JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::113

2001:470:1:fb5::113 was found in our database!

This IP was reported 332 times. Confidence of Abuse is 14%: ?

14%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-58-11.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::113

Whois 2001:470:1:fb5::113

IP Abuse Reports for 2001:470:1:fb5::113:

This IP address has been reported a total of 332 times from 34 distinct sources. 2001:470:1:fb5::113 was first reported on July 9th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cazae	2026-06-19 07:13:51 (1 week ago)	Unauthorized attempt on debian [2222/tcp] Source port: 58365 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [2222/tcp] Source port: 58365 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-05-15 10:03:33 (1 month ago)	2026-05-15T13:03:32.667387+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-05-15T13:03:32.667387+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:0113 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=56951 DPT=2222 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 shabi	2026-05-04 05:41:23 (1 month ago)	UFW Blocked [2222/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:0113:46356 Lenth: 60	Port Scan
🇺🇸 shabi	2026-04-28 05:16:49 (1 month ago)	UFW Blocked [17689/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:0113:41253 Lenth: 60	Port Scan
🇺🇸 xmission.com	2026-04-10 03:03:08 (2 months ago)	Blocked by UFW (TCP on 8883) Source port: 51150 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 8883) Source port: 51150 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:0113) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-04-01 02:40:14 (2 months ago)	Blocked by UFW [8888/tcp] Source port: 59328 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [8888/tcp] Source port: 59328 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-03-05 07:57:23 (3 months ago)	Blocked by UFW [427/tcp] Source port: 39243 TTL: null Packet length: 60 TOS: null This report was g ... show more Blocked by UFW [427/tcp] Source port: 39243 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-02-15 02:00:10 (4 months ago)	UFW Blocked [9200/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:0113:41819 Lenth: 60	Port Scan
🇺🇸 cazae	2026-01-29 04:44:30 (4 months ago)	Unauthorized attempt on debian [9443/tcp] Source port: 54518 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [9443/tcp] Source port: 54518 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 centurion	2026-01-27 00:51:09 (4 months ago)	Unauthorized attempt on uptime [25/tcp] Source port: 35694 TTL: null Packet length: 60 TOS: null htt ... show more Unauthorized attempt on uptime [25/tcp] Source port: 35694 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 403veli	2025-12-28 01:47:38 (5 months ago)	Confirmed malicious activity observed via T-Pot honeypot Observed 4 events on port 8080 (unknown) fr ... show more Confirmed malicious activity observed via T-Pot honeypot Observed 4 events on port 8080 (unknown) from 2025-12-27T14:21:56+00:00 to 2025-12-27T14:21:56+00:00. Sample: {"src_port": 3001, "src_ip": "2001:470:1:fb5:0:0:0:113", "dest_port": 8080} show less	Port Scan
🇺🇸 shabi	2025-12-15 13:16:53 (6 months ago)	UFW Blocked [49669/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:0113:41534 Lenth: 60	Port Scan
🇩🇪 kalof	2025-11-24 12:44:07 (7 months ago)	ports, 22/24H:1/7D:1	Port Scan
🇺🇸 shabi	2025-11-06 13:27:25 (7 months ago)	UFW Blocked [5985/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:0113:45855 Lenth: 60	Port Scan
🇺🇸 thororen	2025-11-02 15:31:47 (7 months ago)	Blocked by UFW [49666/tcp] Source port: 36260 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [49666/tcp] Source port: 36260 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 332 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.222

🇨🇳 118.123.1.38

🇺🇸 104.22.93.39

🇹🇷 78.186.54.65

🇺🇸 44.62.22.90

🇫🇷 2a02:4780:27:2220:0:ea4:1e40:1

🇩🇪 213.209.159.231

🇺🇸 185.180.141.67

🇳🇱 176.65.132.107

🇺🇸 172.253.210.26

🇯🇵 172.233.88.70

🇧🇩 103.187.94.214

🇫🇷 85.217.140.25

🇱🇹 77.90.185.239

🇺🇸 72.235.10.199

🇺🇸 65.49.1.220

🇺🇸 44.128.128.196

🇰🇷 20.214.144.20

🇰🇷 14.63.217.28

🇨🇳 220.179.255.180