JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:2cc:1::250

2001:470:2cc:1::250 was found in our database!

This IP was reported 167 times. Confidence of Abuse is 57%: ?

57%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:2cc:1::250

Whois 2001:470:2cc:1::250

IP Abuse Reports for 2001:470:2cc:1::250:

This IP address has been reported a total of 167 times from 24 distinct sources. 2001:470:2cc:1::250 was first reported on January 16th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-08-01 08:20:08 (1 hour ago)	2026-08-01T11:20:07.752494+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-08-01T11:20:07.752494+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:02cc:0001:0000:0000:0000:0250 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=60919 DPT=49668 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cazae	2026-08-01 07:32:50 (1 hour ago)	Unauthorized attempt on debian [5001/tcp] Source port: 42908 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5001/tcp] Source port: 42908 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-30 05:22:30 (2 days ago)	Blocked by UFW (TCP on 33060) Source port: 43295 Packet length: 60 This report (for 2001:0470:02cc: ... show more Blocked by UFW (TCP on 33060) Source port: 43295 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:0250) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-07-30 04:35:27 (2 days ago)	Blocked by UFW [9443/tcp] Source port: 35925 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [9443/tcp] Source port: 35925 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-07-29 01:19:49 (3 days ago)	Unauthorized attempt on debian [212/tcp] Source port: 33689 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on debian [212/tcp] Source port: 33689 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 as211431.net	2026-07-28 05:30:05 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 OPR/107.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-28 00:07:04 (4 days ago)	Unauthorized connection to RDP port 3389	Port Scan
🇫🇮 6kilowatti	2026-07-26 00:31:23 (6 days ago)	2026-07-26T03:31:21.725443+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-07-26T03:31:21.725443+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:02cc:0001:0000:0000:0000:0250 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=236 FLOWLBL=0 PROTO=TCP SPT=60668 DPT=389 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 bontekoe.technology	2026-07-23 07:57:38 (1 week ago)	Port scan or Brute-Force detected. (src_port=55275, dst_port=49668)	Brute-Force
🇺🇸 xmission.com	2026-07-20 09:06:49 (1 week ago)	Blocked by UFW (TCP on 389) Source port: 49639 Packet length: 60 This report (for 2001:0470:02cc:00 ... show more Blocked by UFW (TCP on 389) Source port: 49639 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:0250) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 bontekoe.technology	2026-07-20 06:01:53 (1 week ago)	Port scan or Brute-Force detected. (src_port=56250, dst_port=1080)	Brute-Force
🇺🇸 cazae	2026-07-15 03:17:59 (2 weeks ago)	Unauthorized attempt on debian [7547/tcp] Source port: 46299 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [7547/tcp] Source port: 46299 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇦🇹 centurion	2026-07-15 02:37:05 (2 weeks ago)	Unauthorized attempt on cendev [5443/tcp] Source port: 47702 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on cendev [5443/tcp] Source port: 47702 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-07-09 07:28:04 (3 weeks ago)	2001:0470:02cc:0001:0000:0000:0000:0250 was recorded attempting unexpectedly to open a GRE tunnel.	Port Scan
🇺🇸 xmission.com	2026-07-07 01:52:30 (3 weeks ago)	Blocked by UFW (TCP on 7547) Source port: 55081 Packet length: 60 This report (for 2001:0470:02cc:0 ... show more Blocked by UFW (TCP on 7547) Source port: 55081 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:0250) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 218.255.29.194

🇲🇦 197.153.57.103

🇳🇱 185.224.128.16

🇺🇸 162.216.150.141

🇦🇷 143.105.135.66

🇺🇸 107.150.106.213

🇺🇸 64.62.156.213

🇸🇬 43.134.163.229

🇧🇾 37.215.33.167

🇺🇸 35.91.12.48

🇺🇸 34.58.124.191

🇧🇬 185.253.160.18

🇺🇸 162.216.150.67

🇸🇬 114.119.159.20

🇧🇬 79.124.56.242

🇨🇳 58.254.182.115

🇧🇷 45.162.6.101

🇭🇰 2602:80d:1003::26

🇧🇩 210.79.183.13

🇧🇷 205.210.31.244