2a06:4884:1000::a

Recent Activity This IP has received recent abuse reports, which causes the score to increase. IPv6 SLAAC Note Public IPv6 addresses may implement the SLAAC privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new interface identifier.
Abuse Confidence Score
41% Elevated
60 reports
34 reporters · latest 9 hours ago
ISP
Driftnet Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS211298
Hostname(s)
r5-10-a.monitoring.internet-measurement.com
Domain Name
driftnet.io
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
Salford, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
60 from 34 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 6 🇩🇪 Germany 4 🇺🇸 United States of America 3
Most common categories Brute-Force 7 Web App Attack 5 Port Scan 4 Hacking 3 SSH 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 gianluca.demartino75
2026-11-14T13:49:51.778224+01:00 vps-49934a4d endlessh[1490241]: 2026-11-14T12:49:51.777Z ACCEPT host=2a06:4884:1000::a port=55019 fd=4 n=1/4096 ...
Brute-Force SSH
Anonymous
2a06:4884:1000::a - - [14/Nov/2026:10:52:16 +0100] "GET / HTTP/1.1" 402 4800 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" ...
Web App Attack
🇫🇷 bgg
Nov 8 23:29:50 nanopirate sshd[91706]: refused connect from r5-10-a.monitoring.internet-measurement.com (2a06:4884:1000::a) ...
Brute-Force SSH
🇩🇪 eskilbrun
Brute-Force SSH
🇩🇪 london2038.com
2026-10-23 04:54:39.814 5555/TCP connection CID-677 failed from 2a06:4884:1000::a (r5-10-a.monitoring.internet-measurement.com), port 36667, code 5
Port Scan
🇫🇷 Thaliruth
Oct 10 05:15:25 151 postfix/smtpd[3525834]: lost connection after CONNECT from r5-10-a.monitoring.internet-measurement.com[2a06:4884:1000::a] ...
Hacking Brute-Force
🇺🇸 seajaydaboi36
Automated detection: unsolicited connection to Pterodactyl Wings server.
Port Scan Hacking Brute-Force
🇯🇵 gomasy
Web App Attack
🇯🇵 gomasy
_:80 2a06:4884:1000::a - - [06/Oct/2026:16:31:57 +0900] "2\x7Fe\x00\x0E\x00/00IDED" 500 170 "-" "-" ...
Web App Attack
🇫🇷 uthul
T-Pot honeypot: 4 hits on ports [993] (automated report)
Port Scan
🇺🇸 abenage
2026/09/26 03:53:05 [crit] 232236#232236: *18373 SSL_do_handshake() failed (SSL: error:0A00006C:SSL routines::bad key share) while SSL handshaking, client: 2a06:4884:1000::a, server: [::]:443
Bad Web Bot Web App Attack
🇫🇷 pm33
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇫🇷 Thaliruth
Sep 21 18:31:43 151 postfix/smtpd[1577403]: lost connection after CONNECT from r5-10-a.monitoring.internet-measurement.com[2a06:4884:1000::a] ...
Hacking Brute-Force
Anonymous
tls scan
Port Scan
🇩🇪 HoneyPot-FrPri
Sep 17 19:25:50 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=2a06:4884:1000::a, lip=2a0f:5707:aaf1:bbab::1, TLS, session=<9UY9E7FbL7cqBkiEEAAAAAAAAAAAAAAK> ...
Email Spam Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.78.135.132
🇺🇸 213.108.0.63
🇧🇷 200.223.196.90
🇩🇪 172.71.164.37
🇮🇶 169.224.86.197
🇧🇯 154.127.36.237
🇳🇱 138.226.239.90
🇨🇳 123.160.234.3
🇭🇰 118.193.32.88
🇺🇸 71.235.27.139
🇩🇪 69.5.169.83
🇺🇸 66.132.159.23
🇺🇸 54.80.81.103
🇬🇧 213.166.84.48
🇬🇧 195.206.182.216
🇬🇧 195.140.214.22
🇬🇧 193.176.29.15
🇬🇧 193.176.29.12
🇬🇧 192.248.150.180
🇬🇧 188.240.59.38
feedback