JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:c84::2f5

2001:470:1:c84::2f5 was found in our database!

This IP was reported 760 times. Confidence of Abuse is 36%: ?

36%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-21-15.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:c84::2f5

Whois 2001:470:1:c84::2f5

IP Abuse Reports for 2001:470:1:c84::2f5:

This IP address has been reported a total of 760 times from 50 distinct sources. 2001:470:1:c84::2f5 was first reported on November 5th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-06 09:28:09 (2 days ago)	Blocked by UFW (TCP on 179) Source port: 33049 Packet length: 60 This report (for 2001:0470:0001:0c ... show more Blocked by UFW (TCP on 179) Source port: 33049 Packet length: 60 This report (for 2001:0470:0001:0c84:0000:0000:0000:02f5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-07-01 08:17:04 (1 week ago)	Blocked by UFW on LAXHH [995/tcp] \| SPT: 32992 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: gith ... show more Blocked by UFW on LAXHH [995/tcp] \| SPT: 32992 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-07-01 05:08:51 (1 week ago)	Unauthorized attempt on debian [5986/tcp] Source port: 35326 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5986/tcp] Source port: 35326 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-06-27 02:06:44 (1 week ago)	Unauthorized attempt on debian [null/47] Source port: null TTL: null Packet length: 100 TOS: null h ... show more Unauthorized attempt on debian [null/47] Source port: null TTL: null Packet length: 100 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-24 07:15:44 (2 weeks ago)	Blocked by UFW (TCP on 5443) Source port: 56142 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 5443) Source port: 56142 Packet length: 60 This report (for 2001:0470:0001:0c84:0000:0000:0000:02f5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-06-23 07:08:34 (2 weeks ago)	2026-06-23T10:08:33.324215+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-06-23T10:08:33.324215+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0c84:0000:0000:0000:02f5 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=46120 DPT=2323 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-06-20 03:56:51 (2 weeks ago)	Blocked by UFW (TCP on 80) Source port: 33290 Packet length: 60 This report (for 2001:0470:0001:0c8 ... show more Blocked by UFW (TCP on 80) Source port: 33290 Packet length: 60 This report (for 2001:0470:0001:0c84:0000:0000:0000:02f5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 shabi	2026-06-16 00:57:26 (3 weeks ago)	UFW Blocked [30005/TCP] Source: 2001:0470:0001:0c84:0000:0000:0000:02f5:49326 Lenth: 60	Port Scan
🇺🇸 cazae	2026-06-14 02:59:02 (3 weeks ago)	Unauthorized attempt on debian [6379/tcp] Source port: 48646 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [6379/tcp] Source port: 48646 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-05-29 00:05:49 (1 month ago)	UFW Blocked [21/TCP] Source: 2001:0470:0001:0c84:0000:0000:0000:02f5:49181 Lenth: 60	Port Scan FTP Brute-Force Brute-Force
🇺🇸 shabi	2026-05-27 07:28:13 (1 month ago)	UFW Blocked [3128/TCP] Source: 2001:0470:0001:0c84:0000:0000:0000:02f5:45101 Lenth: 60	Port Scan
🇺🇸 thororen	2026-05-22 08:45:59 (1 month ago)	Blocked by UFW [179/tcp] Source port: 41477 TTL: null Packet length: 64 TOS: null This report was g ... show more Blocked by UFW [179/tcp] Source port: 41477 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-22 08:18:56 (1 month ago)	Blocked by UFW (TCP on 6379) Source port: 40781 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 6379) Source port: 40781 Packet length: 60 This report (for 2001:0470:0001:0c84:0000:0000:0000:02f5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 centurion	2026-05-15 04:25:49 (1 month ago)	Unauthorized attempt on uptime [444/tcp] Source port: 52654 TTL: null Packet length: 60 TOS: null ht ... show more Unauthorized attempt on uptime [444/tcp] Source port: 52654 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-05-14 09:53:51 (1 month ago)	Unauthorized attempt on debian [5801/tcp] Source port: 33514 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5801/tcp] Source port: 33514 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 760 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇳🇱 185.189.182.234

🇭🇰 152.32.135.135

🇹🇷 94.154.43.64

🇩🇪 2a04:4e40:e000:0:d8e:b326:836a:65f9

🇺🇸 195.184.76.24

🇺🇸 162.216.150.225

🇨🇳 115.190.211.111

🇫🇷 91.231.89.215

🇫🇷 91.231.89.157

🇺🇸 91.230.168.127

🇨🇦 85.217.149.50

🇱🇹 77.90.185.20

🇩🇪 69.5.169.154

🇱🇹 45.227.254.170

🇺🇸 45.158.21.122

🇬🇧 35.203.210.151

🇮🇪 18.202.179.212

🇹🇼 211.75.252.252

🇺🇸 207.211.163.60