AbuseIPDB » 2a06:4880:3000::11

Check an IP Address, Domain Name, or Subnet

e.g. 3.235.195.196, microsoft.com, or 5.188.10.0/24

2a06:4880:3000::11 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 32%: ?

32%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Constantine Cybersecurity Ltd.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	cyber.casa
Country	United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 2a06:4880:3000::11

Whois 2a06:4880:3000::11

IP Abuse Reports for 2a06:4880:3000::11:

This IP address has been reported a total of 11 times from 6 distinct sources. 2a06:4880:3000::11 was first reported on October 11th 2022, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
Tha_14	24 Jan 2023	Incoming TCP Connection from 2a06:4880:3000::11 to port: 80. Honeypot was triggered at 1/24/2023 01: ... show moreIncoming TCP Connection from 2a06:4880:3000::11 to port: 80. Honeypot was triggered at 1/24/2023 01:47:12 AM. show less	Port Scan Hacking
chronos	20 Jan 2023	[[19/01/2023 - 21:41:25 -03:00 UTC] Attack from [2a06:4880:3000::11][glamorous.monitoring.inte ... show more[[19/01/2023 - 21:41:25 -03:00 UTC] Attack from [2a06:4880:3000::11][glamorous.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
Tha_14	12 Jan 2023	Incoming TCP Connection from 2a06:4880:3000::11 to port: 7443. Honeypot was triggered at 1/12/2023 1 ... show moreIncoming TCP Connection from 2a06:4880:3000::11 to port: 7443. Honeypot was triggered at 1/12/2023 11:36:31 AM. show less	Port Scan
Tha_14	07 Jan 2023	Incoming TCP Connection from 2a06:4880:3000::11 to port: 3190. Honeypot was triggered at 1/7/2023 3: ... show moreIncoming TCP Connection from 2a06:4880:3000::11 to port: 3190. Honeypot was triggered at 1/7/2023 3:50:40 PM. show less	Port Scan
Tha_14	06 Jan 2023	Connection by 2a06:4880:3000::11 to port: 2048 triggered the honeypot at 1/6/2023 3:31:21 PM	Port Scan
Tha_14	02 Jan 2023	Connection by 2a06:4880:3000::11 to port: 449 triggered the honeypot at 1/2/2023 6:26:59 AM	Port Scan
pufferfishenjoyer	31 Dec 2022	IP caught from endlessh logs	Brute-Force SSH
stvnrdg.me	13 Dec 2022	2a06:4880:3000::11 - - [14/Dec/2022:04:54:42 +0000] "GET /images/favicon.ico HTTP/2.0" 404 333 "-" " ... show more2a06:4880:3000::11 - - [14/Dec/2022:04:54:42 +0000] "GET /images/favicon.ico HTTP/2.0" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Hobby Bob	07 Dec 2022	Dec 7 09:02:13 mail dovecot: pop3-login: Aborted login (no auth attempts in 38 secs): user=, rip=2a0 ... show moreDec 7 09:02:13 mail dovecot: pop3-login: Aborted login (no auth attempts in 38 secs): user=, rip=2a06:4880:3000::11, lip=X.X.X.X session= show less	Port Scan Hacking
Hobby Bob	04 Nov 2022	Nov 5 04:25:52 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=, rip=2a06: ... show moreNov 5 04:25:52 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=, rip=2a06:4880:3000::11, lip=X.X.X.X session= show less	Port Scan Hacking
_ArminS_	11 Oct 2022	SP-Scan6 50545:110 detected 2022.10.11 04:29:08 blocked until 2022.11.29 20:31:55	Port Scan