JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:470:1:fb5::fb

2001:470:1:fb5::fb was found in our database!

This IP was reported 399 times. Confidence of Abuse is 21%: ?

21%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	scan-57-1a.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:470:1:fb5::fb

Whois 2001:470:1:fb5::fb

IP Abuse Reports for 2001:470:1:fb5::fb:

This IP address has been reported a total of 399 times from 42 distinct sources. 2001:470:1:fb5::fb was first reported on July 8th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-28 06:58:12 (2 weeks ago)	Blocked by UFW (TCP on 1080) Source port: 47572 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 1080) Source port: 47572 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00fb) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-08-17 08:15:14 (1 month ago)	2026-08-17T11:15:13.761278+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-08-17T11:15:13.761278+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:00fb DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=233 FLOWLBL=0 PROTO=TCP SPT=42408 DPT=1801 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-08-17 02:54:40 (1 month ago)	Blocked by UFW [1723/tcp] \| SPT: 40427 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [1723/tcp] \| SPT: 40427 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-08-12 07:27:44 (1 month ago)	Unauthorized attempt on debian [6080/tcp] Source port: 43818 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [6080/tcp] Source port: 43818 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-12 00:59:30 (1 month ago)	Blocked by UFW [8000/tcp] \| SPT: 33131 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [8000/tcp] \| SPT: 33131 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇰🇷 SentinalX by uzumaru	2026-08-09 00:05:20 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.shadowserver.org:443 show less	Open Proxy Port Scan
🇺🇸 Axel	2026-07-01 05:15:51 (2 months ago)	Blocked by UFW on LAXHH [49152/tcp] \| SPT: 48665 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: gi ... show more Blocked by UFW on LAXHH [49152/tcp] \| SPT: 48665 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-07-01 04:01:24 (2 months ago)	2026-07-01T07:01:24.309220+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-07-01T07:01:24.309220+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:00fb DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=52169 DPT=30005 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cazae	2026-06-14 08:20:15 (3 months ago)	Unauthorized attempt on debian [1723/tcp] Source port: 58328 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [1723/tcp] Source port: 58328 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-06-14 02:08:25 (3 months ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 xmission.com	2026-06-04 02:01:54 (3 months ago)	Blocked by UFW (TCP on 83) Source port: 46479 Packet length: 60 This report (for 2001:0470:0001:0fb ... show more Blocked by UFW (TCP on 83) Source port: 46479 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00fb) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-06-03 01:18:58 (3 months ago)	Unauthorized attempt on debian [6080/tcp] Source port: 49477 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [6080/tcp] Source port: 49477 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-05-24 04:59:08 (3 months ago)	Unauthorized attempt on debian [8001/tcp] Source port: 50232 TTL: null Packet length: 60 TOS: null ... show more Unauthorized attempt on debian [8001/tcp] Source port: 50232 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-05-10 03:44:38 (4 months ago)	2026-05-10T06:44:38.390885+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-05-10T06:44:38.390885+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2001:0470:0001:0fb5:0000:0000:0000:00fb DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=42037 DPT=3333 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-05-02 06:49:11 (4 months ago)	Blocked by UFW (TCP on 8081) Source port: 58370 Packet length: 60 This report (for 2001:0470:0001:0 ... show more Blocked by UFW (TCP on 8081) Source port: 58370 Packet length: 60 This report (for 2001:0470:0001:0fb5:0000:0000:0000:00fb) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 399 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 188.124.228.197

🇮🇪 109.255.9.230

🇰🇷 106.245.151.118

🇮🇳 103.86.180.10

🇫🇷 91.231.89.7

🇺🇸 66.249.84.33

🇺🇸 57.141.20.0

🇺🇸 35.227.104.207

🇺🇸 35.226.21.5

🇺🇸 35.225.94.179

🇸🇬 2a12:f540:93c6:b1cd:546f:613b:8467:bf15

🇰🇷 220.95.40.69

🇻🇪 200.75.122.45

🇺🇸 193.29.62.63

🇺🇿 188.113.198.47

🇷🇺 185.46.197.79

🇭🇰 165.154.6.75

🇰🇷 112.185.230.208

🇺🇸 54.91.122.193

🇫🇮 35.228.85.141