JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

240e:108:48a2:fffe::3

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

26% Elevated

115 reports

57 reporters · latest 3 days ago

ISP	Chinatelecom IPv6 address for network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Anshan, Liaoning

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 240e:108:48a2:fffe::3

Export CSV

This IP address has been reported a total of 115 times from 57 distinct sources. 240e:108:48a2:fffe::3 was first reported on June 16th 2024, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: Switzerland with 4 reports; Germany with 2 reports; Netherlands with 1 report. The most common categories in these recent reports were: Bad Web Bot 7 times; Port Scan 5 times; Hacking 5 times; Web App Attack 2 times; Exploited Host 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 SOC [GOLINE SA]	2026-10-17 15:43:28 (3 days ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 240e:108:48a2:fffe::3 (IPv6) \| Port: N/A \| Country: China \| ISP: CT-IPV6-NETWORK-ADDRESS \| rDNS: None === TARGET === Host: lg.goline.ch \| IP: lg.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-10-17 17:43:27 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
Anonymous	2026-10-10 08:17:07 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-09-16 14:08:19 (1 month ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: / \| 2026-09-16 14:08 UTC show less	Bad Web Bot
🇵🇱 nfsec.pl	2026-09-10 16:21:14 (1 month ago)	240e:108:48a2:fffe::3 - - [10/Sep/2026:16:20:46 +0000] "GET / HTTP/1.0" 403 406 "-" "-" 240e:108:48a ... show more 240e:108:48a2:fffe::3 - - [10/Sep/2026:16:20:46 +0000] "GET / HTTP/1.0" 403 406 "-" "-" 240e:108:48a2:fffe::3 - - [10/Sep/2026:16:20:53 +0000] "GET / HTTP/1.0" 403 5446 "-" "-" 240e:108:48a2:fffe::3 - - [10/Sep/2026:16:21:01 +0000] "GET /bad%20ip%2C/Tr%69nity.php%2ebakup HTTP/1.0" 403 572 "-" "-" 240e:108:48a2:fffe::3 - - [10/Sep/2026:16:21:11 +0000] "HEAD / HTTP/1.1" 400 5228 "-" "\\\"Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML" 240e:108:48a2:fffe::3 - - [10/Sep/2026:16:21:13 +0000] "GET / HTTP/1.0" 403 406 "-" "-" ... show less	Web App Attack Exploited Host
🇸🇬 Starburst SysOp Team	2026-08-30 13:41:40 (1 month ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-sin2-2)	Hacking Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-08-28 18:42:07 (1 month ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 240e:108:48a2:fffe::3 (IPv6) \| Port: N/A \| Country: China \| ISP: CT-IPV6-NETWORK-ADDRESS \| rDNS: None === TARGET === Host: filecloud.goline.ch \| IP: filecloud.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-08-28 20:42:07 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-08-28 14:20:03 (1 month ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 240e:108:48a2:fffe::3 (IPv6) \| Port: N/A \| Country: China \| ISP: CT-IPV6-NETWORK-ADDRESS \| rDNS: None === TARGET === Host: matomo.goline.ch \| IP: matomo.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-08-28 16:20:02 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-08-28 06:43:27 (1 month ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 240e:108:48a2:fffe::3 (IPv6) \| Port: N/A \| Country: China \| ISP: CT-IPV6-NETWORK-ADDRESS \| rDNS: None === TARGET === Host: matomo.goline.ch \| IP: matomo.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-08-28 08:43:25 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
Anonymous	2026-08-24 16:13:33 (1 month ago)	Unauthorized connection to openVPN port 1194	Port Scan
🇩🇪 samba.org	2026-08-20 16:07:57 (2 months ago)	spam (f2b h2)	Brute-Force
🇺🇸 xmission.com	2026-08-13 19:04:06 (2 months ago)	Blocked by UFW (TCP on 32768) Source port: 58931 Packet length: 64 This report (for 240e:0108:48a2: ... show more Blocked by UFW (TCP on 32768) Source port: 58931 Packet length: 64 This report (for 240e:0108:48a2:fffe:0000:0000:0000:0003) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 Starburst SysOp Team	2026-08-13 03:40:48 (2 months ago)	Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-syd2-4)	Hacking
🇺🇸 xmission.com	2026-08-08 05:39:41 (2 months ago)	Blocked by UFW (TCP on 8080) Source port: 64309 Packet length: 64 This report (for 240e:0108:48a2:f ... show more Blocked by UFW (TCP on 8080) Source port: 64309 Packet length: 64 This report (for 240e:0108:48a2:fffe:0000:0000:0000:0003) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇳🇱 Roderic	2026-08-08 03:56:24 (2 months ago)	Port Scan detected from 240e:108:48a2:fffe::3 (CN/China/-/-/-/[redacted]).	Port Scan
🇩🇪 Benny Pedersen	2026-08-06 20:34:01 (2 months ago)	Aug 6 22:33:47 localhost postfix/postscreen[194472]: HANGUP after 0.24 from [240e:108:48a2:fffe::3] ... show more Aug 6 22:33:47 localhost postfix/postscreen[194472]: HANGUP after 0.24 from [240e:108:48a2:fffe::3]:53908 in tests before SMTP handshake Aug 6 22:33:56 localhost postfix/postscreen[194472]: HANGUP after 0.28 from [240e:108:48a2:fffe::3]:56264 in tests before SMTP handshake ... show less	Brute-Force

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.166.48.149

🇳🇱 195.178.110.227

🇰🇷 14.33.96.3

🇨🇭 209.99.190.215

🇭🇰 203.218.203.93

🇸🇬 162.158.189.132

🇫🇮 147.185.133.216

🇯🇵 139.162.78.6

🇳🇱 138.226.239.234

🇺🇸 128.241.229.30

🇨🇳 106.59.139.76

🇺🇸 66.132.195.206

🇺🇸 66.132.186.225

🇬🇧 35.203.211.120

🇵🇭 27.110.166.67

🇩🇪 213.209.159.133

🇧🇷 201.92.186.12

🇧🇷 179.99.42.138

🇩🇪 164.92.135.116

🇺🇸 164.92.112.151