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-41-01.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:332::e1

Whois 2001:470:1:332::e1

IP Abuse Reports for 2001:470:1:332::e1:

This IP address has been reported a total of 704 times from 53 distinct sources. 2001:470:1:332::e1 was first reported on December 10th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cazae	2026-06-15 08:31:25 (2 days ago)	Unauthorized attempt on debian [5802/tcp] Source port: 36100 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5802/tcp] Source port: 36100 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-07 08:43:47 (1 week ago)	Blocked by UFW (TCP on 3389) Source port: 49507 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 3389) Source port: 49507 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:00e1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇯🇵 S.O.B.A. Dev.	2026-06-05 08:13:54 (1 week ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 xmission.com	2026-05-31 05:31:07 (2 weeks ago)	Blocked by UFW (TCP on 3389) Source port: 46865 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 3389) Source port: 46865 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:00e1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇫🇷 centurion	2026-05-20 06:24:31 (4 weeks ago)	Unauthorized attempt on uptime [2096/tcp] Source port: 39479 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on uptime [2096/tcp] Source port: 39479 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-08 03:35:12 (1 month ago)	Blocked by UFW (TCP on 8090) Source port: 46436 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 8090) Source port: 46436 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:00e1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-04-30 01:17:47 (1 month ago)	2026-04-30T04:17:46.648744+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-04-30T04:17:46.648744+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0332:0000:0000:0000:00e1 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=TCP SPT=57811 DPT=636 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 en0	2026-04-15 09:15:10 (2 months ago)	2001:0470:0001:0332:0000:0000:0000:00e1 was recorded attempting unexpectedly to open an IPv6 Protoco ... show more 2001:0470:0001:0332:0000:0000:0000:00e1 was recorded attempting unexpectedly to open an IPv6 Protocol 41 tunnel. show less	Port Scan
🇺🇸 shabi	2026-04-08 06:52:47 (2 months ago)	UFW Blocked [5986/TCP] Source: 2001:0470:0001:0332:0000:0000:0000:00e1:60217 Lenth: 60	Port Scan
🇺🇸 shabi	2026-03-31 03:56:39 (2 months ago)	UFW Blocked [6443/TCP] Source: 2001:0470:0001:0332:0000:0000:0000:00e1:32874 Lenth: 60	Port Scan
🇦🇹 centurion	2026-03-31 01:05:40 (2 months ago)	Unauthorized attempt on cendev [5001/tcp] Source port: 46243 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on cendev [5001/tcp] Source port: 46243 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 as211431.net	2026-03-30 04:30:29 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 xmission.com	2026-03-26 01:15:03 (2 months ago)	Blocked by UFW (TCP on 89) Source port: 57159 Packet length: 60 This report (for 2001:0470:0001:033 ... show more Blocked by UFW (TCP on 89) Source port: 57159 Packet length: 60 This report (for 2001:0470:0001:0332:0000:0000:0000:00e1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-03-23 07:37:46 (2 months ago)	Blocked by UFW [143/tcp] Source port: 46150 TTL: null Packet length: 60 TOS: null This report was g ... show more Blocked by UFW [143/tcp] Source port: 46150 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-03-23 07:06:39 (2 months ago)	Unauthorized attempt on debian [49668/tcp] Source port: 39178 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [49668/tcp] Source port: 39178 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 704 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.247

🇺🇸 216.180.246.246

🇺🇸 216.180.246.171

🇺🇸 216.180.246.163

🇺🇸 216.180.246.150

🇺🇸 216.180.246.135

🇺🇸 216.180.246.70

🇺🇸 216.180.246.4

🇺🇸 216.180.246.1

🇧🇷 205.210.31.180

🇺🇸 172.232.3.17

🇮🇪 63.32.104.171

🇲🇾 47.250.37.13

🇺🇸 18.190.15.50

🇸🇬 139.162.49.249

🇺🇸 108.56.241.55

🇮🇳 103.84.236.242

🇬🇧 90.241.112.125

🇨🇳 60.166.82.252

🇺🇸 52.234.42.36