JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::206

2001:470:1:fb5::206 was found in our database!

This IP was reported 172 times. Confidence of Abuse is 34%: ?

34%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::206

Whois 2001:470:1:fb5::206

IP Abuse Reports for 2001:470:1:fb5::206:

This IP address has been reported a total of 172 times from 32 distinct sources. 2001:470:1:fb5::206 was first reported on February 20th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cazae	2026-10-16 02:44:11 (13 hours ago)	Unauthorized attempt on debian [32508/tcp] Source port: 39421 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [32508/tcp] Source port: 39421 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-10-10 05:41:17 (6 days ago)	Blocked by UFW [5905/tcp] Source port: 60302 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [5905/tcp] Source port: 60302 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-10-04 02:13:50 (1 week ago)	Unauthorized attempt on debian [8015/tcp] Source port: 52544 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8015/tcp] Source port: 52544 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-10-01 02:47:21 (2 weeks ago)	Blocked by UFW [801/tcp] Source port: 53039 TTL: null Packet length: 64 TOS: null This report was g ... show more Blocked by UFW [801/tcp] Source port: 53039 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-09-22 09:12:12 (3 weeks ago)	Unauthorized attempt on debian [1801/tcp] Source port: 60495 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [1801/tcp] Source port: 60495 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 as211431.net	2026-09-15 07:19:26 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.160 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 6kilowatti	2026-09-11 01:16:23 (1 month ago)	2026-09-11T04:16:22.311911+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-11T04:16:22.311911+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:0206 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=236 FLOWLBL=0 PROTO=TCP SPT=41633 DPT=3333 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 thororen	2026-09-07 05:08:18 (1 month ago)	Blocked by UFW [10443/tcp] Source port: 46971 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [10443/tcp] Source port: 46971 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 tr1n	2026-09-06 07:13:11 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 6939 (Hurricane ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 6939 (Hurricane Electric LLC) \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| Timestamp: 2026-09-06T07:13:11Z \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇹🇭 Sawasdee	2026-09-03 06:36:07 (1 month ago)	Port Scan/VNC login attempt ...	Port Scan
🇫🇷 Entalpi.net	2026-09-01 08:34:24 (1 month ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇺🇸 xmission.com	2026-08-30 00:23:24 (1 month ago)	Blocked by UFW (TCP on 8090) Source port: 34586 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 8090) Source port: 34586 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:0206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-29 07:24:37 (1 month ago)	Blocked by UFW (TCP on 8001) Source port: 53208 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 8001) Source port: 53208 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:0206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-27 02:53:22 (1 month ago)	Blocked by UFW [143/tcp] \| SPT: 56677 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/se ... show more Blocked by UFW [143/tcp] \| SPT: 56677 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 tr1n	2026-08-25 00:49:41 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 6939 (Hurricane ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 6939 (Hurricane Electric LLC) \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| Timestamp: 2026-08-25T00:49:41Z \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0 show less	Bad Web Bot

Showing 1 to 15 of 172 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 222.126.105.187

🇩🇪 185.220.101.161

🇺🇸 136.0.39.68

🇳🇱 109.160.32.165

🇷🇺 46.191.141.152

🇸🇬 43.159.39.203

🇨🇴 190.60.242.28

🇺🇸 173.255.223.62

🇸🇪 157.22.73.49

🇬🇧 86.38.187.239

🇳🇴 79.127.150.143

🇮🇳 14.96.106.175

🇺🇸 5.253.38.54

🇺🇸 205.210.31.14

🇩🇪 185.220.101.1

🇺🇸 129.121.142.19

🇵🇱 109.125.223.2

🇮🇩 103.113.170.231

🇮🇩 43.230.5.42

🇺🇸 35.229.62.175