JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::aa

2001:470:1:fb5::aa was found in our database!

This IP was reported 346 times. Confidence of Abuse is 25%: ?

25%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-55-09.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::aa

Whois 2001:470:1:fb5::aa

IP Abuse Reports for 2001:470:1:fb5::aa:

This IP address has been reported a total of 346 times from 36 distinct sources. 2001:470:1:fb5::aa was first reported on July 4th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 centurion	2026-06-25 02:58:40 (1 day ago)	Unauthorized attempt on coresecret [995/tcp] Source port: 39263 TTL: null Packet length: 60 TOS: nul ... show more Unauthorized attempt on coresecret [995/tcp] Source port: 39263 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-18 01:15:29 (1 week ago)	Blocked by UFW (TCP on 6080) Source port: 42140 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 6080) Source port: 42140 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00aa) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-03 08:25:36 (3 weeks ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇺🇸 cazae	2026-05-30 00:15:45 (3 weeks ago)	Unauthorized attempt on debian [9000/tcp] Source port: 44344 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [9000/tcp] Source port: 44344 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-27 01:49:58 (4 weeks ago)	Blocked by UFW (TCP on 8090) Source port: 54194 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 8090) Source port: 54194 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00aa) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-03-25 07:24:33 (3 months ago)	UFW Blocked [5903/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00aa:41806 Lenth: 60	Port Scan
🇦🇹 centurion	2026-02-08 00:32:06 (4 months ago)	Unauthorized attempt on git [9999/tcp] Source port: 46292 TTL: null Packet length: 60 TOS: null http ... show more Unauthorized attempt on git [9999/tcp] Source port: 46292 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-02-05 06:58:59 (4 months ago)	Blocked by UFW [5803/tcp] Source port: 41193 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [5803/tcp] Source port: 41193 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ps-center	2026-01-12 17:14:02 (5 months ago)	SS1-W: TCP-Scanner. Port: 5900	Port Scan
🇺🇸 shabi	2025-12-21 16:04:33 (6 months ago)	UFW Blocked [1801/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00aa:42143 Lenth: 60	Port Scan
🇺🇸 xmission.com	2025-12-13 15:49:24 (6 months ago)	Blocked by UFW (TCP on 3306) Source port: 54957 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 3306) Source port: 54957 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00aa) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SQL Injection
🇺🇸 thororen	2025-12-12 12:53:25 (6 months ago)	Blocked by UFW [30005/tcp] Source port: 35597 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [30005/tcp] Source port: 35597 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2025-12-10 00:10:49 (6 months ago)	Unauthorized attempt on coresecret [2031/tcp] Source port: 34654 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [2031/tcp] Source port: 34654 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Josef Matula	2025-12-01 13:17:51 (6 months ago)	ports, 3306/24H:1/7D:1	Port Scan
🇺🇸 thororen	2025-11-12 15:34:09 (7 months ago)	Blocked by UFW [212/tcp] Source port: 58221 TTL: null Packet length: 60 TOS: null This report was g ... show more Blocked by UFW [212/tcp] Source port: 58221 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 346 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.224.159.218

🇧🇷 190.115.84.25

🇮🇳 103.187.78.189

🇺🇸 100.51.6.16

🇹🇯 85.9.146.34

🇮🇳 20.219.34.176

🇩🇪 213.209.159.231

🇮🇳 183.82.111.224

🇺🇦 176.103.1.78

🇩🇪 161.35.65.86

🇺🇸 152.32.182.8

🇺🇸 135.222.40.117

🇺🇸 104.243.35.120

🇻🇳 14.225.173.146

🇸🇬 13.251.135.64

🇺🇸 2001:470:1:c84::2a1

🇧🇷 201.71.192.108

🇪🇸 194.220.241.95

🇳🇱 176.65.139.66

🇺🇸 162.216.149.184