JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a06:4882:d000::fa

2a06:4882:d000::fa was found in our database!

This IP was reported 231 times. Confidence of Abuse is 74%: ?

74%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Driftnet Ltd
Usage Type	Commercial
ASN	AS211298
Hostname(s)	r3-250-fa.monitoring.internet-measurement.com
Domain Name	driftnet.io
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Salford, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a06:4882:d000::fa

Whois 2a06:4882:d000::fa

IP Abuse Reports for 2a06:4882:d000::fa:

This IP address has been reported a total of 231 times from 55 distinct sources. 2a06:4882:d000::fa was first reported on December 14th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LotPhantom	2026-09-17 15:31:37 (1 day ago)	2026-09-17T15:31:37.341660+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-17T15:31:37.341660+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a06:4882:d000:0000:0000:0000:0000:00fa DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=1248 TC=0 HOPLIMIT=55 FLOWLBL=195420 PROTO=UDP SPT=16692 DPT=443 LEN=1208 2026-09-17T15:31:37.546164+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a06:4882:d000:0000:0000:0000:0000:00fa DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=1248 TC=0 HOPLIMIT=55 FLOWLBL=195420 PROTO=UDP SPT=16692 DPT=443 LEN=1208 ... show less	Port Scan Hacking
🇩🇪 DerLukas	2026-09-17 10:09:55 (1 day ago)		Port Scan
🇨🇦 alexbfr	2026-09-16 22:31:51 (1 day ago)	Fail2Ban report from custom-honeypot; automated SMB honeypot detection.	Hacking
🇳🇱 Roderic	2026-09-16 07:26:11 (2 days ago)	Port Scan detected from 2a06:4882:d000::fa (GB/United Kingdom/-/-/-/[redacted]).	Port Scan
🇨🇭 Peter-Johann Sarbach	2026-09-15 23:34:40 (2 days ago)	Sep 15 02:21:15 imap-login: Info: Disconnected: Connection closed (no auth attempts in 0 secs): user ... show more Sep 15 02:21:15 imap-login: Info: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=2a06:4882:d000::fa, lip=x.x.x.x, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) show less	Hacking
🇯🇵 gomasy	2026-09-15 16:09:15 (3 days ago)	_:80 2a06:4882:d000::fa - - [16/Sep/2026:01:09:14 +0900] "0\x0C\x02\x01\x01`\x07\x02\x01\x03\x04\x00 ... show more _:80 2a06:4882:d000::fa - - [16/Sep/2026:01:09:14 +0900] "0\x0C\x02\x01\x01`\x07\x02\x01\x03\x04\x00\x80\x00" 500 170 "-" "-" ... show less	Web App Attack
🇯🇵 gomasy	2026-09-14 08:40:57 (4 days ago)	_:80 2a06:4882:d000::fa - - [14/Sep/2026:17:40:56 +0900] "\x00\x00\x00\x09\x00\x03\x00\x00\x00" 500 ... show more _:80 2a06:4882:d000::fa - - [14/Sep/2026:17:40:56 +0900] "\x00\x00\x00\x09\x00\x03\x00\x00\x00" 500 170 "-" "-" ... show less	Web App Attack
🇺🇸 chronos	2026-09-14 06:32:30 (4 days ago)	[AUTORAVALT][[14/09/2026 - 03:32:30 -03:00 UTC] Attack from [2a06:4882:d000::fa][r3-250-fa.monitorin ... show more [AUTORAVALT][[14/09/2026 - 03:32:30 -03:00 UTC] Attack from [2a06:4882:d000::fa][r3-250-fa.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇩🇪 london2038.com	2026-09-13 19:43:22 (5 days ago)	2026-09-13 21:42:39.528 5555/TCP connection CID-23721 failed from 2a06:4882:d000::fa (r3-250-fa.moni ... show more 2026-09-13 21:42:39.528 5555/TCP connection CID-23721 failed from 2a06:4882:d000::fa (r3-250-fa.monitoring.internet-measurement.com), port 34213 show less	Port Scan
🇫🇷 bgg	2026-09-10 20:58:53 (1 week ago)	Sep 10 22:58:53 nanopirate sshd[2397901]: refused connect from r3-250-fa.monitoring.internet-measure ... show more Sep 10 22:58:53 nanopirate sshd[2397901]: refused connect from r3-250-fa.monitoring.internet-measurement.com (2a06:4882:d000::fa) ... show less	Brute-Force SSH
🇩🇰 powerhostingdk	2026-09-10 02:46:27 (1 week ago)	[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report ... show more [mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report. show less	Brute-Force
🇺🇸 MatCat	2026-09-09 09:05:08 (1 week ago)	Banned by fail2ban: blossomd	Brute-Force SSH
🇺🇸 chronos	2026-09-07 06:33:24 (1 week ago)	[AUTORAVALT][[07/09/2026 - 03:33:22 -03:00 UTC] Attack from [2a06:4882:d000::fa][;; communications e ... show more [AUTORAVALT][[07/09/2026 - 03:33:22 -03:00 UTC] Attack from [2a06:4882:d000::fa][;; communications error to 127.0.0.53#53: timed out r3-250-fa.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access t] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇨🇦 alexbfr	2026-09-04 22:51:44 (1 week ago)	Fail2Ban report from custom-honeypot; automated SMB honeypot detection.	Hacking
🇺🇸 chronos	2026-08-31 06:35:35 (2 weeks ago)	[AUTORAVALT][[31/08/2026 - 03:35:33 -03:00 UTC] Attack from [2a06:4882:d000::fa][;; communications e ... show more [AUTORAVALT][[31/08/2026 - 03:35:33 -03:00 UTC] Attack from [2a06:4882:d000::fa][;; communications error to 127.0.0.53#53: timed out r3-250-fa.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access t] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking

Showing 1 to 15 of 231 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇨 190.89.46.73

🇧🇬 109.160.32.98

🇺🇸 94.228.22.75

🇧🇬 79.124.62.230

🇮🇷 37.32.11.114

🇹🇼 198.235.24.58

🇧🇴 189.28.81.220

🇺🇸 167.99.12.43

🇺🇸 147.185.132.176

🇮🇳 103.86.180.10

🇷🇴 92.118.39.77

🇺🇸 73.242.107.249

🇺🇸 67.249.246.68

🇸🇬 47.84.143.108

🇳🇱 45.148.10.240

🇺🇸 45.42.141.111

🇺🇸 2a03:2880:f802:11::

🇨🇱 216.155.93.75

🇹🇼 198.235.24.23

🇹🇷 195.62.50.242