2001:470:2cc:1::aa
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
- ISP
- The Shadowserver Foundation, Inc.
- Usage Type
- Fixed Line ISP
- ASN
- AS6939
- Domain Name
- shadowserver.org
- Country
- 🇺🇸 United States of America
- City
- Tracy, California
Abuse Reports
Total reports
314 from
35 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Blocked by UFW [22/tcp] | SPT: 46431 | TTL: null | LEN: 60 | TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan SSH | |
| 🇩🇪 bontekoe.technology |
Port scan or Brute-Force detected. (src_port=42082, dst_port=49665)
|
Brute-Force | |
| 🇺🇸 thororen |
Blocked by UFW [49667/tcp]
Source port: 60043
TTL: null
Packet length: 64
TOS: null
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 DSK |
Unauthorized connection Drop [23/tcp] #9828
|
Bad Web Bot | |
| 🇺🇸 cazae |
Unauthorized attempt on debian [8080/tcp]
Source port: 45152
TTL: null
Packet length: 60
TOS: null
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 2323)
Source port: 41255
Packet length: 60
This report (for 2001:0470:02cc:0001:0000:0000:0000:00aa) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Unauthorized connection to SSH port 22
|
Port Scan SSH | |
| 🇦🇹 centurion |
Unauthorized attempt on cendev [8443/tcp]
Source port: 49850
TTL: null
Packet length: 60
TOS: null
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 cazae |
Unauthorized attempt on debian [17689/tcp]
Source port: 48928
TTL: null
Packet length: 60
TOS: null
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 cazae |
Unauthorized attempt on debian [89/tcp]
Source port: 41872
TTL: null
Packet length: 60
TOS: null
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 Entalpi.net |
Tried to hit sensible closed port commonly used in attacks
|
Port Scan Hacking | |
| 🇺🇸 shabi |
UFW Blocked [2121/TCP]
Source: 2001:0470:02cc:0001:0000:0000:0000:00aa:34386
Lenth: 60
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 49667)
Source port: 41100
Packet length: 60
This report (for 2001:0470:02cc:0001:0000:0000:0000:00aa) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 en0 |
2001:0470:02cc:0001:0000:0000:0000:00aa was recorded attempting unexpectedly to open a GRE tunnel.
|
Port Scan | |
| 🇺🇸 LotPhantom |
2001:470:2cc:1::aa - - [24/May/2026:03:53:16 +0000] "GET /favicon.ico HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko)" "0"
...
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown