JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::8b

2001:470:1:fb5::8b was found in our database!

This IP was reported 366 times. Confidence of Abuse is 15%: ?

15%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-54-0a.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::8b

Whois 2001:470:1:fb5::8b

IP Abuse Reports for 2001:470:1:fb5::8b:

This IP address has been reported a total of 366 times from 38 distinct sources. 2001:470:1:fb5::8b was first reported on July 4th 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-06-14 08:22:50 (5 days ago)	2026-06-14T11:22:49.759995+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-06-14T11:22:49.759995+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:008b DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=53048 DPT=5803 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 shabi	2026-05-10 08:40:31 (1 month ago)	UFW Blocked [49670/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:008b:55566 Lenth: 60	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-05-06 12:19:58 (1 month ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-05-04 06:04:56 (1 month ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇫🇮 6kilowatti	2026-05-04 00:53:30 (1 month ago)	2026-05-04T03:53:29.392900+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-05-04T03:53:29.392900+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:008b DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=TCP SPT=43805 DPT=7547 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-04-18 04:28:09 (2 months ago)	Blocked by UFW (TCP on 3128) Source port: 49878 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 3128) Source port: 49878 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:008b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-04-17 05:23:11 (2 months ago)	Unauthorized attempt on debian [5800/tcp] Source port: 37060 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [5800/tcp] Source port: 37060 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇺 kranem	2026-04-05 06:00:12 (2 months ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (HURRICANE - Hurricane Electric LLC) ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6939 (HURRICANE - Hurricane Electric LLC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-04-05T05:16:40Z User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 YaBrowser/24.1.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 shabi	2026-03-06 02:20:22 (3 months ago)	UFW Blocked [2096/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:008b:47249 Lenth: 60	Port Scan
🇺🇸 cazae	2026-02-25 04:26:50 (3 months ago)	Unauthorized attempt on debian [8090/tcp] Source port: 53467 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8090/tcp] Source port: 53467 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-02-04 02:16:37 (4 months ago)	UFW Blocked [8090/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:008b:60658 Lenth: 60	Port Scan
🇫🇷 centurion	2026-01-28 01:53:36 (4 months ago)	Unauthorized attempt on uptime [84/tcp] Source port: 50864 TTL: null Packet length: 60 TOS: null htt ... show more Unauthorized attempt on uptime [84/tcp] Source port: 50864 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-01-22 09:00:00 (4 months ago)	Blocked by UFW (TCP on 5803) Source port: 50153 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 5803) Source port: 50153 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:008b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-01-19 04:48:57 (5 months ago)	UFW Blocked [10443/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:008b:40978 Lenth: 60	Port Scan
🇺🇸 shabi	2026-01-18 03:57:53 (5 months ago)	UFW Blocked [447/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:008b:54438 Lenth: 60	Port Scan

Showing 1 to 15 of 366 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 169.224.16.188

🇺🇸 162.216.149.245

🇺🇸 162.214.99.34

🇺🇸 151.241.248.152

🇬🇧 89.37.172.139

🇬🇧 81.19.219.223

🇬🇧 81.19.219.201

🇺🇸 47.148.100.10

🇬🇧 5.226.140.43

🇩🇪 213.209.159.225

🇬🇧 188.28.86.85

🇬🇧 185.20.33.125

🇩🇪 167.94.145.29

🇧🇩 123.136.30.130

🇨🇳 116.172.201.70

🇲🇾 102.211.234.236

🇺🇸 100.29.192.40

🇷🇺 87.117.32.22

🇮🇳 80.225.238.77

🇺🇸 23.94.230.28