JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::d2

2001:470:1:fb5::d2 was found in our database!

This IP was reported 362 times. Confidence of Abuse is 18%: ?

18%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-56-11.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::d2

Whois 2001:470:1:fb5::d2

IP Abuse Reports for 2001:470:1:fb5::d2:

This IP address has been reported a total of 362 times from 37 distinct sources. 2001:470:1:fb5::d2 was first reported on July 18th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Entalpi.net	2026-06-25 08:38:33 (3 days ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇺🇸 thororen	2026-06-21 07:49:21 (1 week ago)	Blocked by UFW [49667/tcp] Source port: 42518 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [49667/tcp] Source port: 42518 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-05-22 05:33:39 (1 month ago)	Blocked by UFW [449/tcp] Source port: 37430 TTL: null Packet length: 64 TOS: null This report was g ... show more Blocked by UFW [449/tcp] Source port: 37430 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-05-20 07:09:31 (1 month ago)	UFW Blocked [2087/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00d2:39792 Lenth: 60	Port Scan
🇺🇸 cazae	2026-05-12 02:03:56 (1 month ago)	Unauthorized attempt on debian [80/tcp] Source port: 33740 TTL: null Packet length: 60 TOS: null ht ... show more Unauthorized attempt on debian [80/tcp] Source port: 33740 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-05-05 07:50:10 (1 month ago)	UFW Blocked [1080/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00d2:45207 Lenth: 60	Port Scan
🇺🇸 thororen	2026-05-05 00:31:24 (1 month ago)	Blocked by UFW [3128/tcp] Source port: 51220 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [3128/tcp] Source port: 51220 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-18 09:14:53 (2 months ago)	Blocked by UFW (TCP on 830) Source port: 48552 Packet length: 60 This report (for 2001:0470:0001:0f ... show more Blocked by UFW (TCP on 830) Source port: 48552 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00d2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-08 08:23:32 (2 months ago)	Blocked by UFW (TCP on 2222) Source port: 53770 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 2222) Source port: 53770 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00d2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-03-23 03:02:48 (3 months ago)	Unauthorized attempt on debian [2083/tcp] Source port: 53298 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [2083/tcp] Source port: 53298 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-03-23 02:44:32 (3 months ago)	Unauthorized attempt on coresecret [5902/tcp] Source port: 56070 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [5902/tcp] Source port: 56070 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-03-03 05:59:16 (3 months ago)	Blocked by UFW [8010/tcp] Source port: 47002 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [8010/tcp] Source port: 47002 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-03-01 08:02:15 (3 months ago)	Unauthorized attempt on debian [143/tcp] Source port: 41047 TTL: null Packet length: 60 TOS: null h ... show more Unauthorized attempt on debian [143/tcp] Source port: 41047 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-02-19 05:06:40 (4 months ago)	UFW Blocked [8090/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00d2:36102 Lenth: 60	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-02-16 01:36:25 (4 months ago)	Persistent port scanning or vulnerability scanning	Port Scan

Showing 1 to 15 of 362 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.184

🇺🇸 192.249.120.176

🇩🇪 92.246.91.146

🇺🇸 72.253.251.3

🇺🇸 3.235.147.245

🇪🇸 139.28.190.181

🇳🇱 138.226.239.44

🇩🇪 92.246.91.243

🇫🇷 85.204.70.96

🇱🇹 45.227.254.170

🇳🇱 45.148.10.152

🇭🇰 43.135.69.172

🇺🇸 34.61.56.171

🇩🇪 209.38.249.143

🇹🇼 198.235.24.124

🇷🇴 193.46.255.86

🇻🇳 171.231.185.89

🇻🇳 161.248.147.102

🇭🇰 152.32.128.204

🇺🇸 147.185.132.108