JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:2cc:1::aa

2001:470:2cc:1::aa was found in our database!

This IP was reported 305 times. Confidence of Abuse is 22%: ?

22%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:2cc:1::aa

Whois 2001:470:2cc:1::aa

IP Abuse Reports for 2001:470:2cc:1::aa:

This IP address has been reported a total of 305 times from 32 distinct sources. 2001:470:2cc:1::aa was first reported on April 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-04-03 03:14:20 (3 months ago)	Blocked by UFW (TCP on 631) Source port: 40078 Packet length: 60 This report (for 2001:0470:02cc:00 ... show more Blocked by UFW (TCP on 631) Source port: 40078 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:00aa) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 vincent_EUDIER	2026-04-02 06:20:01 (3 months ago)	ET SCAN Suspicious inbound to mySQL port 3306	Port Scan
🇺🇸 xmission.com	2026-03-27 07:55:10 (3 months ago)	Blocked by UFW (TCP on 179) Source port: 58774 Packet length: 60 This report (for 2001:0470:02cc:00 ... show more Blocked by UFW (TCP on 179) Source port: 58774 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:00aa) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-03-27 04:19:32 (3 months ago)	UFW Blocked [3333/TCP] Source: 2001:0470:02cc:0001:0000:0000:0000:00aa:49829 Lenth: 60	Port Scan
🇺🇸 thororen	2026-03-10 05:13:51 (4 months ago)	Blocked by UFW [17689/tcp] Source port: 41437 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [17689/tcp] Source port: 41437 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-03-06 04:06:47 (4 months ago)	2001:0470:02cc:0001:0000:0000:0000:00aa was recorded attempting unexpectedly to open an IPv6 Protoco ... show more 2001:0470:02cc:0001:0000:0000:0000:00aa was recorded attempting unexpectedly to open an IPv6 Protocol 41 tunnel. show less	Port Scan
🇺🇸 xmission.com	2026-01-31 00:14:10 (5 months ago)	Blocked by UFW (TCP on 8080) Source port: 52194 Packet length: 60 This report (for 2001:0470:02cc:0 ... show more Blocked by UFW (TCP on 8080) Source port: 52194 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:00aa) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 shabi	2026-01-09 18:30:16 (6 months ago)	UFW Blocked [49669/TCP] Source: 2001:0470:02cc:0001:0000:0000:0000:00aa:44402 Lenth: 60	Port Scan
🇺🇸 xmission.com	2026-01-08 15:45:02 (6 months ago)	Blocked by UFW (TCP on 135) Source port: 47457 Packet length: 60 This report (for 2001:0470:02cc:00 ... show more Blocked by UFW (TCP on 135) Source port: 47457 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:00aa) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 creations.works	2025-12-20 16:11:30 (6 months ago)	Blocked by UFW on atums [49669/tcp] Source port: 45946 TTL: null Packet length: 60 TOS: null This r ... show more Blocked by UFW on atums [49669/tcp] Source port: 45946 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 kalof	2025-12-14 12:45:17 (6 months ago)	ports, 21/24H:1/7D:1	Port Scan
🇺🇸 thororen	2025-12-04 00:32:17 (7 months ago)	Blocked by UFW [58888/tcp] Source port: 50143 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [58888/tcp] Source port: 50143 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2025-12-03 15:24:19 (7 months ago)	UFW Blocked [5222/TCP] Source: 2001:0470:02cc:0001:0000:0000:0000:00aa:52309 Lenth: 60	Port Scan
🇺🇸 en0	2025-11-24 13:09:58 (7 months ago)	2001:0470:02cc:0001:0000:0000:0000:00aa was recorded attempting unexpectedly to open a GRE tunnel.	Port Scan
🇺🇸 thororen	2025-11-18 07:17:11 (7 months ago)	Blocked by UFW [5986/tcp] Source port: 44441 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [5986/tcp] Source port: 44441 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 16 to 30 of 305 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.202.112.45

🇺🇸 216.25.89.90

🇮🇳 122.162.147.10

🇰🇷 112.216.129.27

🇵🇹 81.193.216.17

🇺🇸 66.150.196.153

🇧🇷 45.181.215.75

🇺🇸 20.169.83.197

🇧🇪 9.160.164.139

🇧🇪 9.160.164.131

🇺🇸 135.237.127.172

🇰🇷 115.178.75.243

🇸🇮 102.220.160.79

🇵🇱 95.214.53.134

🇷🇴 80.94.92.179

🇨🇳 39.163.26.38

🇬🇧 35.203.211.243

🇺🇸 23.159.216.225

🇺🇸 23.92.27.179

🇰🇷 14.63.217.28