JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::23a

2001:470:1:fb5::23a was found in our database!

This IP was reported 155 times. Confidence of Abuse is 57%: ?

57%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-75-19.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::23a

Whois 2001:470:1:fb5::23a

IP Abuse Reports for 2001:470:1:fb5::23a:

This IP address has been reported a total of 155 times from 28 distinct sources. 2001:470:1:fb5::23a was first reported on February 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 thororen	2026-07-05 00:35:42 (1 day ago)	Blocked by UFW [110/tcp] Source port: 59317 TTL: null Packet length: 64 TOS: null This report was g ... show more Blocked by UFW [110/tcp] Source port: 59317 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 drewf.ink	2026-07-04 00:33:13 (2 days ago)	[00:33] Port scanning. Port(s) scanned: TCP/1080	Port Scan
🇫🇮 6kilowatti	2026-07-02 07:59:21 (4 days ago)	2026-07-02T10:59:20.384132+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-07-02T10:59:20.384132+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:023a DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=57918 DPT=8001 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇹🇭 Sawasdee	2026-07-02 07:27:06 (4 days ago)	Port Scan/VNC login attempt ...	Port Scan
🇺🇸 Axel	2026-07-01 08:40:05 (5 days ago)	Blocked by UFW on LAXHH [27017/tcp] \| SPT: 47166 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: gi ... show more Blocked by UFW on LAXHH [27017/tcp] \| SPT: 47166 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-07-01 05:06:49 (5 days ago)	Blocked by UFW [84/tcp] Source port: 48762 TTL: null Packet length: 64 TOS: null This report was ge ... show more Blocked by UFW [84/tcp] Source port: 48762 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-30 03:37:26 (6 days ago)	Blocked by UFW on LAXHH [110/tcp] \| SPT: 43721 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: gith ... show more Blocked by UFW on LAXHH [110/tcp] \| SPT: 43721 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-06-29 05:58:35 (1 week ago)	2026-06-29T08:58:34.770210+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-06-29T08:58:34.770210+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:023a DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=34831 DPT=90 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇰🇷 SentinalX by uzumaru	2026-06-28 06:15:19 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.shadowserver.org:443 show less	Open Proxy Port Scan
🇺🇸 thororen	2026-06-28 03:33:34 (1 week ago)	Blocked by UFW [6080/tcp] Source port: 35704 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [6080/tcp] Source port: 35704 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-06-27 06:37:05 (1 week ago)	Blocked by UFW [8081/tcp] Source port: 47577 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [8081/tcp] Source port: 47577 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 as211431.net	2026-06-26 04:43:57 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 thororen	2026-06-23 03:14:44 (1 week ago)	Blocked by UFW [2323/tcp] Source port: 59184 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [2323/tcp] Source port: 59184 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-06-18 08:43:39 (2 weeks ago)	Unauthorized attempt on debian [631/tcp] Source port: 52297 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on debian [631/tcp] Source port: 52297 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-06-18 06:10:51 (2 weeks ago)	Persistent port scanning or vulnerability scanning	Port Scan

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 185.200.116.79

🇮🇳 183.82.30.71

🇮🇩 180.247.179.206

🇨🇦 51.161.37.197

🇳🇱 45.198.224.115

🇨🇳 218.78.131.90

🇬🇧 201.78.128.96

🇬🇧 198.244.240.53

🇺🇸 195.184.76.84

🇺🇸 68.183.169.237

🇬🇧 51.195.215.182

🇸🇬 47.84.136.210

🇳🇱 45.142.193.53

🇺🇸 44.106.26.141

🇺🇸 31.59.40.94

🇺🇸 2607:f8b0:4023:1000::125

🇨🇳 183.253.115.76

🇫🇷 92.222.104.199

🇲🇩 91.208.197.64

🇨🇦 51.161.65.76