JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::13d

2001:470:1:fb5::13d was found in our database!

This IP was reported 391 times. Confidence of Abuse is 26%: ?

26%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	scan-59-1b.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::13d

Whois 2001:470:1:fb5::13d

IP Abuse Reports for 2001:470:1:fb5::13d:

This IP address has been reported a total of 391 times from 42 distinct sources. 2001:470:1:fb5::13d was first reported on July 12th 2023, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 SentinalX by uzumaru	2026-08-23 01:41:58 (19 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.shadowserver.org:443 show less	Open Proxy Port Scan
🇳🇱 tr1n	2026-08-16 07:57:59 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 6939 (Hurricane ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 6939 (Hurricane Electric LLC) \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| Timestamp: 2026-08-16T07:57:59Z \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Entalpi.net	2026-08-06 04:52:11 (2 weeks ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇫🇮 6kilowatti	2026-07-20 01:13:12 (1 month ago)	2026-07-20T04:13:11.651546+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-07-20T04:13:11.651546+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:013d DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=238 FLOWLBL=0 PROTO=TCP SPT=41605 DPT=8888 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Axel	2026-06-30 07:20:02 (1 month ago)	Blocked by UFW on LAXHH [81/tcp] \| SPT: 52304 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: githu ... show more Blocked by UFW on LAXHH [81/tcp] \| SPT: 52304 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-06-22 07:13:33 (2 months ago)	Blocked by UFW [10443/tcp] Source port: 32889 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [10443/tcp] Source port: 32889 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-06-16 03:51:32 (2 months ago)	UFW Blocked [49670/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:013d:38135 Lenth: 60	Port Scan
🇺🇸 cazae	2026-06-13 07:32:51 (2 months ago)	Unauthorized attempt on debian [81/tcp] Source port: 58239 TTL: null Packet length: 60 TOS: null ht ... show more Unauthorized attempt on debian [81/tcp] Source port: 58239 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-06-11 07:27:45 (2 months ago)	UFW Blocked [4443/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:013d:43269 Lenth: 60	Port Scan
🇺🇸 thororen	2026-06-06 06:09:12 (2 months ago)	Blocked by UFW [636/tcp] Source port: 35076 TTL: null Packet length: 64 TOS: null This report was g ... show more Blocked by UFW [636/tcp] Source port: 35076 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-05-23 06:58:09 (3 months ago)	2026-05-23T09:58:08.655752+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-05-23T09:58:08.655752+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:013d DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=40685 DPT=25 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 thororen	2026-05-22 04:46:27 (3 months ago)	Blocked by UFW [9000/tcp] Source port: 55698 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [9000/tcp] Source port: 55698 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-04-15 10:31:12 (4 months ago)	Blocked by UFW [33060/tcp] Source port: 59072 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [33060/tcp] Source port: 59072 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-02 07:52:21 (4 months ago)	Blocked by UFW (TCP on 631) Source port: 56733 Packet length: 60 This report (for 2001:0470:0001:0f ... show more Blocked by UFW (TCP on 631) Source port: 56733 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:013d) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-03-31 06:15:24 (4 months ago)	UFW Blocked [2087/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:013d:45418 Lenth: 60	Port Scan

Showing 1 to 15 of 391 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.115.144.103

🇺🇸 179.61.137.23

🇺🇦 146.0.80.51

🇳🇱 89.248.165.203

🇸🇪 83.191.181.23

🇲🇽 68.155.146.130

🇩🇪 47.245.142.218

🇬🇧 45.82.76.121

🇷🇴 193.46.255.86

🇺🇸 165.232.54.128

🇻🇳 103.82.21.8

🇳🇱 91.92.42.213

🇮🇹 88.147.30.59

🇲🇾 49.124.151.69

🇷🇺 178.178.222.59

🇧🇼 153.67.129.16

🇮🇩 103.129.59.62

🇫🇷 85.217.140.8

🇧🇬 79.100.170.186

🇩🇪 47.245.129.215