JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:2cc:1::bb

2001:470:2cc:1::bb was found in our database!

This IP was reported 270 times. Confidence of Abuse is 17%: ?

17%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:2cc:1::bb

Whois 2001:470:2cc:1::bb

IP Abuse Reports for 2001:470:2cc:1::bb:

This IP address has been reported a total of 270 times from 29 distinct sources. 2001:470:2cc:1::bb was first reported on April 7th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-02-01 03:54:11 (4 months ago)	[03:54] Port scanning. Port(s) scanned: TCP/1080	Port Scan
🇺🇸 thororen	2026-01-23 01:04:48 (5 months ago)	Blocked by UFW [2323/tcp] Source port: 57434 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [2323/tcp] Source port: 57434 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2025-12-31 15:18:01 (5 months ago)	UFW Blocked [2095/TCP] Source: 2001:0470:02cc:0001:0000:0000:0000:00bb:37765 Lenth: 60	Port Scan
🇩🇪 403veli	2025-12-28 14:33:15 (6 months ago)	Confirmed malicious activity observed via T-Pot honeypot Observed 1 events on port 447 (flow) from 2 ... show more Confirmed malicious activity observed via T-Pot honeypot Observed 1 events on port 447 (flow) from 2025-12-28T14:33:15.964000+00:00 to 2025-12-28T14:33:15.964000+00:00. Sample: {"src_port": 55134, "event_type": "flow", "src_ip": "2001:0470:02cc:0001:0000:0000:0000:00bb", "dest_port": 447} show less	Exploited Host
🇩🇪 kalof	2025-11-26 13:17:13 (7 months ago)	ports, 8080/24H:1/7D:1	Port Scan
🇩🇪 ps-center	2025-11-18 00:27:56 (7 months ago)	MYH-W: TCP-Scanner. Port: 3128	Port Scan
🇺🇸 thororen	2025-11-12 15:23:51 (7 months ago)	Blocked by UFW [5900/tcp] Source port: 59001 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [5900/tcp] Source port: 59001 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2025-11-02 14:20:47 (7 months ago)	Blocked by UFW [800/tcp] Source port: 57255 TTL: null Packet length: 60 TOS: null This report was g ... show more Blocked by UFW [800/tcp] Source port: 57255 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 kalof	2025-10-31 15:27:01 (7 months ago)	ports, 3389/24H:1/7D:1	Port Scan
🇺🇸 en0	2025-10-28 15:00:00 (8 months ago)	2001:0470:02cc:0001:0000:0000:0000:00bb was recorded attempting unexpectedly to open an IPv6 Protoco ... show more 2001:0470:02cc:0001:0000:0000:0000:00bb was recorded attempting unexpectedly to open an IPv6 Protocol 41 tunnel. show less	Port Scan
🇺🇸 xmission.com	2025-10-27 15:05:11 (8 months ago)	Blocked by UFW (TCP on 8888) Source port: 59510 Packet length: 60 This report (for 2001:0470:02cc:0 ... show more Blocked by UFW (TCP on 8888) Source port: 59510 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:00bb) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-10-25 13:53:26 (8 months ago)	Unauthorized connection to SMB port 445	Port Scan
🇺🇸 thororen	2025-10-24 13:38:24 (8 months ago)	Blocked by UFW [2083/tcp] Source port: 42561 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [2083/tcp] Source port: 42561 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2025-10-21 13:51:43 (8 months ago)	Blocked by UFW [49664/tcp] Source port: 40424 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [49664/tcp] Source port: 40424 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-10-21 00:29:43 (8 months ago)	Blocked by UFW (TCP on 1080) Source port: 36279 Packet length: 60 This report (for 2001:0470:02cc:0 ... show more Blocked by UFW (TCP on 1080) Source port: 36279 Packet length: 60 This report (for 2001:0470:02cc:0001:0000:0000:0000:00bb) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 16 to 30 of 270 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 186.14.0.237

🇮🇳 106.200.27.120

🇺🇸 91.230.168.67

🇱🇻 81.30.98.158

🇬🇧 81.19.219.195

🇺🇸 44.239.142.57

🇨🇦 212.104.215.53

🇺🇸 206.81.2.201

🇺🇦 195.3.156.10

🇺🇸 185.147.157.141

🇦🇷 181.47.139.65

🇨🇱 179.57.161.145

🇩🇪 164.90.187.24

🇮🇳 152.57.177.205

🇺🇸 146.70.171.69

🇫🇷 145.239.65.133

🇺🇸 142.93.8.193

🇵🇭 112.207.131.140

🇺🇸 102.129.232.15

🇮🇹 93.151.245.212