2001:470:1:fb5::1a0
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
- ISP
- The Shadowserver Foundation, Inc.
- Usage Type
- Fixed Line ISP
- ASN
- AS6939
- Hostname(s)
- scan-70-1f.shadowserver.io
- Domain Name
- shadowserver.org
- Country
- 🇺🇸 United States of America
- City
- Pleasanton, California
Abuse Reports
Total reports
1,403 from
149 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 MatCat |
Banned by fail2ban: sshd
|
Brute-Force SSH | |
| 🇬🇧 yvoictra |
2026-10-02T05:20:03.178850+02:00 savine sshd-session[795604]: Invalid user from 2001:470:1:fb5::1a0 port 61480
...
|
Brute-Force SSH | |
| 🇩🇪 xavier-momain.eu |
CrowdSec ban — scenario: ssh:bruteforce | report #2
|
Brute-Force SSH | |
| 🇳🇱 tr1n |
|
Bad Web Bot | |
| 🇩🇪 marcel-knorr.de |
[MK-VM3] Blocked by UFW
|
Brute-Force Port Scan | |
| 🇫🇮 kumiko |
[2026-10-01 06:16:02] Unauthorized port scan/probing (3 times on port 2096) Blocked by UFW
|
Port Scan | |
| 🇺🇸 cazae |
Unauthorized attempt on debian [49669/tcp]
Source port: 45123
TTL: null
Packet length: 60
TOS: null
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Email auth - postfix SASL authentication failed
|
Brute-Force | |
| 🇺🇸 LotPhantom |
2001:470:1:fb5::1a0 - - [30/Sep/2026:05:06:51 +0000] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "0"
...
|
Web App Attack | |
| 🇩🇪 gnb |
|
Port Scan | |
| 🇩🇪 DSK |
Unauthorized connection Drop [2095/tcp] #13965
|
Bad Web Bot | |
| 🇩🇪 jbcrn |
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
|
Bad Web Bot Web App Attack | |
| 🇫🇷 oh.mg |
(sshd) Failed SSH login from 2001:470:1:fb5::1a0 (scan-70-1f.shadowserver.io): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 30 00:03:08 joshua sshd[3467848]: Invalid user from 2001:470:1:fb5::1a0 port 44626
|
Port Scan | |
| 🇩🇪 xavier-momain.eu |
CrowdSec ban — scenario: ssh:bruteforce
|
Brute-Force SSH | |
| 🇫🇷 gianluca.demartino75 |
2026-09-29T07:04:24.207975+02:00 vps-49934a4d endlessh[2953064]: 2026-09-29T05:04:24.207Z ACCEPT host=2001:470:1:fb5::1a0 port=26508 fd=4 n=1/4096
...
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown