JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::161

2001:470:1:fb5::161 was found in our database!

This IP was reported 180 times. Confidence of Abuse is 37%: ?

37%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::161

Whois 2001:470:1:fb5::161

IP Abuse Reports for 2001:470:1:fb5::161:

This IP address has been reported a total of 180 times from 33 distinct sources. 2001:470:1:fb5::161 was first reported on February 23rd 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cazae	2026-10-18 07:29:08 (4 days ago)	Unauthorized attempt on debian [5938/tcp] Source port: 54366 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5938/tcp] Source port: 54366 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 as211431.net	2026-10-18 00:39:09 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 OPR/108.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-10-13 07:23:36 (1 week ago)	Blocked by UFW [49669/tcp] \| SPT: 36714 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/ ... show more Blocked by UFW [49669/tcp] \| SPT: 36714 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 bontekoe.technology	2026-10-04 00:59:53 (2 weeks ago)	Port scan or Brute-Force detected. (src_port=60694, dst_port=30005)	Brute-Force
🇩🇪 DSK	2026-09-28 06:18:11 (3 weeks ago)	Unauthorized connection Drop [81/tcp] #10624	Bad Web Bot
🇭🇺 kranem	2026-09-25 06:00:37 (3 weeks ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (Hurricane Electric LLC) Protocol: H ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (Hurricane Electric LLC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-09-25T04:03:34Z User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/120.0.6099.28 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-09-23 06:25:03 (4 weeks ago)	Blocked by UFW [3128/tcp] \| SPT: 45446 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [3128/tcp] \| SPT: 45446 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-16 03:48:14 (1 month ago)	Blocked by UFW [8880/tcp] \| SPT: 46931 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [8880/tcp] \| SPT: 46931 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-09-12 07:43:57 (1 month ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇫🇮 6kilowatti	2026-09-07 02:06:20 (1 month ago)	2026-09-07T05:06:20.389826+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-07T05:06:20.389826+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:0161 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=238 FLOWLBL=0 PROTO=TCP SPT=53966 DPT=4443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cazae	2026-09-06 05:21:32 (1 month ago)	Unauthorized attempt on debian [995/tcp] Source port: 50961 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on debian [995/tcp] Source port: 50961 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-31 08:54:47 (1 month ago)	Blocked by UFW [5432/tcp] \| SPT: 55314 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [5432/tcp] \| SPT: 55314 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 vincent_EUDIER	2026-08-28 00:20:00 (1 month ago)	ET SCAN Suspicious inbound to PostgreSQL port 5432	Port Scan
🇺🇸 thororen	2026-08-20 07:39:10 (2 months ago)	Blocked by UFW [8081/tcp] Source port: 56440 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [8081/tcp] Source port: 56440 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-08-18 05:08:59 (2 months ago)	Unauthorized attempt on debian [9000/tcp] Source port: 47934 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [9000/tcp] Source port: 47934 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 180 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 191.108.202.74

🇬🇷 83.235.16.111

🇵🇱 80.238.119.30

🇻🇪 190.6.18.193

🇧🇷 179.184.85.167

🇩🇪 167.94.146.48

🇮🇳 160.224.43.52

🇹🇭 118.194.250.95

🇨🇳 113.218.144.141

🇭🇰 101.36.109.219

🇷🇴 92.118.39.50

🇧🇪 35.241.239.86

🇺🇸 20.118.235.128

🇮🇩 202.154.15.177

🇲🇽 189.194.140.170

🇺🇦 185.35.8.193

🇻🇳 171.236.130.227

🇳🇱 146.19.248.35

🇺🇸 143.110.153.215

🇺🇸 104.28.166.177