JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a06:4884:5000::55

2a06:4884:5000::55 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 58%: ?

58%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	OCITOKEN::2a06:4887::/32:228463eb7b053d651a96519eb77e22879147362f39700c4e168f8f3f9a08318c
Usage Type	Commercial
ASN	AS211298
Hostname(s)	r5-85-55.monitoring.internet-measurement.com
Domain Name	driftnet.io
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Salford, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a06:4884:5000::55

Whois 2a06:4884:5000::55

IP Abuse Reports for 2a06:4884:5000::55:

This IP address has been reported a total of 58 times from 26 distinct sources. 2a06:4884:5000::55 was first reported on May 24th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 gomasy	2026-10-19 15:43:28 (3 days ago)	_:80 2a06:4884:5000::55 - - [20/Oct/2026:00:43:27 +0900] "\x00\x9C\x00\x01\x1A+<M\x00\x01\x00\x00\x0 ... show more _:80 2a06:4884:5000::55 - - [20/Oct/2026:00:43:27 +0900] "\x00\x9C\x00\x01\x1A+<M\x00\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 500 170 "-" "-" ... show less	Web App Attack
🇺🇸 legionMCCXV	2026-10-19 14:39:23 (3 days ago)	Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.	Port Scan Hacking
🇨🇦 alexbfr	2026-10-18 22:49:45 (3 days ago)	Fail2Ban report from custom-honeypot; service=SMB; application_protocol=SMB; transport=TCP; destinat ... show more Fail2Ban report from custom-honeypot; service=SMB; application_protocol=SMB; transport=TCP; destination_port=445; observed_at=2026-10-18T22:49:45Z; reported_at=2026-10-18T22:49:45Z 2026-10-18T22:49:45Z activity=connection accepted show less	Hacking
🇯🇵 gomasy	2026-10-18 12:06:57 (4 days ago)	_:80 2a06:4884:5000::55 - - [18/Oct/2026:21:06:56 +0900] "C\x87\x00\x00\x00\x00\x00\x8C\x00\x02=\x00 ... show more _:80 2a06:4884:5000::55 - - [18/Oct/2026:21:06:56 +0900] "C\x87\x00\x00\x00\x00\x00\x8C\x00\x02=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00DataDigest=None\x00SessionType=Discovery\x00MaxRecvDataSegmentLength=32768\x00InitiatorName=iqn.2003-01.com.linux-iscsi:2438215674\x00HeaderDigest=None\x00" 500 170 "-" "-" ... show less	Web App Attack
🇧🇷 Padawan	2026-10-18 00:38:07 (4 days ago)	Unauthorized request on port 22 or 53	Brute-Force
🇫🇷 bgg	2026-10-17 23:43:45 (4 days ago)	Oct 18 01:43:45 nanopirate sshd[2993185]: refused connect from r5-85-55.monitoring.internet-measurem ... show more Oct 18 01:43:45 nanopirate sshd[2993185]: refused connect from r5-85-55.monitoring.internet-measurement.com (2a06:4884:5000::55) ... show less	Brute-Force SSH
🇯🇵 gomasy	2026-10-14 23:44:23 (1 week ago)	_:80 2a06:4884:5000::55 - - [15/Oct/2026:08:44:22 +0900] "\x11\xBF\x00\x00\x00\x05\x01+\x0E\x01\x00" ... show more _:80 2a06:4884:5000::55 - - [15/Oct/2026:08:44:22 +0900] "\x11\xBF\x00\x00\x00\x05\x01+\x0E\x01\x00" 500 170 "-" "-" ... show less	Web App Attack
🇩🇪 london2038.com	2026-10-14 10:44:51 (1 week ago)	2026-10-14 12:44:30.138 5555/TCP connection CID-37957 failed from 2a06:4884:5000::55 (r5-85-55.monit ... show more 2026-10-14 12:44:30.138 5555/TCP connection CID-37957 failed from 2a06:4884:5000::55 (r5-85-55.monitoring.internet-measurement.com), port 35659 show less	Port Scan
🇫🇷 gianluca.demartino75	2026-10-10 08:21:13 (1 week ago)	2026-10-10T10:21:11.338024+02:00 vps-49934a4d endlessh[839577]: 2026-10-10T08:21:11.337Z ACCEPT host ... show more 2026-10-10T10:21:11.338024+02:00 vps-49934a4d endlessh[839577]: 2026-10-10T08:21:11.337Z ACCEPT host=2a06:4884:5000::55 port=59495 fd=4 n=1/4096 ... show less	Brute-Force SSH
🇳🇱 Roderic	2026-10-07 07:20:37 (2 weeks ago)	Port Scan detected from 2a06:4884:5000::55 (GB/United Kingdom/-/-/-/[redacted]).	Port Scan
🇧🇪 sid3windr	2026-10-03 04:26:59 (2 weeks ago)	SSH port scan (Tarpitted for 30s, wasted 32B)	Port Scan SSH
🇨🇦 alexbfr	2026-10-02 01:33:22 (2 weeks ago)	Fail2Ban report from custom-honeypot; automated RDP honeypot detection.	Brute-Force
🇯🇵 gomasy	2026-09-27 06:01:37 (3 weeks ago)	_:80 2a06:4884:5000::55 - - [27/Sep/2026:15:01:37 +0900] "\x00\x9C\x00\x01\x1A+<M\x00\x01\x00\x00\x0 ... show more _:80 2a06:4884:5000::55 - - [27/Sep/2026:15:01:37 +0900] "\x00\x9C\x00\x01\x1A+<M\x00\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 500 170 "-" "-" ... show less	Web App Attack
🇯🇵 gomasy	2026-09-23 19:28:37 (4 weeks ago)	_:80 2a06:4884:5000::55 - - [24/Sep/2026:04:28:37 +0900] "C\x87\x00\x00\x00\x00\x00\x8C\x00\x02=\x00 ... show more _:80 2a06:4884:5000::55 - - [24/Sep/2026:04:28:37 +0900] "C\x87\x00\x00\x00\x00\x00\x8C\x00\x02=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00HeaderDigest=None\x00DataDigest=None\x00SessionType=Discovery\x00MaxRecvDataSegmentLength=32768\x00InitiatorName=iqn.2003-01.com.linux-iscsi:4385017664\x00" 500 170 "-" "-" ... show less	Web App Attack
🇨🇦 alexbfr	2026-09-22 11:26:04 (1 month ago)	Fail2Ban report from custom-honeypot; automated RDP honeypot detection.	Brute-Force

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.87

🇧🇷 187.116.141.206

🇳🇱 185.242.226.73

🇹🇷 176.236.127.114

🇺🇸 136.107.179.120

🇦🇺 96.9.176.52

🇮🇷 85.133.221.190

🇳🇱 77.91.71.90

🇧🇧 65.48.164.86

🇧🇪 35.190.196.13

🇸🇬 35.187.231.181

🇯🇵 34.104.178.181

🇭🇰 223.197.145.141

🇮🇩 202.51.214.98

🇩🇪 167.94.145.17

🇩🇪 167.71.61.187

🇮🇳 125.20.126.42

🇮🇩 103.113.170.231

🇵🇹 93.108.198.50

🇹🇷 78.171.222.196