JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::1a4

2001:470:1:fb5::1a4 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 43%: ?

43%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	scan-71-03.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::1a4

Whois 2001:470:1:fb5::1a4

IP Abuse Reports for 2001:470:1:fb5::1a4:

This IP address has been reported a total of 192 times from 33 distinct sources. 2001:470:1:fb5::1a4 was first reported on February 23rd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 thororen	2026-09-23 07:00:26 (1 day ago)	Blocked by UFW [2096/tcp] Source port: 59946 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [2096/tcp] Source port: 59946 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-13 07:15:30 (1 week ago)	Blocked by UFW [8081/tcp] \| SPT: 47822 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [8081/tcp] \| SPT: 47822 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-09 08:39:12 (2 weeks ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇺🇸 thororen	2026-09-08 02:56:23 (2 weeks ago)	Blocked by UFW [8880/tcp] Source port: 54011 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [8880/tcp] Source port: 54011 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-09-07 06:06:32 (2 weeks ago)	Blocked by UFW [5985/tcp] Source port: 49782 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [5985/tcp] Source port: 49782 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-09-04 08:58:38 (2 weeks ago)	Blocked by UFW [5902/tcp] Source port: 45391 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [5902/tcp] Source port: 45391 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-09-02 06:59:09 (3 weeks ago)	Unauthorized attempt on debian [8880/tcp] Source port: 33780 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8880/tcp] Source port: 33780 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-28 04:16:43 (3 weeks ago)	Blocked by UFW (TCP on 801) Source port: 38446 Packet length: 60 This report (for 2001:0470:0001:0f ... show more Blocked by UFW (TCP on 801) Source port: 38446 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:01a4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇭 Sawasdee	2026-08-28 02:39:11 (3 weeks ago)	Port Scan/VNC login attempt ...	Port Scan
🇺🇸 cazae	2026-08-27 06:00:26 (4 weeks ago)	Unauthorized attempt on debian [389/tcp] Source port: 38351 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on debian [389/tcp] Source port: 38351 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-08-23 00:19:03 (1 month ago)	2026-08-23T03:18:57.492755+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-08-23T03:18:57.492755+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:01a4 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=57123 DPT=5001 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇹🇭 Sawasdee	2026-08-18 06:18:16 (1 month ago)	Port Scan/VNC login attempt ...	Port Scan
🇫🇮 as211431.net	2026-08-18 05:41:28 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 YaBrowser/24.1.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-08-16 08:26:39 (1 month ago)	Port Scanner	Port Scan
🇹🇭 Sawasdee	2026-08-09 03:21:10 (1 month ago)	Port Scan/VNC login attempt ...	Port Scan

Showing 1 to 15 of 192 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.26

🇷🇺 176.116.138.200

🇩🇪 144.31.106.253

🇭🇰 95.182.95.54

🇷🇴 95.173.199.67

🇺🇸 91.230.168.212

🇩🇪 201.79.0.46

🇧🇩 160.191.115.109

🇵🇰 153.117.15.168

🇭🇰 125.215.199.37

🇨🇳 117.82.165.103

🇳🇱 109.160.32.120

🇷🇴 92.118.39.71

🇫🇮 85.192.48.79

🇰🇷 14.53.202.223

🇨🇴 200.25.254.26

🇳🇱 185.223.235.6

🇨🇳 182.61.33.68

🇨🇱 130.94.104.16

🇿🇦 102.212.64.41