JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::e9

2001:470:1:fb5::e9 was found in our database!

This IP was reported 386 times. Confidence of Abuse is 20%: ?

20%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6939
Hostname(s)	scan-57-08.shadowserver.org
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::e9

Whois 2001:470:1:fb5::e9

IP Abuse Reports for 2001:470:1:fb5::e9:

This IP address has been reported a total of 386 times from 41 distinct sources. 2001:470:1:fb5::e9 was first reported on July 11th 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-09 01:54:26 (5 days ago)	Blocked by UFW (TCP on 8090) Source port: 57402 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 8090) Source port: 57402 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00e9) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-04 05:01:07 (1 week ago)	Blocked by UFW (TCP on 800) Source port: 59678 Packet length: 60 This report (for 2001:0470:0001:0f ... show more Blocked by UFW (TCP on 800) Source port: 59678 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00e9) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-05-15 10:03:14 (4 weeks ago)	2026-05-15T13:03:13.954750+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-05-15T13:03:13.954750+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:00e9 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=42196 DPT=2323 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 thororen	2026-05-14 10:47:32 (1 month ago)	Blocked by UFW [1723/tcp] Source port: 55102 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [1723/tcp] Source port: 55102 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-05-06 04:22:48 (1 month ago)	Blocked by UFW [5903/tcp] Source port: 40869 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [5903/tcp] Source port: 40869 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-04-26 01:05:23 (1 month ago)	Unauthorized attempt on debian [10443/tcp] Source port: 40555 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [10443/tcp] Source port: 40555 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-04-04 03:25:21 (2 months ago)	Blocked by UFW [5001/tcp] Source port: 39552 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [5001/tcp] Source port: 39552 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-04-04 03:25:21 (2 months ago)	UFW Blocked [5001/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00e9:52365 Lenth: 60	Port Scan
🇺🇸 shabi	2026-03-24 01:07:16 (2 months ago)	UFW Blocked [10001/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00e9:60433 Lenth: 60	Port Scan
🇺🇸 abenage	2026-03-13 04:00:25 (3 months ago)	2026/03/12 22:00:24 [crit] 708455#708455: 6074 SSL_do_handshake() failed (SSL: error:0A00006C:SSL r ... show more 2026/03/12 22:00:24 [crit] 708455#708455: 6074 SSL_do_handshake() failed (SSL: error:0A00006C:SSL routines::bad key share) while SSL handshaking, client: 2001:470:1:fb5::e9, server: [::]:443 show less	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-13 02:08:10 (3 months ago)	Blocked by UFW (47 on ) Source port: Packet length: 100 This report (for 2001:0470:0001:0fb5:0000: ... show more Blocked by UFW (47 on ) Source port: Packet length: 100 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00e9) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-01-06 18:07:51 (5 months ago)	2001:0470:0001:0fb5:0000:0000:0000:00e9 was recorded attempting unexpectedly to open a GRE tunnel.	Port Scan
🇺🇸 shabi	2025-12-17 14:35:30 (5 months ago)	UFW Blocked [443/TCP] Source: 2001:0470:0001:0fb5:0000:0000:0000:00e9:59415 Lenth: 60	Port Scan Web App Attack
🇺🇸 en0	2025-12-01 14:48:23 (6 months ago)	2001:0470:0001:0fb5:0000:0000:0000:00e9 was recorded attempting unexpectedly to open a GRE tunnel.	Port Scan
🇩🇪 kalof	2025-11-30 00:51:41 (6 months ago)	ports, 5432/24H:1/7D:1	Port Scan

Showing 1 to 15 of 386 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.215

🇭🇷 193.198.6.29

🇺🇸 174.138.41.67

🇸🇬 103.250.10.18

🇳🇱 20.229.115.183

🇨🇳 222.246.42.2

🇺🇸 205.210.31.18

🇧🇪 198.235.24.230

🇸🇬 174.138.22.163

🇨🇳 112.245.217.91

🇮🇩 103.164.57.37

🇺🇦 92.253.214.224

🇫🇷 85.217.140.29

🇫🇮 77.42.47.60

🇺🇸 43.153.59.240

🇨🇭 209.99.190.113

🇨🇳 175.153.160.207

🇳🇱 174.138.11.120

🇺🇸 174.129.71.167

🇺🇸 172.245.252.130