JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::14b

2001:470:1:fb5::14b was found in our database!

This IP was reported 153 times. Confidence of Abuse is 50%: ?

50%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	scan-68-0a.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::14b

Whois 2001:470:1:fb5::14b

IP Abuse Reports for 2001:470:1:fb5::14b:

This IP address has been reported a total of 153 times from 33 distinct sources. 2001:470:1:fb5::14b was first reported on March 14th 2025, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 kranem	2026-09-17 09:00:15 (6 minutes ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (Hurricane Electric LLC) Protocol: H ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (Hurricane Electric LLC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-09-17T06:31:17Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0 show less	Bad Web Bot
🇺🇸 cazae	2026-09-17 08:14:16 (52 minutes ago)	Unauthorized attempt on debian [21/tcp] Source port: 38641 TTL: null Packet length: 60 TOS: null ht ... show more Unauthorized attempt on debian [21/tcp] Source port: 38641 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan FTP Brute-Force
🇺🇸 xmission.com	2026-09-11 04:37:46 (6 days ago)	Blocked by UFW (TCP on 9443) Source port: 52252 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 9443) Source port: 52252 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:014b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇭 Sawasdee	2026-09-06 08:27:13 (1 week ago)	Port Scan/VNC login attempt ...	Port Scan
🇺🇸 cazae	2026-09-05 05:43:27 (1 week ago)	Unauthorized attempt on debian [443/tcp] Source port: 49401 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on debian [443/tcp] Source port: 49401 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-05 01:23:23 (1 week ago)	Blocked by UFW (TCP on 58888) Source port: 59489 Packet length: 60 This report (for 2001:0470:0001: ... show more Blocked by UFW (TCP on 58888) Source port: 59489 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:014b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-09-03 08:19:56 (2 weeks ago)	Blocked by UFW [49668/tcp] Source port: 55104 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [49668/tcp] Source port: 55104 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-09-01 09:16:24 (2 weeks ago)	2026-09-01T12:16:23.958863+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-01T12:16:23.958863+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:014b DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=43862 DPT=49668 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-09-01 05:00:57 (2 weeks ago)	Blocked by UFW (TCP on 1801) Source port: 36967 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 1801) Source port: 36967 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:014b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-08-31 08:45:52 (2 weeks ago)	2026-08-31T11:45:51.586968+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-08-31T11:45:51.586968+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:014b DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=50158 DPT=49667 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-08-29 01:00:14 (2 weeks ago)	Blocked by UFW (TCP on 2087) Source port: 36583 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 2087) Source port: 36583 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:014b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-27 01:15:10 (3 weeks ago)	Blocked by UFW (TCP on 1080) Source port: 44013 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 1080) Source port: 44013 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:014b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 as211431.net	2026-08-26 05:40:32 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0.0; Win64; x64; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.156 Not(A:Brand/24 YaBrowser/24.4.1.899 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 cazae	2026-08-18 05:28:37 (4 weeks ago)	Unauthorized attempt on debian [8873/tcp] Source port: 48295 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8873/tcp] Source port: 48295 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-08-14 08:08:29 (1 month ago)	Unauthorized attempt on debian [2323/tcp] Source port: 53809 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [2323/tcp] Source port: 53809 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted

Showing 1 to 15 of 153 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.112.3.12

🇨🇦 137.184.163.194

🇨🇳 119.119.6.53

🇦🇷 190.188.2.96

🇩🇪 147.90.209.26

🇲🇾 49.124.149.217

🇳🇱 45.198.224.230

🇧🇪 34.156.212.48

🇧🇪 34.156.121.46

🇧🇪 34.140.45.95

🇺🇸 34.138.108.94

🇺🇸 24.144.114.80

🇺🇸 20.106.18.245

🇵🇰 203.99.173.189

🇦🇷 179.41.140.144

🇦🇷 179.36.244.9

🇨🇦 178.128.236.113

🇩🇪 167.94.146.32

🇺🇸 144.202.82.88

🇮🇩 103.193.145.171