JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:c84::c9

2001:470:1:c84::c9 was found in our database!

This IP was reported 711 times. Confidence of Abuse is 22%: ?

22%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-04-09.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:c84::c9

Whois 2001:470:1:c84::c9

IP Abuse Reports for 2001:470:1:c84::c9:

This IP address has been reported a total of 711 times from 44 distinct sources. 2001:470:1:c84::c9 was first reported on March 14th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 thororen	2026-06-17 00:26:53 (2 days ago)	Blocked by UFW [8888/tcp] Source port: 38860 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [8888/tcp] Source port: 38860 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-06-11 06:42:25 (1 week ago)	Blocked by UFW [8088/tcp] Source port: 50899 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [8088/tcp] Source port: 50899 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-05-12 05:28:46 (1 month ago)	UFW Blocked [447/TCP] Source: 2001:0470:0001:0c84:0000:0000:0000:00c9:53324 Lenth: 60	Port Scan
🇺🇸 cazae	2026-05-12 04:29:07 (1 month ago)	Unauthorized attempt on debian [8001/tcp] Source port: 60183 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8001/tcp] Source port: 60183 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-05-09 03:11:24 (1 month ago)	Unauthorized attempt on debian [443/tcp] Source port: 35936 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on debian [443/tcp] Source port: 35936 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-08 01:53:35 (1 month ago)	Blocked by UFW (TCP on 5001) Source port: 42001 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 5001) Source port: 42001 Packet length: 60 This report (for 2001:0470:0001:0c84:0000:0000:0000:00c9) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-05-05 06:04:41 (1 month ago)	2026-05-05T09:04:40.144537+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-05-05T09:04:40.144537+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0c84:0000:0000:0000:00c9 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=TCP SPT=39668 DPT=2087 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 thororen	2026-05-03 00:33:55 (1 month ago)	Blocked by UFW [110/tcp] Source port: 33078 TTL: null Packet length: 64 TOS: null This report was g ... show more Blocked by UFW [110/tcp] Source port: 33078 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-04-30 02:06:20 (1 month ago)	UFW Blocked [/47] Source: 2001:0470:0001:0c84:0000:0000:0000:00c9: Lenth: 100	Port Scan
🇺🇸 shabi	2026-04-09 02:58:09 (2 months ago)	UFW Blocked [2121/TCP] Source: 2001:0470:0001:0c84:0000:0000:0000:00c9:47572 Lenth: 60	Port Scan
🇺🇸 cazae	2026-04-08 01:24:50 (2 months ago)	Unauthorized attempt on debian [33060/tcp] Source port: 40379 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [33060/tcp] Source port: 40379 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-07 03:29:56 (2 months ago)	Blocked by UFW (TCP on 82) Source port: 50874 Packet length: 60 This report (for 2001:0470:0001:0c8 ... show more Blocked by UFW (TCP on 82) Source port: 50874 Packet length: 60 This report (for 2001:0470:0001:0c84:0000:0000:0000:00c9) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-04-03 02:24:20 (2 months ago)	2026-04-03T05:24:19.630889+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-04-03T05:24:19.630889+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0c84:0000:0000:0000:00c9 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=TCP SPT=40523 DPT=5432 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cazae	2026-03-31 00:37:23 (2 months ago)	Unauthorized attempt on debian [5805/tcp] Source port: 47129 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5805/tcp] Source port: 47129 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-03-27 06:32:31 (2 months ago)	2026-03-27T08:32:30.119936+02:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-03-27T08:32:30.119936+02:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:86:dd SRC=2001:0470:0001:0c84:0000:0000:0000:00c9 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=238 FLOWLBL=0 PROTO=TCP SPT=34689 DPT=8081 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 711 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.149.236

🇺🇸 157.245.1.7

🇵🇭 139.135.222.72

🇨🇴 223.27.115.136

🇨🇳 221.228.203.3

🇭🇰 189.1.245.103

🇰🇷 169.211.232.182

🇮🇳 167.71.239.213

🇲🇦 105.154.7.211

🇷🇺 93.115.203.202

🇮🇹 79.11.39.204

🇧🇬 78.128.113.22

🇺🇸 74.125.82.66

🇺🇸 69.55.54.138

🇺🇸 66.132.224.238

🇺🇸 64.62.197.218

🇧🇷 45.205.1.62

🇬🇧 194.50.235.136

🇸🇦 176.16.34.4

🇸🇬 152.32.218.149