JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:2cc:1::1b9

2001:470:2cc:1::1b9 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 47%: ?

47%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:2cc:1::1b9

Whois 2001:470:2cc:1::1b9

IP Abuse Reports for 2001:470:2cc:1::1b9:

This IP address has been reported a total of 128 times from 28 distinct sources. 2001:470:2cc:1::1b9 was first reported on April 29th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 centurion	2026-07-31 01:20:07 (2 hours ago)	Unauthorized attempt on coresecret [444/tcp] Source port: 56960 TTL: null Packet length: 60 TOS: nul ... show more Unauthorized attempt on coresecret [444/tcp] Source port: 56960 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-07-29 02:09:49 (2 days ago)	2026-07-29T05:09:49.320763+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-07-29T05:09:49.320763+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:02cc:0001:0000:0000:0000:01b9 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=236 FLOWLBL=0 PROTO=TCP SPT=46924 DPT=636 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 as211431.net	2026-07-23 03:51:08 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇹 centurion	2026-07-23 01:17:37 (1 week ago)	Unauthorized attempt on cendev [6080/tcp] Source port: 33087 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on cendev [6080/tcp] Source port: 33087 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-07-17 00:36:41 (2 weeks ago)	2001:0470:02cc:0001:0000:0000:0000:01b9 was recorded attempting unexpectedly to open an IPv6 Protoco ... show more 2001:0470:02cc:0001:0000:0000:0000:01b9 was recorded attempting unexpectedly to open an IPv6 Protocol 41 tunnel. show less	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-07-13 00:32:35 (2 weeks ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 cazae	2026-07-12 08:28:42 (2 weeks ago)	Unauthorized attempt on debian [6000/tcp] Source port: 50403 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [6000/tcp] Source port: 50403 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 bontekoe.technology	2026-07-01 05:04:19 (4 weeks ago)	Port scan or Brute-Force detected. (src_port=35042, dst_port=8081)	Brute-Force
🇺🇸 thororen	2026-06-29 05:57:06 (1 month ago)	Blocked by UFW [82/tcp] Source port: 40611 TTL: null Packet length: 64 TOS: null This report was ge ... show more Blocked by UFW [82/tcp] Source port: 40611 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-06-24 01:59:44 (1 month ago)	Blocked by UFW [3128/tcp] Source port: 59955 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [3128/tcp] Source port: 59955 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 urnilxfgbez	2026-06-23 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇦🇹 centurion	2026-06-19 00:34:49 (1 month ago)	Unauthorized attempt on coresecret [135/tcp] Source port: 53062 TTL: null Packet length: 60 TOS: nul ... show more Unauthorized attempt on coresecret [135/tcp] Source port: 53062 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-06-12 08:14:17 (1 month ago)	2026-06-12T11:14:16.464480+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-06-12T11:14:16.464480+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:02cc:0001:0000:0000:0000:01b9 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=58749 DPT=8883 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-06-08 08:59:12 (1 month ago)	Blocked by UFW (TCP on 49664) Source port: 34734 Packet length: 60 This report (for 2001:0470:02cc: ... show more Blocked by UFW (TCP on 49664) Source port: 34734 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:01b9) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 as211431.net	2026-06-07 06:10:29 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.215.201.230

🇷🇴 193.32.162.27

🇧🇷 164.163.24.11

🇮🇳 106.215.182.8

🇷🇺 94.25.172.93

🇫🇷 91.196.152.241

🇲🇽 45.175.237.108

🇳🇱 45.148.10.151

🇳🇱 45.14.134.197

🇯🇵 219.121.50.78

🇺🇸 207.90.244.28

🇩🇪 194.88.98.118

🇧🇷 179.189.42.162

🇺🇸 162.216.149.175

🇫🇮 147.185.133.217

🇮🇳 139.59.33.81

🇨🇳 106.120.62.164

🇩🇪 69.5.169.193

🇺🇸 57.141.0.39

🇺🇸 34.56.144.172