2001:550:9005:8000::12

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. IPv6 SLAAC Note Public IPv6 addresses may implement the SLAAC privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new interface identifier.
Abuse Confidence Score
0% Low Risk
89 reports
38 reporters · latest 9 months ago
ISP
Georgia Institute of Technology
Usage Type
University/College/School
ASN
AS2637
Domain Name
gatech.edu
Country
🇺🇸 United States of America
City
Atlanta, Georgia
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

2001:550:9005:8000::12 has been reported 89 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
89 from 38 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇹 dwmp
Brute-Force SSH
🇺🇸 DoomS
2026-02-01T11:09:41.550850+00:00 xbot sshd[1591643]: refused connect from 2001:550:9005:8000::12 (2001:550:9005:8000::12) 2026-02-01T11:09:46.710576+00:00 xbot sshd[1591655]: refused connect from 2001:550:9005:8000::12 (2001:550:9005:8000::12) ...
Brute-Force SSH
🇺🇸 PKThai
Repeated bad requests to web service - Repeat offender 2001:550:9005:8000::12 banned at least 2 times in the last 7 days
Hacking Bad Web Bot
🇺🇸 masterguru
*Port Scan* detected from 2001:550:9005:8000::12 (Unknown). 11 hits in the last 136 seconds (0-165)
Port Scan
🇺🇸 PKThai
Attempted brute-force SASL access to mail server - Repeat offender 2001:550:9005:8000::12 banned at least 2 times in the last 7 days
Port Scan Hacking Brute-Force
🇩🇪 HoneyPot-FrPri
2001:550:9005:8000::12 - - [31/Jan/2026:14:06:45 +0100] "x16x03x01x00ux01x00x00qx03x036xCCxECxDEx029lxCCxA7x9Fx89KxABPxE6xB1xD3xDBx87Nyx8BxE8xBF>xA6x00*xF4vx8DSx00x00x ...
Bad Web Bot Web App Attack
🇮🇹 dwmp
Brute-Force SSH
🇺🇸 DoomS
Brute-Force SSH
🇩🇪 HoneyPot-FrPri
2001:550:9005:8000::12 - - [31/Jan/2026:09:45:08 +0100] "x16x03x01x00ux01x00x00qx03x03x82x9B&x0ExCA<" 400 157 "-" "-" ...
Bad Web Bot Web App Attack
🇳🇱 Hobby Bob
Jan 27 02:49:46 server dovecot: pop3-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (no auth attempts in 21 secs): user=, rip=2001:550:9005:8000::12, lip=X.X.X.X session=
Port Scan Hacking
🇺🇸 DoomS
Brute-Force SSH
🇩🇪 HoneyPot-FrPri
2001:550:9005:8000::12 - - [26/Jan/2026:17:41:15 +0100] "x16x03x01x00ux01x00x00qx03x03xE6xA1*x97d&xB0xF9Ox8FxDDx04x89Ah/xE4x9DxF9`;xE1x18xC7xA9b6x08pxD1xA6xB0x00x00x1A ...
Bad Web Bot Web App Attack
🇺🇸 kelliwic.net
Port scan detected (F2B)
Port Scan
🇺🇸 drewf.ink
[03:08] Port scanning. Port(s) scanned: TCP/502
Port Scan
🇺🇸 drewf.ink
[01:25] Port scanning. Port(s) scanned: TCP/623
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 189.243.178.2
🇺🇸 170.168.172.154
🇩🇪 104.23.239.89
🇬🇧 13.135.207.192
🇻🇳 210.245.95.13
🇺🇸 188.114.96.11
🇩🇪 104.248.26.67
🇵🇰 103.82.121.78
🇺🇸 95.182.94.63
🇰🇷 59.15.58.148
🇺🇸 54.212.169.44
🇺🇸 35.194.87.234
🇺🇸 20.230.32.213
🇫🇷 207.180.239.185
🇻🇳 203.205.37.233
🇺🇸 147.90.234.13
🇺🇸 146.19.91.49
🇳🇱 138.226.239.34
🇨🇳 106.59.139.173
🇧🇩 103.159.2.113
feedback