JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

240e:108:4a21:fffe::2

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

53% Elevated

67 reports

38 reporters · latest 2 hours ago

ISP	Chinatelecom IPv6 address for network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 240e:108:4a21:fffe::2

Export CSV

This IP address has been reported a total of 67 times from 38 distinct sources. 240e:108:4a21:fffe::2 was first reported on June 21st 2024, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: Germany with 4 reports; United States of America with 4 reports; Netherlands with 3 reports. The most common categories in these recent reports were: Port Scan 6 times; Hacking 5 times; Bad Web Bot 4 times; Web App Attack 4 times; Email Spam 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 securejdprop	2026-10-25 10:44:37 (2 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Suspicious 👀 ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Suspicious 👀 SSL/TLS trafic on unusual SSL/TLS port). show less	Hacking Web App Attack
🇦🇺 aranguren.org	2026-10-25 09:06:41 (4 hours ago)	240e:108:4a21:fffe::2 - - [25/Oct/2026:20:06:39 +1100] "POST /sdk HTTP/1.1" 400 918 "-" "Mozilla/5.0 ... show more 240e:108:4a21:fffe::2 - - [25/Oct/2026:20:06:39 +1100] "POST /sdk HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:4a21:fffe::2 - - [25/Oct/2026:20:06:41 +1100] "GET / HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:108:4a21:fffe::2 - - [25/Oct/2026:20:06:41 +1100] "GET /evox/about HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" ... show less	Bad Web Bot
🇩🇪 Viveronese	2026-10-25 08:45:03 (4 hours ago)	HTTP vulnerability scanning	Web App Attack
🇺🇸 Starburst SysOp Team	2026-10-24 22:36:00 (14 hours ago)	Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-stl2-13)	Hacking
🇩🇪 lirion	2026-10-24 07:19:31 (1 day ago)	2026-10-24T09:19:04.755797+02:00 rserver.lirion.de postfix/smtpd[1009990]: improper command pipelini ... show more 2026-10-24T09:19:04.755797+02:00 rserver.lirion.de postfix/smtpd[1009990]: improper command pipelining after CONNECT from unknown[240e:108:4a21:fffe::2]: EHLO\r\n 2026-10-24T09:19:07.240506+02:00 rserver.lirion.de postfix/smtpd[1009990]: improper command pipelining after CONNECT from unknown[240e:108:4a21:fffe::2]: HELP\r\n 2026-10-24T09:19:18.560304+02:00 rserver.lirion.de postfix/smtpd[1009990]: improper command pipelining after CONNECT from unknown[240e:108:4a21:fffe::2]: \r\n\r\n 2026-10-24T09:19:20.552338+02:00 rserver.lirion.de postfix/smtpd[1010640]: improper command pipelining after CONNECT from unknown[240e:108:4a21:fffe::2]: GET / HTTP/1.0\r\n\r\n ... show less	Email Spam Brute-Force
🇩🇪 AetherFox	2026-10-24 00:34:20 (1 day ago)	AetherFox VoidGuard detected: [Sat Oct 24 00:33:56.712448 2026] [security2:error] [pid 248086:tid 24 ... show more AetherFox VoidGuard detected: [Sat Oct 24 00:33:56.712448 2026] [security2:error] [pid 248086:tid 248110] [client 240e:108:4a21:fffe::2:32956] [client 240e:108:4a21:fffe::2] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/AetherFox.conf"] [line "235"] [id "100082"] [msg "missing User-Agent blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [tag "bot-block"] [hostname "aetherfox.draconigen.net"] [uri "/"] [unique_id "atv89GmPaHiOIAQ8uJn7JgAAAFU"] [Sat Oct 24 00:33:56.712144 2026] [security2:error] [pid 248086:tid 248108] [client 240e:108:4a21:fffe::2:53594] [client 240e:108:4a21:fffe::2] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/AetherFox.conf"] [line "235"] [id "100082"] [msg "missing User-Agent blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [tag "bot-block"] [hostname "beispiel.de"] [uri "/"] [unique_id ... show less	Hacking Bad Web Bot
🇫🇷 vincent_EUDIER	2026-10-17 15:20:00 (1 week ago)	ET SCAN Suspicious inbound to mySQL port 3306	Port Scan
🇩🇪 AetherFox	2026-10-17 03:13:37 (1 week ago)	AetherFox VoidGuard detected: [Sat Oct 17 03:13:30.095684 2026] [security2:error] [pid 3316442:tid 3 ... show more AetherFox VoidGuard detected: [Sat Oct 17 03:13:30.095684 2026] [security2:error] [pid 3316442:tid 3316463] [client 240e:108:4a21:fffe::2:34924] [client 240e:108:4a21:fffe::2] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/AetherFox.conf"] [line "235"] [id "100082"] [msg "missing User-Agent blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [tag "bot-block"] [hostname "beispiel.de"] [uri "/"] [unique_id "atLn2qE6uwD2njkvOYYmngAAABI"] [Sat Oct 17 03:13:31.125930 2026] [security2:error] [pid 3316442:tid 3316460] [client 240e:108:4a21:fffe::2:42518] [client 240e:108:4a21:fffe::2] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/AetherFox.conf"] [line "235"] [id "100082"] [msg "missing User-Agent blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [tag "bot-block"] [hostname "aetherfox.draconigen.net"] [uri "/"] [unique ... show less	Hacking Bad Web Bot
Anonymous	2026-09-22 13:27:15 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇳🇱 Roderic	2026-09-13 22:06:34 (1 month ago)	Port Scan detected from 240e:108:4a21:fffe::2 (CN/China/-/-/-/[redacted]).	Port Scan
🇵🇱 nfsec.pl	2026-09-13 09:03:53 (1 month ago)	240e:108:4a21:fffe::2 - - [13/Sep/2026:09:03:29 +0000] "GET / HTTP/1.0" 403 406 "-" "-" 240e:108:4a2 ... show more 240e:108:4a21:fffe::2 - - [13/Sep/2026:09:03:29 +0000] "GET / HTTP/1.0" 403 406 "-" "-" 240e:108:4a21:fffe::2 - - [13/Sep/2026:09:03:36 +0000] "GET / HTTP/1.0" 403 5446 "-" "-" 240e:108:4a21:fffe::2 - - [13/Sep/2026:09:03:43 +0000] "GET /bad%20ip%2C/Tr%69nity.php%2ebakup HTTP/1.0" 403 572 "-" "-" 240e:108:4a21:fffe::2 - - [13/Sep/2026:09:03:52 +0000] "HEAD / HTTP/1.1" 400 5228 "-" "\\\"Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML" 240e:108:4a21:fffe::2 - - [13/Sep/2026:09:03:53 +0000] "GET / HTTP/1.1" 400 5475 "-" "\\\"Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML" ... show less	Web App Attack Exploited Host
🇺🇸 xmission.com	2026-09-13 05:44:31 (1 month ago)	Blocked by UFW (TCP on 32768) Source port: 45474 Packet length: 64 This report (for 240e:0108:4a21: ... show more Blocked by UFW (TCP on 32768) Source port: 45474 Packet length: 64 This report (for 240e:0108:4a21:fffe:0000:0000:0000:0002) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Roderic	2026-09-11 01:39:28 (1 month ago)	Port Scan detected from 240e:108:4a21:fffe::2 (CN/China/-/-/-/[redacted]).	Port Scan
🇺🇸 xmission.com	2026-09-07 18:28:45 (1 month ago)	Blocked by UFW (TCP on 32768) Source port: 47545 Packet length: 64 This report (for 240e:0108:4a21: ... show more Blocked by UFW (TCP on 32768) Source port: 47545 Packet length: 64 This report (for 240e:0108:4a21:fffe:0000:0000:0000:0002) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-04 20:34:02 (1 month ago)	Blocked by UFW (TCP on 111) Source port: 57892 Packet length: 64 This report (for 240e:0108:4a21:ff ... show more Blocked by UFW (TCP on 111) Source port: 57892 Packet length: 64 This report (for 240e:0108:4a21:fffe:0000:0000:0000:0002) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 203.6.235.51

🇮🇩 118.99.69.25

🇮🇳 103.207.9.246

🇨🇭 102.129.143.44

🇳🇱 64.205.72.111

🇻🇳 14.184.38.241

🇭🇰 218.103.120.150

🇺🇸 206.189.207.136

🇺🇸 173.239.214.179

🇺🇸 170.106.190.25

🇺🇸 170.106.73.254

🇵🇰 118.107.139.224

🇲🇦 105.159.218.130

🇩🇪 103.244.227.48

🇫🇷 91.196.152.245

🇨🇦 85.217.149.6

🇧🇬 78.128.112.30

🇳🇱 77.91.71.25

🇬🇧 45.133.173.122

🇮🇩 43.230.5.42