JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::257

2001:470:1:fb5::257 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 44%: ?

44%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-76-16.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::257

Whois 2001:470:1:fb5::257

IP Abuse Reports for 2001:470:1:fb5::257:

This IP address has been reported a total of 128 times from 27 distinct sources. 2001:470:1:fb5::257 was first reported on March 25th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cazae	2026-07-08 00:06:44 (15 hours ago)	Unauthorized attempt on debian [7547/tcp] Source port: 47110 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [7547/tcp] Source port: 47110 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇩🇪 bontekoe.technology	2026-07-05 09:02:11 (3 days ago)	Port scan or Brute-Force detected. (src_port=51949, dst_port=5902)	Brute-Force
🇺🇸 Axel	2026-06-30 07:23:55 (1 week ago)	Blocked by UFW on LAXHH [3128/tcp] \| SPT: 51136 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: git ... show more Blocked by UFW on LAXHH [3128/tcp] \| SPT: 51136 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-06-27 04:05:24 (1 week ago)	Unauthorized attempt on debian [8000/tcp] Source port: 37752 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8000/tcp] Source port: 37752 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-06-23 08:49:01 (2 weeks ago)	Unauthorized attempt on debian [49667/tcp] Source port: 43825 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [49667/tcp] Source port: 43825 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-06-22 00:37:16 (2 weeks ago)	2026-06-22T03:37:15.758618+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-06-22T03:37:15.758618+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:0257 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=236 FLOWLBL=0 PROTO=TCP SPT=57305 DPT=33060 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 en0	2026-06-18 08:28:45 (2 weeks ago)	2001:0470:0001:0fb5:0000:0000:0000:0257 was recorded attempting unexpectedly to open a GRE tunnel.	Port Scan
🇺🇸 cazae	2026-06-11 08:13:14 (3 weeks ago)	Unauthorized attempt on debian [21/tcp] Source port: 46027 TTL: null Packet length: 60 TOS: null ht ... show more Unauthorized attempt on debian [21/tcp] Source port: 46027 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan FTP Brute-Force
🇺🇸 shabi	2026-06-11 06:27:33 (3 weeks ago)	UFW Blocked [10443/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:0257:36368 Lenth: 60	Port Scan
🇫🇷 centurion	2026-06-08 04:04:29 (1 month ago)	Unauthorized attempt on uptime [5900/tcp] Source port: 47208 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on uptime [5900/tcp] Source port: 47208 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-06-04 06:16:13 (1 month ago)	Blocked by UFW [5803/tcp] Source port: 42726 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [5803/tcp] Source port: 42726 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-06-01 08:41:53 (1 month ago)	Unauthorized attempt on debian [33060/tcp] Source port: 56774 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [33060/tcp] Source port: 56774 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-01 03:36:03 (1 month ago)	Blocked by UFW (TCP on 90) Source port: 57329 Packet length: 60 This report (for 2001:0470:0001:0fb ... show more Blocked by UFW (TCP on 90) Source port: 57329 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:0257) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-31 04:23:55 (1 month ago)	Blocked by UFW (TCP on 993) Source port: 34091 Packet length: 60 This report (for 2001:0470:0001:0f ... show more Blocked by UFW (TCP on 993) Source port: 34091 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:0257) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-05-28 08:00:28 (1 month ago)	Unauthorized attempt on debian [49664/tcp] Source port: 57935 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [49664/tcp] Source port: 57935 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 64.89.162.186

🇺🇸 2607:f8b0:4001:c32::121

🇩🇪 213.209.159.238

🇸🇬 194.5.82.125

🇩🇴 190.80.139.156

🇻🇳 171.244.39.95

🇳🇱 158.94.210.203

🇺🇸 68.183.104.78

🇺🇸 66.132.186.162

🇺🇸 38.154.139.25

🇺🇸 2.24.206.191

🇺🇸 159.183.85.87

🇩🇪 93.193.88.19

🇫🇷 91.231.89.73

🇺🇸 66.132.195.61

🇺🇸 66.132.186.197

🇺🇸 66.132.186.185

🇺🇸 66.132.172.42

🇦🇪 47.91.120.169

🇳🇱 40.113.96.224