JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

240e:108:4845:fffe::2

Neutral Activity IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

82 reports

50 reporters · latest 2 months ago

ISP: Chinatelecom IPv6 address for network
Usage Type: Fixed Line ISP
ASN: AS58466
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Guangzhou, Guangdong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

240e:108:4845:fffe::2 has been reported 82 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

82 from 50 distinct reporters

First reported

June 23rd 2024

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 aranguren.org	2026-03-22 05:00:49 UTC · (7 months ago)	240e:108:4845:fffe::2 - - [22/Mar/2026:16:00:26 +1100] "GET /nmaplowercheck1774155295 HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:4845:fffe::2 - - [22/Mar/2 ... show more 240e:108:4845:fffe::2 - - [22/Mar/2026:16:00:26 +1100] "GET /nmaplowercheck1774155295 HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:4845:fffe::2 - - [22/Mar/2026:16:00:26 +1100] "HEAD / HTTP/1.1" 400 - "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:4845:fffe::2 - - [22/Mar/2026:16:00:26 +1100] "GET / HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:4845:fffe::2 - - [22/Mar/2026:16:00:26 +1100] "GET /HNAP1 HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:4845:fffe::2 - - [22/Mar/2026:16:00:26 +1100] "GET /evox/about HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:10 ... show less	Bad Web Bot
🇩🇪 Admins@FBN	2026-03-21 00:38:53 UTC · (7 months ago)	FW-PortScan: Traffic Blocked srcport=51834 dstport=199	Port Scan
🇩🇪 mnpx	2026-03-19 15:37:14 UTC · (7 months ago)	SMTP brute forcing (5× over 0h:01m); first seen here 2026-03-19T15:37Z	Brute-Force
🇩🇪 ksol-hostmaster	2026-03-19 08:10:05 UTC · (7 months ago)	Mar 19 09:09:58 ksol dovecot[89308]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=240e:108:4845:fffe::2, lip=2a01:4f8:2200:30c2::22, session=<GwMuGFxNupIkDgEISEX//gAAAAAAAAAC> Mar 19 09:09:58 ksol dovecot[893 ... show more Mar 19 09:09:58 ksol dovecot[89308]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=240e:108:4845:fffe::2, lip=2a01:4f8:2200:30c2::22, session=<GwMuGFxNupIkDgEISEX//gAAAAAAAAAC> Mar 19 09:09:58 ksol dovecot[89308]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=240e:108:4845:fffe::2, lip=2a01:4f8:2200:30c2::22, session=<zRkuGFxNiIUkDgEISEX//gAAAAAAAAAC> Mar 19 09:10:04 ksol dovecot[89308]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=240e:108:4845:fffe::2, lip=2a01:4f8:2200:30c2::22, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<KaeGGFxNCskkDgEISEX//gAAAAAAAAAC> Mar 19 09:10:04 ksol dovecot[89308]: pop3-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=240e ... show less	Brute-Force
🇩🇪 Admins@FBN	2026-03-13 00:59:53 UTC · (7 months ago)	FW-PortScan: Traffic Blocked srcport=45611 dstport=5060	Port Scan
🇩🇪 Mr-Money	2026-03-05 00:50:42 UTC · (8 months ago)	scenario: crowdsecurity/postfix-spam - events: 6	Email Spam
🇩🇪 marcel-knorr.de	2026-02-15 11:03:36 UTC · (8 months ago)	[mail-backup-2] Blocked by UFW	Port Scan Brute-Force
Anonymous	2026-01-31 06:43:20 UTC · (9 months ago)	Port Scan detected from 240e:108:4845:fffe::2 (CN/China/-).	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-01-22 07:40:25 UTC · (9 months ago)	Suricata IDS Detection: Suricata High-Severity Alert === ATTACK DETAILS === Signature: Suricata High-Severity Alert Signature ID: Severity 1-2 Severity: 1-2 (Critical/High) Category: Security Threat === NETWORK INFO === Source IP: 240e:108:4845:fff ... show more Suricata IDS Detection: Suricata High-Severity Alert === ATTACK DETAILS === Signature: Suricata High-Severity Alert Signature ID: Severity 1-2 Severity: 1-2 (Critical/High) Category: Security Threat === NETWORK INFO === Source IP: 240e:108:4845:fffe::2 (IPv6) Source Port: N/A Target: lg.goline.ch (lg.goline.ch) Target Port: multiple Protocol: TCP/UDP App Protocol: N/A === DETECTION === System: Suricata IDS Time: 2026-01-22 08:40:11 Status: Banned by Fail2Ban show less	Port Scan Hacking Bad Web Bot
Anonymous	2026-01-12 08:43:42 UTC · (9 months ago)	240e:108:4845:fffe::2 - - [12/Jan/2026:08:43:41 +0000] "\x16\x03\x01\x02" 400 432 "-" "-" ...	Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-01-08 15:53:23 UTC · (10 months ago)	SASL LOGIN authentication failed	Brute-Force
🇨🇦 1gz	2025-12-29 09:34:19 UTC · (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0 This ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-12-28 12:28:31 UTC · (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122 ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-12-27 07:33:34 UTC · (10 months ago)	Port Scan detected from 240e:108:4845:fffe::2 (CN/China/-).	Port Scan
🇩🇪 Admins@FBN	2025-12-25 20:31:54 UTC · (10 months ago)	FW-PortScan: Traffic Blocked srcport=58517 dstport=22	Port Scan Hacking SSH

Showing 31 to 45 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 220.93.167.144

🇺🇸 217.217.47.197

🇮🇳 190.92.174.183

🇨🇳 124.239.169.52

🇳🇱 77.239.124.175

🇺🇸 3.80.141.172

🇨🇳 220.197.85.2

🇺🇸 217.217.47.146

🇰🇷 211.196.178.62

🇳🇱 204.76.203.44

🇩🇪 172.71.247.117

🇺🇸 141.140.31.60

🇩🇪 85.10.205.111

🇳🇱 77.91.71.66

🇳🇱 77.67.26.43

🇩🇪 64.89.163.182

🇺🇸 64.49.37.21

🇳🇱 51.158.205.203

🇧🇩 36.50.179.34

🇧🇪 34.140.194.215