JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::da

2001:470:1:fb5::da was found in our database!

This IP was reported 374 times. Confidence of Abuse is 13%: ?

13%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-56-19.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::da

Whois 2001:470:1:fb5::da

IP Abuse Reports for 2001:470:1:fb5::da:

This IP address has been reported a total of 374 times from 41 distinct sources. 2001:470:1:fb5::da was first reported on July 10th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cazae	2026-02-04 06:43:22 (5 months ago)	Unauthorized attempt on debian [2121/tcp] Source port: 37306 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [2121/tcp] Source port: 37306 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-02-02 04:18:35 (5 months ago)	Blocked by UFW [1883/tcp] Source port: 54999 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [1883/tcp] Source port: 54999 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-01-21 07:50:36 (5 months ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 thororen	2026-01-20 04:10:33 (5 months ago)	Blocked by UFW [9200/tcp] Source port: 40043 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [9200/tcp] Source port: 40043 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 403veli	2026-01-06 14:19:18 (6 months ago)	Confirmed malicious activity observed via T-Pot honeypot Observed 1 events on port 2087 (flow) from ... show more Confirmed malicious activity observed via T-Pot honeypot Observed 1 events on port 2087 (flow) from 2026-01-06T14:19:18.086000+00:00 to 2026-01-06T14:19:18.086000+00:00. Sample: {"src_port": 60012, "src_ip": "2001:0470:0001:0fb5:0000:0000:0000:00da", "dest_port": 2087, "event_type": "flow"} show less	Exploited Host
🇺🇸 shabi	2025-12-26 13:54:21 (6 months ago)	UFW Blocked [5900/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00da:57410 Lenth: 60	Port Scan
🇺🇸 thororen	2025-12-05 00:24:58 (7 months ago)	Blocked by UFW [86/tcp] Source port: 37734 TTL: null Packet length: 60 TOS: null This report was ge ... show more Blocked by UFW [86/tcp] Source port: 37734 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Maike	2025-11-24 14:40:49 (7 months ago)	ports, 23/24H:1/7D:1	Port Scan
🇺🇸 thororen	2025-11-16 07:12:17 (7 months ago)	Blocked by UFW [89/tcp] Source port: 57531 TTL: null Packet length: 60 TOS: null This report was ge ... show more Blocked by UFW [89/tcp] Source port: 57531 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2025-10-27 15:20:30 (8 months ago)	UFW Blocked [2323/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00da:40309 Lenth: 60	Port Scan
🇺🇸 shabi	2025-10-23 15:33:54 (8 months ago)	UFW Blocked [49667/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00da:42529 Lenth: 60	Port Scan
🇺🇸 xmission.com	2025-10-21 14:38:22 (8 months ago)	Blocked by UFW (TCP on 8001) Source port: 57137 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 8001) Source port: 57137 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00da) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 sayz	2025-10-18 15:16:29 (8 months ago)	Unauthorized connection attempt detected from 2001:470:1:fb5::da to UDP port 500	Port Scan
🇺🇸 shabi	2025-10-17 01:08:21 (8 months ago)	UFW Blocked [8081/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00da:59595 Lenth: 60	Port Scan
🇺🇸 thororen	2025-09-29 12:26:07 (9 months ago)	Blocked by UFW [2096/tcp] Source port: 38819 TTL: null Packet length: 60 TOS: null This report was ... show more Blocked by UFW [2096/tcp] Source port: 38819 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 16 to 30 of 374 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.86.176.134

🇨🇳 218.29.231.106

🇺🇸 209.141.47.217

🇺🇸 136.107.235.104

🇮🇩 114.10.47.235

🇺🇸 66.240.236.119

🇺🇸 65.49.1.110

🇩🇪 46.249.99.46

🇳🇱 45.148.10.31

🇳🇱 45.148.10.30

🇳🇱 45.148.10.26

🇺🇸 45.132.115.156

🇺🇸 34.123.134.194

🇧🇪 34.78.162.75

🇮🇳 27.6.191.103

🇧🇷 179.181.133.153

🇧🇷 179.173.69.136

🇧🇷 177.43.105.11

🇺🇸 154.83.197.69

🇭🇰 152.32.172.177