JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2001:470:1:c84::2c3

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

32% Elevated

718 reports

47 reporters · latest 4 days ago

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	scan-20-03.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2001:470:1:c84::2c3

Export CSV

This IP address has been reported a total of 718 times from 47 distinct sources. 2001:470:1:c84::2c3 was first reported on February 23rd 2022, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: United States of America with 7 reports; Germany with 1 report; Finland with 1 report. The only category in these recent reports was: Port Scan 10 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cazae	2026-04-27 08:25:39 (5 months ago)	Unauthorized attempt on debian [2323/tcp] Source port: 55101 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [2323/tcp] Source port: 55101 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇺🇸 shabi	2026-04-27 06:00:36 (5 months ago)	UFW Blocked [85/TCP] Source: 2001:0470:0001:0c84:0000:0000:0000:02c3:51899 Lenth: 60	Port Scan
🇺🇸 shabi	2026-04-12 08:26:05 (6 months ago)	UFW Blocked [5901/TCP] Source: 2001:0470:0001:0c84:0000:0000:0000:02c3:40131 Lenth: 60	Port Scan
🇫🇮 6kilowatti	2026-04-11 07:47:28 (6 months ago)	2026-04-11T10:47:27.155318+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-04-11T10:47:27.155318+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0c84:0000:0000:0000:02c3 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=TCP SPT=42528 DPT=5802 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cazae	2026-04-10 06:16:51 (6 months ago)	Unauthorized attempt on debian [8090/tcp] Source port: 41935 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8090/tcp] Source port: 41935 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-10 04:39:13 (6 months ago)	Blocked by UFW (TCP on 8080) Source port: 38439 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 8080) Source port: 38439 Packet length: 60 This report (for 2001:0470:0001:0c84:0000:0000:0000:02c3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇦🇹 centurion	2026-04-09 01:14:51 (6 months ago)	Unauthorized attempt on cendev [null/41] Source port: null TTL: null Packet length: 96 TOS: null htt ... show more Unauthorized attempt on cendev [null/41] Source port: null TTL: null Packet length: 96 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-04-07 03:40:33 (6 months ago)	Unauthorized attempt on git [49669/tcp] Source port: 44785 TTL: null Packet length: 60 TOS: null htt ... show more Unauthorized attempt on git [49669/tcp] Source port: 44785 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-05 08:06:54 (6 months ago)	Blocked by UFW (TCP on 21) Source port: 58431 Packet length: 60 This report (for 2001:0470:0001:0c8 ... show more Blocked by UFW (TCP on 21) Source port: 58431 Packet length: 60 This report (for 2001:0470:0001:0c84:0000:0000:0000:02c3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan FTP Brute-Force Brute-Force
🇺🇸 xmission.com	2026-03-25 01:57:45 (6 months ago)	Blocked by UFW (TCP on 49152) Source port: 51389 Packet length: 60 This report (for 2001:0470:0001: ... show more Blocked by UFW (TCP on 49152) Source port: 51389 Packet length: 60 This report (for 2001:0470:0001:0c84:0000:0000:0000:02c3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ps-center	2026-03-17 07:45:35 (7 months ago)	SES-W: TCP-Scanner. Port: 23	Port Scan
🇫🇷 centurion	2026-03-17 00:19:20 (7 months ago)	Unauthorized attempt on uptime [8010/tcp] Source port: 46880 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on uptime [8010/tcp] Source port: 46880 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-03-16 09:31:03 (7 months ago)	Unauthorized attempt on debian [5900/tcp] Source port: 41826 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5900/tcp] Source port: 41826 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ps-center	2026-03-09 06:13:25 (7 months ago)	ABV-W: TCP-Scanner. Port: 1080	Port Scan
🇺🇸 shabi	2026-02-28 06:16:06 (7 months ago)	UFW Blocked [90/TCP] Source: 2001:0470:0001:0c84:0000:0000:0000:02c3:42699 Lenth: 60	Port Scan

Showing 31 to 45 of 718 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇧🇷 179.48.18.42

🇺🇸 162.216.149.252

🇺🇸 146.190.166.168

🇹🇭 118.194.250.127

🇩🇪 118.193.59.41

🇺🇸 100.29.192.107

🇺🇸 50.19.79.213

🇫🇷 37.187.197.110

🇺🇸 20.171.11.19

🇳🇱 2a0f:ca80:b00b:f814::5

🇰🇷 211.192.166.194

🇺🇸 195.184.76.52

🇺🇸 166.142.197.35

🇺🇿 144.124.192.36

🇭🇰 103.49.62.60

🇺🇸 91.230.168.39

🇩🇪 69.5.169.42

🇺🇸 52.224.109.126

🇬🇧 35.203.211.75