2001:470:2cc:1::1bf
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
- ISP
- The Shadowserver Foundation, Inc.
- Usage Type
- Fixed Line ISP
- ASN
- AS6939
- Domain Name
- shadowserver.org
- Country
- 🇺🇸 United States of America
- City
- Tracy, California
Abuse Reports
Total reports
1,519 from
150 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 drewf.ink |
[06:59] Port scanning. Port(s) scanned: TCP/8001
|
Port Scan | |
| 🇺🇸 chronos |
|
Phishing Email Spam Hacking Spoofing Brute-Force | |
| 🇹🇭 Sawasdee |
Unwanted checking 80 or 443 port
...
|
Bad Web Bot | |
| 🇬🇧 Birdo |
[Birdo SSH Honeypot] SSH login attempt
|
Port Scan Hacking Brute-Force Exploited Host SSH | |
| 🇺🇸 drewf.ink |
[02:52] Port scanning. Port(s) scanned: TCP/5222
|
Port Scan | |
| 🇧🇪 sid3windr |
SSH port scan (Tarpitted for 20s, wasted 24B)
|
Port Scan SSH | |
| 🇺🇸 en0 |
2001:0470:02cc:0001:0000:0000:0000:01bf was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 37
|
Port Scan | |
| 🇩🇪 ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| Anonymous |
Fail2Ban triggered
|
Web App Attack | |
| 🇦🇺 crispi |
Unauthorized connection attempt detected from IP address 2001:470:2cc:1::1bf to TCP port 9999
|
Port Scan | |
| 🇺🇸 chronos |
|
Phishing Email Spam Hacking Spoofing Brute-Force | |
| 🇬🇧 yvoictra |
Jul 25 18:20:08 lamvda sshd[515639]: Invalid user from 2001:470:2cc:1::1bf port 15924
...
|
Brute-Force SSH | |
| 🇳🇱 ege8 |
2025-07-25T13:59:29.242150+03:00 ns3 sshd[187082]: Invalid user from 2001:470:2cc:1::1bf port 45694
...
|
Brute-Force SSH | |
| 🇩🇪 kalof |
ports, 21/24H:1/7D:1
|
Port Scan | |
| 🇹🇭 Sawasdee |
Port Scan/VNC login attempt
...
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown