JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a06:4883:b000::cb

2a06:4883:b000::cb was found in our database!

This IP was reported 139 times. Confidence of Abuse is 48%: ?

48%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Driftnet Ltd
Usage Type	Commercial
ASN	AS211298
Hostname(s)	r4-203-cb.monitoring.internet-measurement.com
Domain Name	driftnet.io
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Salford, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a06:4883:b000::cb

Whois 2a06:4883:b000::cb

IP Abuse Reports for 2a06:4883:b000::cb:

This IP address has been reported a total of 139 times from 56 distinct sources. 2a06:4883:b000::cb was first reported on December 20th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 blackburied	2026-06-08 13:48:27 (3 months ago)	Fail2Ban: sshd-geoip jail - 1 failures	Brute-Force SSH
🇹🇼 taiwanfrp.me	2026-06-07 07:49:11 (3 months ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, target=proxy:kiwicanary.wfwfewfwefwefweMinecraftJavagre\|port:- show less	Port Scan Hacking
🇺🇸 chronos	2026-06-01 06:35:38 (3 months ago)	[AUTORAVALT][[01/06/2026 - 03:35:38 -03:00 UTC] Attack from [2a06:4883:b000::cb][r4-203-cb.monitorin ... show more [AUTORAVALT][[01/06/2026 - 03:35:38 -03:00 UTC] Attack from [2a06:4883:b000::cb][r4-203-cb.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-05-27 14:27:03 (3 months ago)	[AUTORAVALT][[27/05/2026 - 11:27:03 -03:00 UTC] Attack from [2a06:4883:b000::cb][r4-203-cb.monitorin ... show more [AUTORAVALT][[27/05/2026 - 11:27:03 -03:00 UTC] Attack from [2a06:4883:b000::cb][r4-203-cb.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 www.winos.me	2026-05-26 03:43:33 (3 months ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇩🇪 Honeypot-EU-Fru	2026-05-19 11:59:14 (3 months ago)	May 19 13:59:12 [redacted] dovecot: managesieve-login: Disconnected (no auth attempts in 2 secs): us ... show more May 19 13:59:12 [redacted] dovecot: managesieve-login: Disconnected (no auth attempts in 2 secs): user=<>, rip=2a06:4883:b000::cb, lip=[redacted], session=<e2lOaCpSS+0qBkiDsAAAAAAAAAAAAADL> ... show less	Email Spam Brute-Force
🇩🇪 eskilbrun	2026-05-06 09:19:33 (4 months ago)	2026-05-06T11:19:24.231822+02:00 linode1.eskil.net sshd[86317]: refused connect from 2a06:4883:b000: ... show more 2026-05-06T11:19:24.231822+02:00 linode1.eskil.net sshd[86317]: refused connect from 2a06:4883:b000::cb (2a06:4883:b000::cb) 2026-05-06T11:19:29.277032+02:00 linode1.eskil.net sshd[86318]: refused connect from 2a06:4883:b000::cb (2a06:4883:b000::cb) 2026-05-06T11:19:32.301140+02:00 linode1.eskil.net sshd[86319]: refused connect from 2a06:4883:b000::cb (2a06:4883:b000::cb) ... show less	Brute-Force SSH
🇺🇸 chronos	2026-05-04 06:37:19 (4 months ago)	[AUTORAVALT][[04/05/2026 - 03:37:18 -03:00 UTC] Attack from [2a06:4883:b000::cb] Action: BLocKed Ph ... show more [AUTORAVALT][[04/05/2026 - 03:37:18 -03:00 UTC] Attack from [2a06:4883:b000::cb] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force attacks on webpa] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇩🇪 DerLukas	2026-05-03 16:22:52 (4 months ago)		Port Scan
🇩🇪 Honeypot-EU-Fru	2026-05-02 12:56:38 (4 months ago)	May 2 14:56:37 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, ... show more May 2 14:56:37 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a06:4883:b000::cb, lip=[redacted], TLS handshaking: read(size=588) failed: Connection rese ... show less	Email Spam Brute-Force
🇨🇳 ThreatBook.io	2026-05-01 23:55:07 (4 months ago)	2026-05-01 19:47:56 /	Web App Attack
🇺🇸 chronos	2026-05-01 02:36:28 (4 months ago)	[AUTORAVALT][[30/04/2026 - 23:36:28 -03:00 UTC] Attack from [2a06:4883:b000::cb] Action: BLocKed Ph ... show more [AUTORAVALT][[30/04/2026 - 23:36:28 -03:00 UTC] Attack from [2a06:4883:b000::cb] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force attacks on webpa] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-04-28 15:28:52 (4 months ago)	[AUTORAVALT][[28/04/2026 - 12:28:52 -03:00 UTC] Attack from [2a06:4883:b000::cb] Action: BLocKed Ph ... show more [AUTORAVALT][[28/04/2026 - 12:28:52 -03:00 UTC] Attack from [2a06:4883:b000::cb] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force attacks on webpa] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇩🇪 evilrave	2026-04-25 10:31:10 (4 months ago)	2026-04-25T10:31:09.498625+00:00 [REDACTED_HOSTNAME] sshd-session[655725]: Connection closed by 2a06 ... show more 2026-04-25T10:31:09.498625+00:00 [REDACTED_HOSTNAME] sshd-session[655725]: Connection closed by 2a06:4883:b000::cb port 60007 [preauth] ... show less	Port Scan Brute-Force SSH
🇩🇪 eskilbrun	2026-04-21 10:05:59 (4 months ago)	2026-04-21T12:01:15.172977+02:00 linode1.eskil.net sshd[364549]: refused connect from 2a06:4883:b000 ... show more 2026-04-21T12:01:15.172977+02:00 linode1.eskil.net sshd[364549]: refused connect from 2a06:4883:b000::cb (2a06:4883:b000::cb) 2026-04-21T12:05:54.282376+02:00 linode1.eskil.net sshd[364587]: refused connect from 2a06:4883:b000::cb (2a06:4883:b000::cb) 2026-04-21T12:05:59.329137+02:00 linode1.eskil.net sshd[364588]: refused connect from 2a06:4883:b000::cb (2a06:4883:b000::cb) ... show less	Brute-Force SSH

Showing 31 to 45 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.223.235.7

🇮🇩 34.50.96.72

🇫🇷 2a13:f47:1b40:e485:64a7:ee7b:299b:9f53

🇰🇷 222.232.176.7

🇩🇪 194.187.176.175

🇺🇸 191.96.196.91

🇨🇳 139.198.29.172

🇰🇷 112.164.20.69

🇮🇩 103.191.14.210

🇧🇩 103.139.236.70

🇱🇹 62.60.130.201

🇩🇪 37.5.254.196

🇳🇱 193.47.62.69

🇪🇨 186.47.183.239

🇵🇪 181.65.63.97

🇺🇸 162.216.149.77

🇦🇪 152.32.181.210

🇨🇳 115.29.194.213

🇺🇸 45.61.187.10

🇯🇵 43.167.239.66