JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:2cc:1::24d

2001:470:2cc:1::24d was found in our database!

This IP was reported 169 times. Confidence of Abuse is 47%: ?

47%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:2cc:1::24d

Whois 2001:470:2cc:1::24d

IP Abuse Reports for 2001:470:2cc:1::24d:

This IP address has been reported a total of 169 times from 33 distinct sources. 2001:470:2cc:1::24d was first reported on May 11th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-02-04 03:12:10 (7 months ago)	Port Scan/VNC login attempt ...	Port Scan
🇺🇸 xmission.com	2026-02-03 08:18:49 (7 months ago)	Blocked by UFW (TCP on 995) Source port: 38355 Packet length: 60 This report (for 2001:0470:02cc:00 ... show more Blocked by UFW (TCP on 995) Source port: 38355 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:024d) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇭 Sawasdee	2026-01-28 03:03:24 (7 months ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇦🇹 centurion	2026-01-28 02:29:02 (7 months ago)	Unauthorized attempt on coresecret [7443/tcp] Source port: 48210 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [7443/tcp] Source port: 48210 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-01-26 07:43:57 (7 months ago)	Blocked by UFW (TCP on 27017) Source port: 48951 Packet length: 60 This report (for 2001:0470:02cc: ... show more Blocked by UFW (TCP on 27017) Source port: 48951 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:024d) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-01-26 00:57:29 (7 months ago)	Unauthorized attempt on coresecret [8443/tcp] Source port: 58493 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [8443/tcp] Source port: 58493 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-01-24 07:38:41 (7 months ago)	UFW Blocked [9000/TCP] Source: 2001:0470:02cc:0001:0000:0000:0000:024d:35131 Lenth: 60	Port Scan
🇺🇸 thororen	2026-01-24 05:43:41 (7 months ago)	Blocked by UFW [800/tcp] Source port: 53392 TTL: null Packet length: 60 TOS: null This report was g ... show more Blocked by UFW [800/tcp] Source port: 53392 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-01-23 09:18:49 (7 months ago)	Unauthorized connection to Telnet port 23	Port Scan
🇺🇸 LotPhantom	2026-01-22 03:38:44 (7 months ago)	2001:470:2cc:1::24d - - [22/Jan/2026:03:38:31 +0000] "GET /favicon.ico HTTP/1.1" 404 548 "-" "Mozill ... show more 2001:470:2cc:1::24d - - [22/Jan/2026:03:38:31 +0000] "GET /favicon.ico HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.78" "0" ... show less	Web App Attack
🇦🇹 centurion	2026-01-12 00:25:01 (8 months ago)	Unauthorized attempt on cendev [85/tcp] Source port: 37733 TTL: null Packet length: 60 TOS: null htt ... show more Unauthorized attempt on cendev [85/tcp] Source port: 37733 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-01-05 15:11:49 (8 months ago)	UFW Blocked [8081/TCP] Source: 2001:0470:02cc:0001:0000:0000:0000:024d:53025 Lenth: 60	Port Scan
🇩🇪 403veli	2026-01-04 17:55:09 (8 months ago)	Confirmed malicious activity observed via T-Pot honeypot Observed 3 events on port 21 (unknown) from ... show more Confirmed malicious activity observed via T-Pot honeypot Observed 3 events on port 21 (unknown) from 2026-01-04T17:55:09+00:00 to 2026-01-04T17:55:09+00:00. Sample: {"src_port": 36290, "dest_port": 21, "src_ip": "2001:470:2cc:1:0:0:0:24d"} show less	Brute-Force
🇺🇸 shabi	2026-01-04 17:38:06 (8 months ago)	UFW Blocked [5903/TCP] Source: 2001:0470:02cc:0001:0000:0000:0000:024d:57350 Lenth: 60	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-01-04 11:57:46 (8 months ago)	Persistent port scanning or vulnerability scanning	Port Scan

Showing 76 to 90 of 169 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.141.34.121

🇧🇷 205.210.31.249

🇸🇻 201.247.15.87

🇲🇽 189.189.138.125

🇧🇷 189.125.111.177

🇨🇳 182.244.5.153

🇳🇱 178.16.55.231

🇺🇸 172.68.70.128

🇺🇸 165.154.173.204

🇺🇸 154.47.22.107

🇺🇸 147.185.132.85

🇸🇻 138.219.14.203

🇧🇷 138.99.207.245

🇨🇳 116.55.245.26

🇭🇰 103.43.191.43

🇨🇭 84.74.163.210

🇺🇸 72.48.87.192

🇯🇵 49.212.156.173

🇫🇷 2001:41d0:33a:a00::409

🇮🇳 220.158.184.112