JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 240e:108:4b61:fffe::2

240e:108:4b61:fffe::2 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 31%: ?

31%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Chinatelecom IPv6 address for network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Hengyang, Hunan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 240e:108:4b61:fffe::2

Whois 240e:108:4b61:fffe::2

IP Abuse Reports for 240e:108:4b61:fffe::2:

This IP address has been reported a total of 62 times from 44 distinct sources. 240e:108:4b61:fffe::2 was first reported on June 6th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 SysAdmin Dylan	2026-06-13 04:44:12 (2 days ago)	Port Scan detected from 240e:108:4b61:fffe::2 (Unknown). 11 hits in the last 140 seconds	Brute-Force
🇩🇪 outputblog.de	2026-06-12 12:21:02 (3 days ago)	postfix	Email Spam Port Scan Brute-Force
🇨🇦 Blinker73	2026-05-22 09:17:45 (3 weeks ago)	2026-05-22T05:17 kernel: OUT= SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT ... show more 2026-05-22T05:17 kernel: OUT= SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=39216 DPT=53 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-22T05:17 kernel: OUT= SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=39216 DPT=113 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 HoneyPot-FrPri	2026-05-09 18:04:59 (1 month ago)	240e:108:4b61:fffe::2 - - [09/May/2026:20:04:59 +0200] "GET /nmaplowercheck1778349898 HTTP/1.1" 404 ... show more 240e:108:4b61:fffe::2 - - [09/May/2026:20:04:59 +0200] "GET /nmaplowercheck1778349898 HTTP/1.1" 404 555 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111 ... show less	Bad Web Bot Web App Attack
Anonymous	2026-05-09 11:50:11 (1 month ago)	2026-05-09T13:50:02.849036+02:00 mail.nb6.de postfix/smtpd[23857]: improper command pipelining after ... show more 2026-05-09T13:50:02.849036+02:00 mail.nb6.de postfix/smtpd[23857]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: EHLO\r\n 2026-05-09T13:50:04.386316+02:00 mail.nb6.de postfix/smtpd[23860]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: HELP\r\n 2026-05-09T13:50:04.465389+02:00 mail.nb6.de postfix/smtpd[23857]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: HELP\r\n 2026-05-09T13:50:04.857927+02:00 mail.nb6.de postfix/smtpd[23857]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: GET / HTTP/1.0\r\n\r\n 2026-05-09T13:50:10.000107+02:00 mail.nb6.de postfix/smtpd[23860]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: GET / HTTP/1.0\r\n\r\n ... show less	Brute-Force
🇩🇪 R.G.	2026-05-08 14:09:48 (1 month ago)	Port Scan detected from 240e:108:4b61:fffe::2 (Unknown). 11 hits in the last 195 seconds; Ports: * ... show more Port Scan detected from 240e:108:4b61:fffe::2 (Unknown). 11 hits in the last 195 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 8 16:09:27 kernel: Firewall: TCP6IN Blocked* IN=enp0s31f6 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xxdd SRC=240e:0108:4b61:fffe:0000:0 show less	Port Scan
🇩🇪 london2038.com	2026-04-23 10:11:43 (1 month ago)	Connection atttempts against closed TCP ports Apr 23 12:11:42 BLOCK SRC=240e:0108:4b61:fffe:0000:000 ... show more Connection atttempts against closed TCP ports Apr 23 12:11:42 BLOCK SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=45311 DPT=3306 WINDOW=1024 RES=0x00 SYN Apr 23 12:11:42 BLOCK SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=45311 DPT=3389 WINDOW=1024 RES=0x00 SYN Apr 23 12:11:42 BLOCK SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=45311 DPT=1723 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇧🇷 Padawan	2026-04-23 00:07:40 (1 month ago)	Unauthorized request on port 22 or 53	Brute-Force
🇩🇪 ksol-hostmaster	2026-04-20 10:24:38 (1 month ago)	Apr 20 12:24:31 ksol dovecot[66775]: pop3-login: Disconnected: Connection closed (no auth attempts i ... show more Apr 20 12:24:31 ksol dovecot[66775]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=240e:108:4b61:fffe::2, lip=2a01:4f8:2200:30c2::22, session=<n6pKtOFPds8kDgEIS2H//gAAAAAAAAAC> Apr 20 12:24:32 ksol dovecot[66775]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=240e:108:4b61:fffe::2, lip=2a01:4f8:2200:30c2::22, session=<3MJZtOFPBJEkDgEIS2H//gAAAAAAAAAC> Apr 20 12:24:37 ksol dovecot[66775]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=240e:108:4b61:fffe::2, lip=2a01:4f8:2200:30c2::22, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<oQyjtOFPvpEkDgEIS2H//gAAAAAAAAAC> Apr 20 12:24:37 ksol dovecot[66775]: pop3-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=240e ... show less	Brute-Force
🇩🇪 Richie	2026-04-10 18:09:51 (2 months ago)	[HOST1] Port Scan detected	Port Scan
🇩🇪 Live Home Cams	2026-04-10 15:04:39 (2 months ago)	WebApp brute force attack detected. Multiple file scanning attempts from 240e:108:4b61:fffe::2. Dete ... show more WebApp brute force attack detected. Multiple file scanning attempts from 240e:108:4b61:fffe::2. Detected by fail2ban. show less	Web App Attack Brute-Force
🇨🇦 AwesomeSheep48	2026-04-03 04:40:12 (2 months ago)	2026-04-03T00:40:12.139312-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5: ... show more 2026-04-03T00:40:12.139312-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=42850 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 2026-04-03T00:40:12.147300-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=42850 DPT=135 WINDOW=1024 RES=0x00 SYN URGP=0 2026-04-03T00:40:12.150843-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=42850 DPT=1025 WINDOW=1024 RES=0x00 SYN URGP=0 2026-04-03T00:40:12.152715-04:00 awesomesheep48 kernel: [UFW BLOC ... show less	Port Scan
Anonymous	2026-03-29 05:07:20 (2 months ago)	Port Scan detected from 240e:108:4b61:fffe::2 (CN/China/-).	Port Scan
🇩🇪 Mr-Money	2026-03-27 08:47:09 (2 months ago)	scenario: crowdsecurity/postfix-spam - events: 6	Email Spam
🇩🇪 Admins@FBN	2026-03-24 11:07:52 (2 months ago)	FW-PortScan: Traffic Blocked srcport=61681 dstport=500	Port Scan

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 14.191.68.235

🇺🇸 195.184.76.206

🇫🇮 178.20.210.208

🇮🇳 139.59.36.109

🇨🇳 118.182.166.128

🇰🇷 112.146.177.241

🇮🇳 103.206.129.218

🇺🇸 93.152.208.42

🇵🇱 46.174.73.235

🇳🇱 45.148.10.67

🇸🇬 45.78.202.217

🇺🇸 45.61.187.220

🇩🇪 45.3.42.237

🇺🇸 20.65.194.175

🇨🇳 1.24.16.94

🇺🇸 2001:470:1:fb5::165

🇺🇸 209.112.91.74

🇧🇷 168.181.50.6

🇧🇩 103.153.110.190

🇯🇵 20.243.208.191