JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::1d3

2001:470:1:fb5::1d3 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 47%: ?

47%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	scan-72-12.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::1d3

Whois 2001:470:1:fb5::1d3

IP Abuse Reports for 2001:470:1:fb5::1d3:

This IP address has been reported a total of 154 times from 36 distinct sources. 2001:470:1:fb5::1d3 was first reported on February 24th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 centurion	2026-08-23 04:56:16 (1 day ago)	Unauthorized attempt on cendev [7547/tcp] Source port: 38781 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on cendev [7547/tcp] Source port: 38781 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇺 kranem	2026-08-21 06:00:24 (3 days ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (Hurricane Electric LLC) Protocol: H ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (Hurricane Electric LLC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-21T04:42:52Z User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇦🇹 centurion	2026-08-21 05:04:38 (3 days ago)	Unauthorized attempt on coresecret [9000/tcp] Source port: 38880 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [9000/tcp] Source port: 38880 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-21 03:32:49 (3 days ago)	Blocked by UFW [8090/tcp] \| SPT: 33830 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [8090/tcp] \| SPT: 33830 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-20 04:34:34 (4 days ago)	Blocked by UFW [9200/tcp] \| SPT: 36335 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [9200/tcp] \| SPT: 36335 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-08-16 05:11:43 (1 week ago)	Blocked by UFW [3128/tcp] Source port: 48223 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [3128/tcp] Source port: 48223 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-12 05:59:49 (1 week ago)	Blocked by UFW (TCP on 88) Source port: 35895 Packet length: 60 This report (for 2001:0470:0001:0fb ... show more Blocked by UFW (TCP on 88) Source port: 35895 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:01d3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-08-11 02:11:07 (1 week ago)	Unauthorized attempt on debian [17689/tcp] Source port: 47827 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [17689/tcp] Source port: 47827 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-07 03:51:25 (2 weeks ago)	Blocked by UFW [49668/tcp] \| SPT: 35246 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/ ... show more Blocked by UFW [49668/tcp] \| SPT: 35246 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 bontekoe.technology	2026-07-28 04:57:32 (3 weeks ago)	Port scan or Brute-Force detected. (src_port=34911, dst_port=53)	Brute-Force
🇺🇸 thororen	2026-07-27 08:37:26 (4 weeks ago)	Blocked by UFW [1801/tcp] Source port: 51522 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [1801/tcp] Source port: 51522 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-07-24 08:21:40 (1 month ago)	Blocked by UFW [1883/tcp] Source port: 44115 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [1883/tcp] Source port: 44115 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-07-24 02:47:29 (1 month ago)	2026-07-24T05:47:29.344672+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-07-24T05:47:29.344672+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:01d3 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=236 FLOWLBL=0 PROTO=TCP SPT=38594 DPT=8888 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 tr1n	2026-07-22 02:15:52 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 6939 (Hurricane ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 6939 (Hurricane Electric LLC) \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| Timestamp: 2026-07-22T02:15:52Z \| UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36 SE 2.X MetaSr 1.0 show less	Bad Web Bot
🇦🇹 centurion	2026-07-19 01:06:34 (1 month ago)	Unauthorized attempt on coresecret [5001/tcp] Source port: 52024 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [5001/tcp] Source port: 52024 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.139.93.67

🇺🇸 170.187.147.182

🇺🇸 146.168.63.66

🇺🇸 146.88.240.182

🇨🇳 118.81.202.166

🇫🇷 91.231.89.40

🇫🇷 91.196.152.120

🇺🇸 64.57.129.41

🇲🇾 47.250.127.59

🇳🇱 195.178.110.227

🇧🇴 181.115.192.10

🇨🇳 119.181.21.237

🇫🇷 85.217.140.6

🇨🇳 59.34.17.130

🇺🇸 45.194.67.69

🇫🇷 2400:cb00:532:1000:e260:7c8e:d31d:70c5

🇬🇧 193.163.125.30

🇭🇰 118.193.44.112

🇺🇦 46.174.127.87

🇺🇸 45.43.57.63