JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 240e:108:4861:fffe::2

240e:108:4861:fffe::2 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 29%: ?

29%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Chinatelecom IPv6 address for network
Usage Type	Fixed Line ISP
ASN	AS137691
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Harbin, Heilongjiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 240e:108:4861:fffe::2

Whois 240e:108:4861:fffe::2

IP Abuse Reports for 240e:108:4861:fffe::2:

This IP address has been reported a total of 86 times from 61 distinct sources. 240e:108:4861:fffe::2 was first reported on May 10th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 SOC [GOLINE SA]	2026-06-19 20:44:04 (2 weeks ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 240e:108:4861:fffe::2 (IPv6) \| Port: N/A \| Country: China \| ISP: CT-IPV6-NETWORK-ADDRESS \| rDNS: None === TARGET === Host: lg.goline.ch \| IP: lg.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-06-19 22:44:04 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇺🇸 xmission.com	2026-06-19 06:16:15 (2 weeks ago)	Blocked by UFW (TCP on 32768) Source port: 58822 Packet length: 64 This report (for 240e:0108:4861: ... show more Blocked by UFW (TCP on 32768) Source port: 58822 Packet length: 64 This report (for 240e:0108:4861:fffe:0000:0000:0000:0002) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Roderic	2026-05-29 13:08:24 (1 month ago)	Port Scan detected from 240e:108:4861:fffe::2 (CN/China/-/-/-/[redacted]).	Port Scan
🇩🇪 R.G.	2026-05-29 09:35:36 (1 month ago)	Port Scan detected from 240e:108:4861:fffe::2 (Unknown). 11 hits in the last 271 seconds; Ports: * ... show more Port Scan detected from 240e:108:4861:fffe::2 (Unknown). 11 hits in the last 271 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 29 11:35:17 kernel: Firewall: TCP6IN Blocked* IN=enp0s31f6 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xxdd SRC=240e:0108:4861:fffe:0000:0 show less	Port Scan
🇺🇸 xmission.com	2026-05-28 22:33:45 (1 month ago)	Blocked by UFW (TCP on 135) Source port: 64460 Packet length: 64 This report (for 240e:0108:4861:ff ... show more Blocked by UFW (TCP on 135) Source port: 64460 Packet length: 64 This report (for 240e:0108:4861:fffe:0000:0000:0000:0002) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-05-14 10:34:44 (1 month ago)	Unauthorized connection to PostgreSQL port 5432	Port Scan
Anonymous	2026-05-14 10:29:28 (1 month ago)	Unauthorized connection to SIP port 5060	Fraud VoIP Port Scan
🇸🇬 Starburst SysOp Team	2026-05-10 05:52:27 (1 month ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-sin2-2)	Hacking Bad Web Bot
🇩🇪 Viveronese	2026-05-09 10:25:01 (1 month ago)	SASL LOGIN authentication failed	Brute-Force
🇮🇹 ciccio diddo	2026-05-08 22:57:11 (1 month ago)	Openrelay SMTP Scanner \| SMTP bruteforce port:Tcp/25	Brute-Force Email Spam
🇩🇪 Live Home Cams	2026-05-08 15:39:01 (1 month ago)	WebApp brute force attack detected. Multiple file scanning attempts from 240e:108:4861:fffe::2. Dete ... show more WebApp brute force attack detected. Multiple file scanning attempts from 240e:108:4861:fffe::2. Detected by fail2ban. show less	Web App Attack Brute-Force
🇳🇱 Roderic	2026-04-26 17:53:15 (2 months ago)	Port Scan detected from 240e:108:4861:fffe::2 (CN/China/-/-/-/[redacted]).	Port Scan
🇳🇱 Roderic	2026-04-22 11:07:04 (2 months ago)	Port Scan detected from 240e:108:4861:fffe::2 (CN/China/-/-/-/[redacted]).	Port Scan
🇩🇪 HandyTreff.de	2026-04-22 00:54:10 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -58.294 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -58.294 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇩🇪 becker-software.de	2026-04-04 06:13:47 (3 months ago)	2026-04-04T06:13:46.093095+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02 ... show more 2026-04-04T06:13:46.093095+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:00:80:41:17:00:15:86:dd SRC=240e:0108:4861:fffe:0000:0000:0000:0002 DST=2a14:07c0:7000:0500:0077:0090:0016:0003 LEN=108 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=UDP SPT=49086 DPT=1701 LEN=68 2026-04-04T06:13:46.104010+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:00:80:41:17:00:15:86:dd SRC=240e:0108:4861:fffe:0000:0000:0000:0002 DST=2a14:07c0:7000:0500:0077:0090:0016:0003 LEN=277 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=UDP SPT=49086 DPT=5060 LEN=237 2026-04-04T06:13:46.104043+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:00:80:41:17:00:15:86:dd SRC=240e:0108:4861:fffe:0000:0000:0000:0002 DST=2a14:07c0:7000:0500:0077:0090:0016:0003 LEN=79 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=UDP SPT=49086 DPT=5060 LEN=39 2026-04-04T06:13:46.112212+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:00:80:41:17:00:15:86:dd SRC=2 ... show less	Port Scan

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇴 176.29.237.163

🇨🇳 171.213.170.226

🇺🇸 108.81.65.179

🇩🇪 104.248.130.34

🇧🇦 80.65.90.155

🇩🇪 46.101.135.47

🇸🇬 8.219.186.211

🇺🇸 216.74.240.254

🇪🇸 196.245.52.130

🇫🇷 104.23.225.128

🇲🇦 102.97.11.58

🇹🇷 94.154.43.181

🇷🇴 82.152.132.24

🇨🇳 39.154.12.182

🇨🇳 14.103.127.231

🇿🇦 196.216.134.34

🇧🇷 179.0.120.233

🇺🇸 172.56.93.135

🇩🇪 167.94.145.19

🇨🇳 120.48.14.72