Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
This IP address has been reported a total of
1,493
times from
150 distinct
sources.
2001:470:2cc:1::17f was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 50
reports;
United States of America
with 47
reports;
Turkey
with 39
reports.
The most common categories in these recent reports were:
Brute-Force
80
times;
Hacking
79
times;
Web App Attack
64
times;
Port Scan
52
times;
SSH
36
times;
Other
103
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[AUTORAVALT][[12/10/2026 - 03:50:17 -03:00 UTC]
Attack from [Hurricane Electric LLC]
[2001:470:2cc:1 ...
show more[AUTORAVALT][[12/10/2026 - 03:50:17 -03:00 UTC]
Attack from [Hurricane Electric LLC]
[2001:470:2cc:1::17f][;; communications error to 127.0.0.53#53: timed out
;; communications error to 127.0.0.53#53: timed out
;; no servers could be reached]
Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, an]
...
show less
[AUTORAVALT][[12/10/2026 - 03:28:50 -03:00 UTC]
Attack from [Hurricane Electric LLC]
[2001:470:2cc:1 ...
show more[AUTORAVALT][[12/10/2026 - 03:28:50 -03:00 UTC]
Attack from [Hurricane Electric LLC]
[2001:470:2cc:1::17f][;; communications error to 127.0.0.53#53: timed out
;; communications error to 127.0.0.53#53: timed out
;; no servers could be reached]
Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, an]
...
show less
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show moreTriggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
2026-10-11T09:35:28.033086+02:00 niove sshd-session[1609941]: Invalid user from 2001:470:2cc:1::17f ...
show more2026-10-11T09:35:28.033086+02:00 niove sshd-session[1609941]: Invalid user from 2001:470:2cc:1::17f port 49364
...
show less
[FriOct0908:47:54.4692552026][security2:error][pid3456505:tid3456740][client2001:470:2cc:1::17f:0]Mo ...
show more[FriOct0908:47:54.4692552026][security2:error][pid3456505:tid3456740][client2001:470:2cc:1::17f:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"2a01:4f8:212:1561::8\"][uri\"/cgi-sys/defaultwebpage.cgi\"][unique_id\"asiOGuNvCrz7uEUd8Z6PjQAAAUo\"]
show less
2026-10-06T23:47:28.125738[redacted] sshd[1412334]: Invalid user from 2001:470:2cc:1::17f port 3849 ...
show more2026-10-06T23:47:28.125738[redacted] sshd[1412334]: Invalid user from 2001:470:2cc:1::17f port 38498
show less
[AUTORAVALT][[06/10/2026 - 22:32:54 -03:00 UTC]
Attack from [Hurricane Electric LLC]
[2001:470:2cc:1 ...
show more[AUTORAVALT][[06/10/2026 - 22:32:54 -03:00 UTC]
Attack from [Hurricane Electric LLC]
[2001:470:2cc:1::17f][;; communications error to 127.0.0.53#53: timed out
;; communications error to 127.0.0.53#53: timed out
;; no servers could be reached]
Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, an]
...
show less
[AUTORAVALT][[06/10/2026 - 22:09:39 -03:00 UTC]
Attack from [Hurricane Electric LLC]
[2001:470:2cc:1 ...
show more[AUTORAVALT][[06/10/2026 - 22:09:39 -03:00 UTC]
Attack from [Hurricane Electric LLC]
[2001:470:2cc:1::17f][;; communications error to 127.0.0.53#53: timed out
;; communications error to 127.0.0.53#53: timed out
;; no servers could be reached]
Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, an]
...
show less
