JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a06:4883:d000::ef

2a06:4883:d000::ef was found in our database!

This IP was reported 201 times. Confidence of Abuse is 51%: ?

51%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Driftnet Ltd
Usage Type	Commercial
ASN	AS211298
Hostname(s)	r4-239-ef.monitoring.internet-measurement.com
Domain Name	driftnet.io
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Salford, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a06:4883:d000::ef

Whois 2a06:4883:d000::ef

IP Abuse Reports for 2a06:4883:d000::ef:

This IP address has been reported a total of 201 times from 62 distinct sources. 2a06:4883:d000::ef was first reported on December 11th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 mattk	2026-06-20 02:35:21 (2 months ago)	port scan	Port Scan
🇺🇸 chronos	2026-06-15 23:51:50 (3 months ago)	[AUTORAVALT][[15/06/2026 - 20:51:49 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitorin ... show more [AUTORAVALT][[15/06/2026 - 20:51:49 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-06-15 06:47:06 (3 months ago)	[AUTORAVALT][[15/06/2026 - 03:47:06 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitorin ... show more [AUTORAVALT][[15/06/2026 - 03:47:06 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇫🇷 gianluca.demartino75	2026-06-12 17:19:04 (3 months ago)	2026-06-12T19:19:03.414786+02:00 vps-49934a4d endlessh[1742133]: 2026-06-12T17:19:03.414Z ACCEPT hos ... show more 2026-06-12T19:19:03.414786+02:00 vps-49934a4d endlessh[1742133]: 2026-06-12T17:19:03.414Z ACCEPT host=2a06:4883:d000::ef port=34133 fd=4 n=1/4096 ... show less	Brute-Force SSH
🇫🇷 bgg	2026-06-12 06:51:13 (3 months ago)	Jun 12 08:51:12 nanopirate sshd[1447528]: refused connect from r4-239-ef.monitoring.internet-measure ... show more Jun 12 08:51:12 nanopirate sshd[1447528]: refused connect from r4-239-ef.monitoring.internet-measurement.com (2a06:4883:d000::ef) ... show less	Brute-Force SSH
🇺🇸 chronos	2026-06-08 06:41:14 (3 months ago)	[AUTORAVALT][[08/06/2026 - 03:41:14 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitorin ... show more [AUTORAVALT][[08/06/2026 - 03:41:14 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-06-01 06:35:50 (3 months ago)	[AUTORAVALT][[01/06/2026 - 03:35:50 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitorin ... show more [AUTORAVALT][[01/06/2026 - 03:35:50 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇧🇪 sid3windr	2026-05-31 18:18:24 (3 months ago)	SSH port scan (Tarpitted for 20s, wasted 8B)	Port Scan SSH
🇩🇪 london2038.com	2026-05-30 19:53:39 (3 months ago)	2026-05-30 21:53:06.256 5555/TCP connection CID-2399108 failed from 2a06:4883:d000::ef (r4-239-ef.mo ... show more 2026-05-30 21:53:06.256 5555/TCP connection CID-2399108 failed from 2a06:4883:d000::ef (r4-239-ef.monitoring.internet-measurement.com), port 55303 show less	Port Scan
🇬🇧 Birdo	2026-05-26 06:57:39 (3 months ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Exploited Host Brute-Force Port Scan Hacking
🇩🇪 Honeypot-EU-Fru	2026-05-25 15:39:46 (3 months ago)	May 25 17:39:46 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, ... show more May 25 17:39:46 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a06:4883:d000::ef, lip=[redacted], TLS handshaking: SSL_accept() failed: error:14209102:SS ... show less	Email Spam Brute-Force
🇺🇸 chronos	2026-05-25 06:38:08 (3 months ago)	[AUTORAVALT][[25/05/2026 - 03:38:07 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitorin ... show more [AUTORAVALT][[25/05/2026 - 03:38:07 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-05-18 06:43:36 (3 months ago)	[AUTORAVALT][[18/05/2026 - 03:43:35 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitorin ... show more [AUTORAVALT][[18/05/2026 - 03:43:35 -03:00 UTC] Attack from [2a06:4883:d000::ef][r4-239-ef.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-05-15 15:08:47 (4 months ago)	[AUTORAVALT][[15/05/2026 - 12:08:44 -03:00 UTC] Attack from [2a06:4883:d000::ef][;; communications e ... show more [AUTORAVALT][[15/05/2026 - 12:08:44 -03:00 UTC] Attack from [2a06:4883:d000::ef][;; communications error to 127.0.0.53#53: timed out r4-239-ef.monitoring.internet-measurement.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access t] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇩🇪 Admins@FBN	2026-05-14 03:12:10 (4 months ago)	FW-PortScan: Traffic Blocked srcport=30928 dstport=443	Port Scan

Showing 46 to 60 of 201 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.122.1.175

🇺🇸 164.152.104.81

🇭🇰 103.251.113.7

🇷🇴 92.118.39.50

🇩🇪 87.106.29.151

🇰🇷 34.158.212.90

🇺🇸 172.191.74.151

🇨🇳 120.230.191.56

🇫🇷 85.217.140.43

🇺🇸 70.184.126.57

🇩🇪 69.5.169.199

🇳🇱 45.148.10.141

🇲🇽 201.170.89.126

🇧🇴 186.121.233.2

🇮🇳 161.248.37.160

🇭🇰 159.138.135.99

🇭🇰 152.32.211.187

🇰🇷 112.173.55.231

🇻🇳 103.28.38.27

🇹🇷 94.154.43.15