JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2001:470:2cc:1::281

Activity Trending Down IPv6 SLAAC Note

Abuse confidence score ?

25% Elevated

139 reports

26 reporters · latest 2 weeks ago

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Jose, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2001:470:2cc:1::281

This IP address has been reported a total of 139 times from 26 distinct sources. 2001:470:2cc:1::281 was first reported on April 28th 2025, and the most recent report was 2 weeks ago. In the last 60 days, the top reporter locations were: United States of America with 6 reports; Austria with 1 report; Germany with 1 report. The most common categories in these recent reports were: Port Scan 9 times; Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-27 09:06:08 (3 months ago)	Unauthorized connection to PostgreSQL port 5432	Port Scan
🇫🇷 centurion	2026-05-24 05:39:21 (3 months ago)	Unauthorized attempt on uptime [10443/tcp] Source port: 38190 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on uptime [10443/tcp] Source port: 38190 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 LotPhantom	2026-05-19 05:28:32 (4 months ago)	2001:470:2cc:1::281 - - [19/May/2026:05:28:12 +0000] "GET /favicon.ico HTTP/1.1" 404 548 "-" "Mozill ... show more 2001:470:2cc:1::281 - - [19/May/2026:05:28:12 +0000] "GET /favicon.ico HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "0" ... show less	Web App Attack
🇺🇸 xmission.com	2026-05-17 08:47:53 (4 months ago)	Blocked by UFW (TCP on 389) Source port: 44134 Packet length: 60 This report (for 2001:0470:02cc:00 ... show more Blocked by UFW (TCP on 389) Source port: 44134 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:0281) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-16 02:54:34 (4 months ago)	Blocked by UFW (TCP on 8015) Source port: 49300 Packet length: 60 This report (for 2001:0470:02cc:0 ... show more Blocked by UFW (TCP on 8015) Source port: 49300 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:0281) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-15 07:25:29 (4 months ago)	Blocked by UFW (TCP on 4443) Source port: 37576 Packet length: 60 This report (for 2001:0470:02cc:0 ... show more Blocked by UFW (TCP on 4443) Source port: 37576 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:0281) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-05-15 01:38:28 (4 months ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇦🇹 centurion	2026-05-12 02:11:27 (4 months ago)	Unauthorized attempt on coresecret [7547/tcp] Source port: 57249 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [7547/tcp] Source port: 57249 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-04-29 07:35:45 (4 months ago)	Unauthorized attempt on debian [3000/tcp] Source port: 56183 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [3000/tcp] Source port: 56183 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-04-28 07:13:07 (4 months ago)	Unauthorized attempt on debian [8080/tcp] Source port: 33656 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8080/tcp] Source port: 33656 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-04-27 04:35:57 (4 months ago)	2026-04-27T07:35:56.367957+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-04-27T07:35:56.367957+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:02cc:0001:0000:0000:0000:0281 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=TCP SPT=49877 DPT=6000 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 shabi	2026-04-25 02:50:19 (4 months ago)	UFW Blocked [82/TCP] Source: 2001:0470:02cc:0001:0000:0000:0000:0281:38637 Lenth: 60	Port Scan
🇦🇹 centurion	2026-04-21 00:20:47 (5 months ago)	Unauthorized attempt on coresecret [5001/tcp] Source port: 59179 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [5001/tcp] Source port: 59179 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-12 07:01:19 (5 months ago)	Blocked by UFW (TCP on 89) Source port: 49756 Packet length: 60 This report (for 2001:0470:02cc:000 ... show more Blocked by UFW (TCP on 89) Source port: 49756 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:0281) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-04-12 00:18:24 (5 months ago)	Unauthorized attempt on coresecret [9000/tcp] Source port: 60449 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [9000/tcp] Source port: 60449 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 31 to 45 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 112.209.25.165

🇺🇸 104.21.48.193

🇷🇺 77.41.156.64

🇺🇸 65.49.1.94

🇺🇸 45.79.218.40

🇮🇹 37.159.4.29

🇹🇷 31.145.131.202

🇺🇸 24.18.132.135

🇷🇺 212.19.8.30

🇭🇰 199.45.154.72

🇧🇷 186.232.209.17

🇮🇩 180.245.255.24

🇷🇺 176.211.17.173

🇺🇸 162.158.63.91

🇰🇷 125.138.166.217

🇧🇪 104.199.2.20

🇷🇸 95.86.48.1

🇮🇳 45.114.39.39

🇨🇳 42.51.41.137

🇺🇸 35.169.206.177