2a06:4883:5000::52
| ISP | OCITOKEN::2a06:4887::/32:228463eb7b053d651a96519eb77e22879147362f39700c4e168f8f3f9a08318c |
|---|---|
| Usage Type | Commercial |
| ASN | AS211298 |
| Hostname(s) | r4-82-52.monitoring.internet-measurement.com |
| Domain Name | driftnet.io |
| Country | 🇬🇧 United Kingdom of Great Britain and Northern Ireland |
| City | Salford, England |
ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 2a06:4883:5000::52
This IP address has been reported a total of 168 times from 57 distinct sources. 2a06:4883:5000::52 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 8 reports; France with 8 reports; Japan with 8 reports. The most common categories in these recent reports were: Port Scan 15 times; Brute-Force 10 times; Web App Attack 9 times; Hacking 8 times; SSH 6 times; Other 1 time.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 legionMCCXV |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking | ||
| 🇯🇵 gomasy |
|
Web App Attack | ||
| 🇫🇷 Thaliruth |
|
Hacking Brute-Force | ||
| 🇫🇷 agroman93 |
T-Pot honeypot: 7 hits on ports [443] (automated)
|
Port Scan Web App Attack | ||
| 🇯🇵 gomasy |
_:80 2a06:4883:5000::52 - - [15/Oct/2026:08:39:32 +0900] "\x05\x01\x00" 500 170 "-" "-"
...
|
Web App Attack | ||
| 🇩🇪 london2038.com |
|
Port Scan | ||
| 🇫🇷 gianluca.demartino75 |
|
Brute-Force SSH | ||
| 🇳🇱 Roderic |
*Port Scan* detected from 2a06:4883:5000::52 (GB/United Kingdom/-/-/-/[redacted]).
|
Port Scan | ||
| 🇫🇷 gianluca.demartino75 |
|
Brute-Force SSH | ||
| 🇫🇷 bgg |
|
Brute-Force SSH | ||
| 🇩🇪 london2038.com |
|
Port Scan | ||
| 🇧🇪 sid3windr |
SSH port scan (Tarpitted for 20s, wasted 12B)
|
Port Scan SSH | ||
| 🇯🇵 gomasy |
_:80 2a06:4883:5000::52 - - [27/Sep/2026:14:59:57 +0900] "\x05\x01\x00" 500 170 "-" "-"
...
|
Web App Attack | ||
| 🇫🇷 vincent_EUDIER |
SERVER-APACHE Apache mod_ssl non-SSL connection to SSL port denial of service attempt
|
Hacking | ||
| 🇺🇸 legionMCCXV |
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩