AbuseIPDB » 2001:470:1:fb5::220

2001:470:1:fb5::220
Recent Activity This IP has received recent abuse reports, which causes the score to increase. IPv6 SLAAC Note Public IPv6 addresses may implement the SLAAC privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new interface identifier.
1,229 reports found in our database
100% ▲ ▲ ▲ Critical
Abuse confidence score ?
ISP
The Shadowserver Foundation, Inc.
Usage Type
Fixed Line ISP
ASN
AS6939
Hostname(s)
scan-74-1f.shadowserver.io
Domain Name
shadowserver.org
Country
🇺🇸 United States of America
City
Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2001:470:1:fb5::220:

This IP address has been reported a total of 1,229 times from 141 distinct sources. 2001:470:1:fb5::220 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 54 reports; United States of America with 39 reports; Hungary with 11 reports. The most common categories in these recent reports were: Port Scan 59 times; Brute-Force 53 times; SSH 30 times; Bad Web Bot 26 times; Hacking 25 times; Other 70 times.

Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 tr1n
Bad Web Bot
🇺🇸 abenage
2026-09-05T22:48:48.925788[redacted] sshd[2036939]: Invalid user from 2001:470:1:fb5::220 port 7408
Brute-Force SSH
🇩🇪 Lino Project
2001:470:1:fb5::220 - - [06/Sep/2026:02:51:50 +0200] "\x16\x03\x01" 400 392 "-" "-" ...
Blog Spam
🇩🇪 ecs.ge
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
Web App Attack Hacking
🇺🇸 cazae
Port Scan
🇷🇴 SpamStopper
Dovecot SSL Probe - IMAP Gate Knocking
Brute-Force Bad Web Bot
🇺🇸 drewf.ink
[09:31] Port scanning. Port(s) scanned: TCP/179
Port Scan
🇩🇪 VentryShield
p0t honeypot: unknown connection on port 8090/tcp, 186 bytes received from client
Port Scan
🇷🇴 SpamStopper
Dovecot SSL Probe - IMAP Gate Knocking
Brute-Force Bad Web Bot
🇺🇸 chronos
Brute-Force Email Spam Spoofing Phishing Hacking
🇭🇺 kranem
Bad Web Bot
🇫🇮 as211431.net
Bad Web Bot
🇮🇹 yvoictra
Brute-Force SSH
🇹🇭 Sawasdee
Port Scan/VNC login attempt ...
Port Scan
🇩🇪 VentryShield
p0t honeypot: smtp connection on port 25/tcp, 145 bytes received from client
Email Spam

Showing 1 to 15 of 1229 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.103
🇫🇮 80.223.200.38
🇺🇸 172.253.9.219
🇸🇪 146.247.242.84
🇨🇳 122.51.167.48
🇨🇳 119.96.173.169
🇫🇷 85.217.140.41
🇳🇱 45.129.234.183
🇹🇷 45.158.57.1
🇳🇱 45.148.10.141
🇺🇸 43.162.95.192
🇧🇷 16.5.0.238
🇨🇳 14.29.177.189
🇺🇸 216.25.89.126
🇨🇳 183.248.129.130
🇹🇼 111.70.39.217
🇧🇬 109.160.32.20
🇱🇹 62.60.130.253
🇹🇭 171.4.232.255
🇭🇰 112.120.118.125