JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a06:4882:b000::ca

Recent Activity IPv6 SLAAC Note

Abuse Confidence Score

50% Elevated

203 reports

58 reporters · latest 1 day ago

ISP: Driftnet Ltd
Usage Type: Data Center/Web Hosting/Transit
ASN: AS211298
Hostname(s): r3-202-ca.monitoring.internet-measurement.com
Domain Name: driftnet.io
Country: 🇬🇧 United Kingdom of Great Britain and Northern Ireland
City: Salford, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

203 from 58 distinct reporters

First reported

December 15th 2024

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 9 🇫🇷 France 5 🇯🇵 Japan 5

Most common categories Brute-Force 14 Hacking 11 Email Spam 8 SSH 7 Phishing 7

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 VentryShield	2026-07-02 18:33:11 UTC · (4 months ago)	p0t honeypot: unknown connection on port 49/tcp, 204 bytes received from client	Port Scan
🇧🇪 sid3windr	2026-07-02 03:48:02 UTC · (4 months ago)	SSH port scan (Tarpitted for 20s, wasted 25B)	Port Scan SSH
🇳🇱 Roderic	2026-06-30 09:25:11 UTC · (4 months ago)	Port Scan detected from 2a06:4882:b000::ca (GB/United Kingdom/-/-/-/[redacted]).	Port Scan
🇫🇮 Ticlem	2026-06-29 19:02:08 UTC · (4 months ago)	2026-06-29T21:02:07.603321+02:00 clement-turlure kernel: [3765916.231050] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a06:4882:b000:0000:0000:0000:0000:00ca DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=1248 TC= ... show more 2026-06-29T21:02:07.603321+02:00 clement-turlure kernel: [3765916.231050] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a06:4882:b000:0000:0000:0000:0000:00ca DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=1248 TC=0 HOPLIMIT=54 FLOWLBL=1047950 PROTO=UDP SPT=30265 DPT=995 LEN=1208 2026-06-29T21:02:07.803381+02:00 clement-turlure kernel: [3765916.431116] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a06:4882:b000:0000:0000:0000:0000:00ca DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=1248 TC=0 HOPLIMIT=54 FLOWLBL=1047950 PROTO=UDP SPT=30265 DPT=995 LEN=1208 2026-06-29T21:02:07.803389+02:00 clement-turlure kernel: [3765916.431300] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a06:4882:b000:0000:0000:0000:0000:00ca DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=1248 TC=0 HOPLIMIT=54 FLOWLBL=1047950 PROTO=UDP SPT=30265 DPT=995 LEN=1208 ... show less	Port Scan
🇺🇸 chronos	2026-06-29 06:34:40 UTC · (4 months ago)	[AUTORAVALT][[29/06/2026 - 03:34:40 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and ... show more [AUTORAVALT][[29/06/2026 - 03:34:40 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-06-22 06:34:54 UTC · (4 months ago)	[AUTORAVALT][[22/06/2026 - 03:34:54 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and ... show more [AUTORAVALT][[22/06/2026 - 03:34:54 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇷🇺 webserfer	2026-06-18 13:54:18 UTC · (4 months ago)	[f2b] smtp: service/port scan [W0:2:90d]	Email Spam Port Scan
🇺🇸 chronos	2026-06-15 23:48:23 UTC · (4 months ago)	[AUTORAVALT][[15/06/2026 - 20:48:22 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and ... show more [AUTORAVALT][[15/06/2026 - 20:48:22 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-06-15 06:44:14 UTC · (4 months ago)	[AUTORAVALT][[15/06/2026 - 03:44:13 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and ... show more [AUTORAVALT][[15/06/2026 - 03:44:13 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-06-08 06:38:01 UTC · (5 months ago)	[AUTORAVALT][[08/06/2026 - 03:38:00 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and ... show more [AUTORAVALT][[08/06/2026 - 03:38:00 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇩🇪 london2038.com	2026-06-02 14:00:48 UTC · (5 months ago)	2026-06-02 15:59:51.750 5555/TCP connection CID-2399297 failed from 2a06:4882:b000::ca (r3-202-ca.monitoring.internet-measurement.com), port 59385	Port Scan
🇩🇪 Robbie	2026-06-01 15:50:54 UTC · (5 months ago)	Jun 1 15:50:54 Ubuntu-2204-jammy-amd64-base sshd[3807984]: Connection closed by 2a06:4882:b000::ca port 56671 [preauth] ...	Brute-Force SSH
🇺🇸 chronos	2026-06-01 06:33:44 UTC · (5 months ago)	[AUTORAVALT][[01/06/2026 - 03:33:42 -03:00 UTC] Attack from [2a06:4882:b000::ca][;; communications error to 127.0.0.53#53: timed out r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Sp ... show more [AUTORAVALT][[01/06/2026 - 03:33:42 -03:00 UTC] Attack from [2a06:4882:b000::ca][;; communications error to 127.0.0.53#53: timed out r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access t] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-05-25 06:35:00 UTC · (5 months ago)	[AUTORAVALT][[25/05/2026 - 03:34:59 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and ... show more [AUTORAVALT][[25/05/2026 - 03:34:59 -03:00 UTC] Attack from [2a06:4882:b000::ca][r3-202-ca.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇫🇷 bgg	2026-05-23 21:14:33 UTC · (5 months ago)	May 23 23:14:32 nanopirate sshd[749701]: refused connect from r3-202-ca.monitoring.internet-measurement.com (2a06:4882:b000::ca) ...	Brute-Force SSH

Showing 76 to 90 of 203 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:1056:1000:36d0:8013:20be:e06d

🇺🇸 205.210.31.81

🇧🇪 198.235.24.205

🇺🇸 192.24.159.80

🇸🇬 178.128.210.52

🇺🇸 172.98.32.216

🇺🇸 172.98.32.215

🇺🇸 172.98.32.204

🇫🇷 172.71.135.48

🇭🇰 154.92.2.59

🇰🇷 121.133.167.123

🇫🇷 91.196.152.204

🇬🇧 78.153.140.236

🇫🇮 46.29.26.203

🇵🇱 45.138.12.44

🇺🇸 45.92.229.24

🇺🇦 31.43.224.97

🇺🇸 20.83.44.118

🇰🇷 1.214.214.114

🇨🇳 203.83.234.180