JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a06:4880:2000::28

Recent Activity IPv6 SLAAC Note

Abuse Confidence Score

66% Elevated

4,116 reports

64 reporters · latest 20 hours ago

ISP: Driftnet Ltd
Usage Type: Data Center/Web Hosting/Transit
ASN: AS211298
Hostname(s): r1-40-28.census.internet-measurement.com
Domain Name: driftnet.io
Country: 🇬🇧 United Kingdom of Great Britain and Northern Ireland
City: Salford, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

4,116 from 64 distinct reporters

First reported

February 5th 2023

Most recent report

20 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 111 🇺🇸 United States of America 41 🇭🇰 Hong Kong 31

Most common categories Port Scan 203 Brute-Force 15 Hacking 14 Bad Web Bot 3 SSH 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 matthew_eli	2026-11-11 04:45:10 UTC · (20 hours ago)	Keenetic Firewall: Unauthorized connection attempt to ports [20377/tcp,11008/tcp,445/tcp,5234/tcp,3632/tcp,8443/tcp,4022/tcp,2404/tcp,25/tcp,139/tcp,21251/tcp,2396/tcp,13411/tcp,2050/tcp,57621/tcp,5999/tcp,505/tcp,65467/tcp,35040/tcp,5666/tcp,21/tcp, ... show more Keenetic Firewall: Unauthorized connection attempt to ports [20377/tcp,11008/tcp,445/tcp,5234/tcp,3632/tcp,8443/tcp,4022/tcp,2404/tcp,25/tcp,139/tcp,21251/tcp,2396/tcp,13411/tcp,2050/tcp,57621/tcp,5999/tcp,505/tcp,65467/tcp,35040/tcp,5666/tcp,21/tcp,1830/tcp...]. Blocked via Kernel/NFLOG Trap. (7 hits in 24h). [+ 37 new hits since last report] show less	Hacking Port Scan
🇺🇸 thororen	2026-11-11 04:30:35 UTC · (20 hours ago)	Blocked by UFW [1717/tcp] Source port: 37958 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇩🇪 bontekoe.technology	2026-11-10 16:00:26 UTC · (1 day ago)	Port scan or Brute-Force detected. (src_port=39836, dst_port=8443)	Brute-Force
🇫🇷 manah	2026-11-10 00:02:15 UTC · (2 days ago)	Port scan and/or repeated connection to closed ports (daily report)	Port Scan
🇺🇸 thororen	2026-11-09 16:09:08 UTC · (2 days ago)	Blocked by UFW [8021/tcp] Source port: 54206 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇬🇧 wiredalter	2026-11-09 12:09:50 UTC · (2 days ago)	Blocked by UFW on o4VPS [62742/tcp] Source Port: 41664 TTL: Packet Length: 64 TOS: Analyzed by https://ip.wiredalter.com	Port Scan
🇫🇷 manah	2026-11-09 00:02:04 UTC · (3 days ago)	Port scan and/or repeated connection to closed ports (daily report)	Port Scan
🇺🇸 thororen	2026-11-08 18:43:52 UTC · (3 days ago)	Blocked by UFW [5665/tcp] Source port: 58064 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 thororen	2026-11-07 23:31:07 UTC · (4 days ago)	Blocked by UFW [7170/tcp] Source port: 57572 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 thororen	2026-11-06 23:18:58 UTC · (5 days ago)	Blocked by UFW [11005/tcp] Source port: 40948 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 thororen	2026-11-06 06:57:06 UTC · (5 days ago)	Blocked by UFW [14324/tcp] Source port: 41614 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 thororen	2026-11-05 17:48:09 UTC · (6 days ago)	Blocked by UFW [9025/tcp] Source port: 59966 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 thororen	2026-11-05 03:22:02 UTC · (6 days ago)	Blocked by UFW [30280/tcp] Source port: 36161 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 thororen	2026-11-04 15:13:21 UTC · (1 week ago)	Blocked by UFW [42558/tcp] Source port: 58580 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇮🇹 matthew_eli	2026-11-04 03:45:05 UTC · (1 week ago)	Keenetic Firewall: Unauthorized connection attempt to ports [20377/tcp,11008/tcp,445/tcp,5234/tcp,3632/tcp,8443/tcp,4022/tcp,2404/tcp,25/tcp,139/tcp,21251/tcp,2396/tcp,13411/tcp,2050/tcp,57621/tcp,5999/tcp,505/tcp,65467/tcp,35040/tcp,5666/tcp,21/tcp, ... show more Keenetic Firewall: Unauthorized connection attempt to ports [20377/tcp,11008/tcp,445/tcp,5234/tcp,3632/tcp,8443/tcp,4022/tcp,2404/tcp,25/tcp,139/tcp,21251/tcp,2396/tcp,13411/tcp,2050/tcp,57621/tcp,5999/tcp,505/tcp,65467/tcp,35040/tcp,5666/tcp,21/tcp,1830/tcp...]. Blocked via Kernel/NFLOG Trap. (7 hits in 24h). [+ 32 new hits since last report] show less	Hacking Port Scan

Showing 1 to 15 of 4116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2a03:2880:f816:43::

🇫🇷 2001:41d0:33a:a00::405

🇺🇸 199.165.159.129

🇩🇪 172.70.248.6

🇫🇷 172.70.108.242

🇺🇸 161.129.174.174

🇹🇭 150.95.89.142

🇧🇩 118.179.2.253

🇺🇸 47.146.216.78

🇵🇱 2400:cb00:1056:1000:35e6:74b9:cf6b:5cf8

🇵🇱 2400:cb00:1055:1000:2418:ecb6:27d4:c1a1

🇧🇩 203.112.75.218

🇪🇨 200.63.104.212

🇨🇾 194.30.129.243

🇺🇸 193.19.109.225

🇵🇾 181.41.199.191

🇫🇷 91.231.89.153

🇺🇸 68.225.58.156

🇺🇸 66.132.224.85

🇵🇱 2400:cb00:1056:1000:2e99:a446:7aee:75dc