JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::87

2001:470:1:fb5::87 was found in our database!

This IP was reported 375 times. Confidence of Abuse is 20%: ?

20%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-54-06.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::87

Whois 2001:470:1:fb5::87

IP Abuse Reports for 2001:470:1:fb5::87:

This IP address has been reported a total of 375 times from 33 distinct sources. 2001:470:1:fb5::87 was first reported on July 2nd 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-06-22 08:39:51 (3 days ago)	2026-06-22T11:39:50.251656+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-06-22T11:39:50.251656+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:0087 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=42158 DPT=830 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-05-27 08:30:23 (4 weeks ago)	Blocked by UFW (TCP on 3306) Source port: 52124 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 3306) Source port: 52124 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:0087) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SQL Injection
🇯🇵 S.O.B.A. Dev.	2026-05-26 01:35:16 (4 weeks ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 cazae	2026-05-04 00:03:52 (1 month ago)	Unauthorized attempt on debian [3306/tcp] Source port: 45141 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [3306/tcp] Source port: 45141 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-04-15 06:44:11 (2 months ago)	UFW Blocked [83/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:0087:60561 Lenth: 60	Port Scan
🇦🇹 centurion	2026-04-06 03:01:51 (2 months ago)	Unauthorized attempt on git [5905/tcp] Source port: 54639 TTL: null Packet length: 60 TOS: null http ... show more Unauthorized attempt on git [5905/tcp] Source port: 54639 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-05 08:17:13 (2 months ago)	Blocked by UFW (TCP on 5903) Source port: 59438 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 5903) Source port: 59438 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:0087) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-03-12 08:43:07 (3 months ago)	UFW Blocked [6379/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:0087:59616 Lenth: 60	Port Scan
🇺🇸 cazae	2026-01-28 08:23:28 (4 months ago)	Unauthorized attempt on debian [5800/tcp] Source port: 47198 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5800/tcp] Source port: 47198 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ps-center	2026-01-13 12:11:37 (5 months ago)	ABV-W: TCP-Scanner. Port: 1080	Port Scan
🇩🇪 403veli	2026-01-05 16:02:11 (5 months ago)	Confirmed malicious activity observed via T-Pot honeypot Observed 1 events on port 5803 (flow) from ... show more Confirmed malicious activity observed via T-Pot honeypot Observed 1 events on port 5803 (flow) from 2026-01-05T16:02:11.865000+00:00 to 2026-01-05T16:02:11.865000+00:00. Sample: {"src_ip": "2001:0470:0001:0fb5:0000:0000:0000:0087", "event_type": "flow", "dest_port": 5803, "src_port": 55368} show less	Exploited Host
🇺🇸 shabi	2026-01-04 18:06:29 (5 months ago)	UFW Blocked [135/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:0087:52487 Lenth: 60	Port Scan
🇦🇹 centurion	2025-12-25 01:56:14 (6 months ago)	Unauthorized attempt on cendev [6443/tcp] Source port: 34581 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on cendev [6443/tcp] Source port: 34581 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Ad0lar	2025-12-23 14:18:28 (6 months ago)	ports, 5432/24H:1/7D:1	Port Scan
🇺🇸 shabi	2025-12-21 01:26:48 (6 months ago)	UFW Blocked [3128/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:0087:45515 Lenth: 60	Port Scan

Showing 1 to 15 of 375 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 212.64.19.167

🇺🇾 179.26.52.241

🇨🇦 159.203.34.81

🇸🇦 145.82.168.120

🇺🇸 136.107.116.182

🇧🇷 129.121.50.86

🇨🇳 123.145.18.254

🇨🇳 106.13.107.166

🇫🇷 91.231.89.67

🇩🇪 85.209.53.8

🇺🇸 74.125.72.17

🇺🇸 50.6.173.74

🇳🇱 45.148.10.151

🇺🇸 35.254.118.88

🇺🇸 34.67.2.7

🇷🇴 2.57.121.25

🇹🇭 223.205.79.186

🇺🇸 193.202.14.182

🇦🇹 130.195.249.66

🇧🇬 109.120.211.94