JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5:225:b5ff:fe11:9e

2001:470:1:fb5:225:b5ff:fe11:9e was found in our database!

This IP was reported 386 times. Confidence of Abuse is 20%: ?

20%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5:225:b5ff:fe11:9e

Whois 2001:470:1:fb5:225:b5ff:fe11:9e

IP Abuse Reports for 2001:470:1:fb5:225:b5ff:fe11:9e:

This IP address has been reported a total of 386 times from 51 distinct sources. 2001:470:1:fb5:225:b5ff:fe11:9e was first reported on July 2nd 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 S.O.B.A. Dev.	2026-06-15 06:02:09 (1 week ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 xmission.com	2026-06-12 08:23:57 (1 week ago)	Blocked by UFW (TCP on 212) Source port: 33690 Packet length: 60 This report (for 2001:0470:0001:0f ... show more Blocked by UFW (TCP on 212) Source port: 33690 Packet length: 60 This report (for 2001:0470:0001:0fb5:0225:b5ff:fe11:009e) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-05-11 08:39:54 (1 month ago)	2001:0470:0001:0fb5:0225:b5ff:fe11:009e was recorded attempting unexpectedly to open an IPv6 Protoco ... show more 2001:0470:0001:0fb5:0225:b5ff:fe11:009e was recorded attempting unexpectedly to open an IPv6 Protocol 41 tunnel. show less	Port Scan
🇺🇸 cazae	2026-05-06 11:55:51 (1 month ago)	Unauthorized attempt on debian [179/tcp] Source port: 52252 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on debian [179/tcp] Source port: 52252 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-04-03 02:00:32 (2 months ago)	Unauthorized attempt on git [3128/tcp] Source port: 60175 TTL: null Packet length: 60 TOS: null http ... show more Unauthorized attempt on git [3128/tcp] Source port: 60175 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-03-30 03:17:56 (2 months ago)	Unauthorized attempt on debian [8080/tcp] Source port: 60818 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8080/tcp] Source port: 60818 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-03-25 06:31:55 (3 months ago)	UFW Blocked [8883/TCP] Source: 2001:0470:0001:0fb5:0225:b5ff:fe11:009e:46584 Lenth: 60	Port Scan
🇭🇺 kranem	2026-03-14 09:00:29 (3 months ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (HURRICANE - Hurricane Electric LLC) ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (HURRICANE - Hurricane Electric LLC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-03-14T08:02:48Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0 show less	Bad Web Bot
🇺🇸 thororen	2026-02-28 01:38:30 (3 months ago)	Blocked by UFW [10443/tcp] Source port: 49277 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [10443/tcp] Source port: 49277 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-02-05 05:32:36 (4 months ago)	UFW Blocked [6443/TCP] Source: 2001:0470:0001:0fb5:0225:b5ff:fe11:009e:43601 Lenth: 60	Port Scan
🇦🇹 centurion	2026-01-28 02:44:56 (4 months ago)	Unauthorized attempt on cendev [5222/tcp] Source port: 38711 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on cendev [5222/tcp] Source port: 38711 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ps-center	2026-01-09 18:22:58 (5 months ago)	RDM-W: TCP-Scanner. Port: 21	Port Scan
🇩🇪 ps-center	2026-01-07 18:13:04 (5 months ago)	MYH-W: TCP-Scanner. Port: 23	Port Scan
🇺🇸 shabi	2026-01-07 12:03:31 (5 months ago)	UFW Blocked [81/TCP] Source: 2001:0470:0001:0fb5:0225:b5ff:fe11:009e:59338 Lenth: 60	Port Scan
🇺🇸 shabi	2026-01-01 16:40:53 (5 months ago)	UFW Blocked [636/TCP] Source: 2001:0470:0001:0fb5:0225:b5ff:fe11:009e:50026 Lenth: 60	Port Scan

Showing 1 to 15 of 386 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.227.210.218

🇰🇷 122.35.192.33

🇵🇱 74.248.112.30

🇰🇿 31.132.90.3

🇮🇳 27.6.72.56

🇫🇷 15.188.54.140

🇷🇴 193.32.162.35

🇷🇴 193.32.162.34

🇨🇳 180.153.236.77

🇳🇱 91.92.243.245

🇫🇷 85.217.140.36

🇺🇸 76.145.146.223

🇬🇧 51.195.215.21

🇨🇳 42.7.240.232

🇺🇸 23.234.119.201

🇷🇴 2.57.121.25

🇿🇦 196.39.13.31

🇧🇷 189.37.71.230

🇮🇩 182.253.156.173

🇩🇪 178.27.90.142