JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 240e:108:48a2:fffe::2

240e:108:48a2:fffe::2 was found in our database!

This IP was reported 77 times. Confidence of Abuse is 32%: ?

32%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Chinatelecom IPv6 address for network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Changchun, Jilin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 240e:108:48a2:fffe::2

Whois 240e:108:48a2:fffe::2

IP Abuse Reports for 240e:108:48a2:fffe::2:

This IP address has been reported a total of 77 times from 50 distinct sources. 240e:108:48a2:fffe::2 was first reported on June 14th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 SOC [GOLINE SA]	2026-04-23 12:44:47 (3 months ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 240e:108:48a2:fffe::2 (IPv6) \| Port: N/A \| Country: China \| ISP: CT-IPV6-NETWORK-ADDRESS \| rDNS: None === TARGET === Host: time.goline.ch \| IP: time.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-04-23 14:44:41 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-04-10 19:45:48 (3 months ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 240e:108:48a2:fffe::2 (IPv6) \| Port: N/A \| Country: China \| ISP: CT-IPV6-NETWORK-ADDRESS \| rDNS: None === TARGET === Host: time.goline.ch \| IP: time.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-04-10 21:45:41 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
Anonymous	2026-04-10 16:45:39 (3 months ago)	[Fri Apr 10 18:45:26.945114 2026] [authz_core:error] [pid 32530] [client 240e:108:48a2:fffe::2:59100 ... show more [Fri Apr 10 18:45:26.945114 2026] [authz_core:error] [pid 32530] [client 240e:108:48a2:fffe::2:59100] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Apr 10 18:45:34.173861 2026] [authz_core:error] [pid 21734] [client 240e:108:48a2:fffe::2:33148] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Apr 10 18:45:37.524963 2026] [authz_core:error] [pid 21173] [client 240e:108:48a2:fffe::2:51414] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 lavnet.net	2026-04-02 05:59:09 (3 months ago)	240e:108:48a2:fffe::2 - - [02/Apr/2026:05:58:27 +0000] "GET / HTTP/1.0" 400 292 "-" "-" 240e:108:48a ... show more 240e:108:48a2:fffe::2 - - [02/Apr/2026:05:58:27 +0000] "GET / HTTP/1.0" 400 292 "-" "-" 240e:108:48a2:fffe::2 - - [02/Apr/2026:05:59:05 +0000] "GET / HTTP/1.0" 400 292 "-" "-" 240e:108:48a2:fffe::2 - - [02/Apr/2026:05:59:06 +0000] "GET / HTTP/1.0" 400 292 "-" "-" 240e:108:48a2:fffe::2 - - [02/Apr/2026:05:59:06 +0000] "GET / HTTP/1.0" 400 292 "-" "-" 240e:108:48a2:fffe::2 - - [02/Apr/2026:05:59:07 +0000] "GET / HTTP/1.0" 400 292 "-" "-" 240e:108:48a2:fffe::2 - - [02/Apr/2026:05:59:09 +0000] "GET / HTTP/1.0" 400 292 "-" "-" ... show less	Brute-Force
🇩🇪 DEV-DNS	2026-03-31 05:33:21 (3 months ago)	Port Scan detected from 240e:108:48a2:fffe::2 (Unknown).	Port Scan
🇦🇺 aranguren.org	2026-03-22 06:54:24 (4 months ago)	240e:108:48a2:fffe::2 - - [22/Mar/2026:17:54:01 +1100] "GET /nmaplowercheck1774162441 HTTP/1.1" 400 ... show more 240e:108:48a2:fffe::2 - - [22/Mar/2026:17:54:01 +1100] "GET /nmaplowercheck1774162441 HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:48a2:fffe::2 - - [22/Mar/2026:17:54:01 +1100] "POST /sdk HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:48a2:fffe::2 - - [22/Mar/2026:17:54:01 +1100] "HEAD / HTTP/1.1" 400 - "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:48a2:fffe::2 - - [22/Mar/2026:17:54:02 +1100] "GET / HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:48a2:fffe::2 - - [22/Mar/2026:17:54:02 +1100] "GET /HNAP1 HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:48a2 ... show less	Bad Web Bot
🇫🇷 Provost-info	2026-03-13 20:48:10 (4 months ago)	multiple unauthorized DNS cache Query	Brute-Force SSH
Anonymous	2026-03-13 02:11:44 (4 months ago)	240e:108:48a2:fffe::2 - - [13/Mar/2026:02:11:43 +0000] "\x16\x03\x01\x02" 400 432 "-" "-" ...	Bad Web Bot Web App Attack
Anonymous	2026-03-12 03:49:02 (4 months ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 xmission.com	2026-03-07 05:36:43 (4 months ago)	Blocked by UFW (TCP on 3389) Source port: 51293 Packet length: 64 This report (for 240e:0108:48a2:f ... show more Blocked by UFW (TCP on 3389) Source port: 51293 Packet length: 64 This report (for 240e:0108:48a2:fffe:0000:0000:0000:0002) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇩🇪 HandyTreff.de	2026-03-06 06:40:35 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -49.851 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -49.851 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Sa show less	Web App Attack Bad Web Bot
Anonymous	2026-02-26 06:54:47 (5 months ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 Misaka13514	2026-02-26 01:50:00 (5 months ago)	SSH tarpit connection (endlessh): 2026-02-26T01:50:00.049Z ACCEPT host=240e:108:48a2:fffe::2 port=55 ... show more SSH tarpit connection (endlessh): 2026-02-26T01:50:00.049Z ACCEPT host=240e:108:48a2:fffe::2 port=55706 fd=5 n=2/4096 show less	Brute-Force SSH
🇳🇱 Roderic	2026-02-19 22:55:53 (5 months ago)	Port Scan detected from 240e:108:48a2:fffe::2 (CN/China/-/-/-/[redacted]).	Port Scan
🇩🇪 SiyCah	2026-02-14 04:00:01 (5 months ago)	240e:108:48a2:fffe::2 fell into Endlessh tarpit; 0/31 total connections are currently still open. To ... show more 240e:108:48a2:fffe::2 fell into Endlessh tarpit; 0/31 total connections are currently still open. Total time wasted: 3m 14s. Total bytes sent by tarpit: 20.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH

Showing 16 to 30 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 111.17.162.249

🇩🇿 105.101.50.42

🇺🇸 216.25.89.144

🇪🇸 213.194.144.42

🇧🇴 200.87.91.89

🇧🇪 198.235.24.145

🇬🇧 193.163.125.236

🇧🇷 187.183.38.116

🇧🇷 168.196.85.57

🇯🇵 140.83.60.69

🇺🇸 130.131.220.95

🇮🇳 106.51.196.87

🇺🇸 66.132.195.73

🇺🇸 45.131.195.46

🇺🇸 40.117.97.0

🇨🇦 20.104.22.47

🇺🇸 5.161.62.209

🇦🇿 212.47.132.5

🇻🇪 190.97.254.11

🇺🇸 162.207.235.152