JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2402:f000:6:1401::20:77

2402:f000:6:1401::20:77

Recent Activity IPv6 SLAAC Note

46 reports found in our database

65% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

Tsinghua University

Usage Type

University/College/School

ASN

AS45576

Domain Name

tsinghua.edu.cn

Country

🇨🇳 China

City

Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2402:f000:6:1401::20:77:

This IP address has been reported a total of 46 times from 17 distinct sources. 2402:f000:6:1401::20:77 was first reported on February 4th 2026, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: Germany with 6 reports; United States of America with 5 reports; Switzerland with 2 reports. The most common categories in these recent reports were: Port Scan 14 times; SSH 6 times; Hacking 4 times; Bad Web Bot 2 times; Brute-Force 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 en0	2026-09-07 22:36:29 (2 hours ago)	2402:f000:0006:1401:0000:0000:0020:0077 was recorded 3 times by 1 hosts attempting to connect to 1 u ... show more 2402:f000:0006:1401:0000:0000:0020:0077 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident counter (4h, 24h, all-time): 3, 65, 39 show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-09-07 21:20:57 (3 hours ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 2402:f000:6:1401::20:77 (IPv6) \| Port: N/A \| Country: China \| ISP: CERNET2-TSINGHUA6-20080418 \| rDNS: None === TARGET === Host: lilys.ch \| IP: lilys.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-09-07 23:20:55 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇩🇪 becker-software.de	2026-09-07 20:38:25 (4 hours ago)	2026-09-07T20:38:09.062897+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02 ... show more 2026-09-07T20:38:09.062897+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:98:5d:82:29:8f:43:86:dd SRC=2402:f000:0006:1401:0000:0000:0020:0077 DST=2a14:07c0:7000:0500:0077:0090:0016:0003 LEN=66 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=54321 SEQ=7808 2026-09-07T20:38:09.062922+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:98:5d:82:29:8f:43:86:dd SRC=2402:f000:0006:1401:0000:0000:0020:0077 DST=2a14:07c0:7000:0500:0077:0090:0016:0003 LEN=66 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=54321 SEQ=7809 2026-09-07T20:38:09.062931+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:98:5d:82:29:8f:43:86:dd SRC=2402:f000:0006:1401:0000:0000:0020:0077 DST=2a14:07c0:7000:0500:0077:0090:0016:0003 LEN=66 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=ICMPv6 TYPE=128 CODE=0 ID=54321 SEQ=7810 2026-09-07T20:38:14.158401+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:98 ... show less	Port Scan
🇺🇸 en0	2026-09-07 18:02:42 (6 hours ago)	2402:f000:0006:1401:0000:0000:0020:0077 triggered an undefined firewall event.	Port Scan
🇺🇸 xmission.com	2026-09-07 13:52:28 (10 hours ago)	Blocked by UFW (ICMPv6 on ) Source port: Packet length: 66 This report (for 2402:f000:0006:1401:00 ... show more Blocked by UFW (ICMPv6 on ) Source port: Packet length: 66 This report (for 2402:f000:0006:1401:0000:0000:0020:0077) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-04 05:26:27 (3 days ago)	Port Scanner	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-09-04 05:14:51 (3 days ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 2402:f000:6:1401::20:77 (IPv6) \| Port: N/A \| Country: China \| ISP: CERNET2-TSINGHUA6-20080418 \| rDNS: None === TARGET === Host: insightvm.goline.ch \| IP: insightvm.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-09-04 07:14:49 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇩🇪 Admins@FBN	2026-09-04 04:50:55 (3 days ago)	FW-PortScan: Traffic Blocked srcport=56773 dstport=161	Port Scan
Anonymous	2026-09-04 04:48:57 (3 days ago)	Unauthorized connection to SSH port 22	Port Scan SSH
Anonymous	2026-09-04 04:43:28 (3 days ago)	Blocked by UFW [22/tcp] \| SPT: 35686 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sef ... show more Blocked by UFW [22/tcp] \| SPT: 35686 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH
🇺🇸 xmission.com	2026-09-04 04:39:55 (3 days ago)	Blocked by UFW (TCP on 22) Source port: 46296 Packet length: 60 This report (for 2402:f000:0006:140 ... show more Blocked by UFW (TCP on 22) Source port: 46296 Packet length: 60 This report (for 2402:f000:0006:1401:0000:0000:0020:0077) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇹🇭 Sawasdee	2026-09-04 04:27:02 (3 days ago)	SSH break in attempt ...	SSH
🇩🇪 Admins@Storch	2026-09-04 04:25:01 (3 days ago)	OPNsense: 6 hits, proto=tcp, ports=22	Port Scan Hacking
🇩🇪 Admins@FBN	2026-09-04 04:20:55 (3 days ago)	FW-PortScan: Traffic Blocked srcport=40004 dstport=22	Port Scan Hacking SSH
🇺🇸 xmission.com	2026-09-04 04:20:53 (3 days ago)	Blocked by UFW (TCP on 22) Source port: 46101 Packet length: 60 This report (for 2402:f000:0006:140 ... show more Blocked by UFW (TCP on 22) Source port: 46101 Packet length: 60 This report (for 2402:f000:0006:1401:0000:0000:0020:0077) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a01:4020:1:1:103::10b

🇨🇿 188.120.222.94

🇻🇳 183.91.11.36

🇻🇳 171.244.141.86

🇧🇷 170.231.235.215

🇧🇷 170.81.153.160

🇺🇸 104.248.210.24

🇳🇱 45.148.10.16

🇹🇼 35.229.215.83

🇺🇸 34.162.154.91

🇺🇸 24.56.16.40

🇨🇳 222.168.35.178

🇮🇩 202.154.14.201

🇧🇷 201.63.223.140

🇧🇪 198.235.24.208

🇺🇦 195.140.224.163

🇺🇸 174.138.87.36

🇧🇷 170.80.40.239

🇺🇸 154.58.229.20

🇵🇱 109.205.211.110