JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

240e:108:4b61:fffe::2

Recent Activity IPv6 SLAAC Note

Abuse Confidence Score

47% Elevated

106 reports

61 reporters · latest 6 days ago

ISP: Chinatelecom IPv6 address for network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Changsha, Hunan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

106 from 61 distinct reporters

First reported

June 6th 2024

Most recent report

6 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇳🇱 Netherlands 3 🇨🇭 Switzerland 2

Most common categories Port Scan 9 Bad Web Bot 6 Web App Attack 4 Brute-Force 4 Hacking 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 outputblog.de	2026-06-12 12:21:02 UTC · (4 months ago)	postfix	Email Spam Port Scan Brute-Force
🇨🇦 Blinker73	2026-05-22 09:17:45 UTC · (5 months ago)	2026-05-22T05:17 kernel: OUT= SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=39216 DPT=53 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-22T05:17 kernel: OUT= SRC=240e:0108:4b61:fffe:0000:0000:0000:0 ... show more 2026-05-22T05:17 kernel: OUT= SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=39216 DPT=53 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-22T05:17 kernel: OUT= SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=39216 DPT=113 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 HoneyPot-FrPri	2026-05-09 18:04:59 UTC · (5 months ago)	240e:108:4b61:fffe::2 - - [09/May/2026:20:04:59 +0200] "GET /nmaplowercheck1778349898 HTTP/1.1" 404 555 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111 ...	Bad Web Bot Web App Attack
Anonymous	2026-05-09 11:50:11 UTC · (5 months ago)	2026-05-09T13:50:02.849036+02:00 mail.nb6.de postfix/smtpd[23857]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: EHLO\r\n 2026-05-09T13:50:04.386316+02:00 mail.nb6.de postfix/smtpd[23860]: improper command pipelining ... show more 2026-05-09T13:50:02.849036+02:00 mail.nb6.de postfix/smtpd[23857]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: EHLO\r\n 2026-05-09T13:50:04.386316+02:00 mail.nb6.de postfix/smtpd[23860]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: HELP\r\n 2026-05-09T13:50:04.465389+02:00 mail.nb6.de postfix/smtpd[23857]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: HELP\r\n 2026-05-09T13:50:04.857927+02:00 mail.nb6.de postfix/smtpd[23857]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: GET / HTTP/1.0\r\n\r\n 2026-05-09T13:50:10.000107+02:00 mail.nb6.de postfix/smtpd[23860]: improper command pipelining after CONNECT from unknown[240e:108:4b61:fffe::2]: GET / HTTP/1.0\r\n\r\n ... show less	Brute-Force
🇩🇪 R.G.	2026-05-08 14:09:48 UTC · (5 months ago)	Port Scan detected from 240e:108:4b61:fffe::2 (Unknown). 11 hits in the last 195 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 8 16:09:27 kernel: Firewall: TCP6IN Blocked* IN=enp0s31f6 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx ... show more Port Scan detected from 240e:108:4b61:fffe::2 (Unknown). 11 hits in the last 195 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 8 16:09:27 kernel: Firewall: TCP6IN Blocked* IN=enp0s31f6 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xxdd SRC=240e:0108:4b61:fffe:0000:0 show less	Port Scan
🇩🇪 london2038.com	2026-04-23 10:11:43 UTC · (6 months ago)	Connection atttempts against closed TCP ports Apr 23 12:11:42 BLOCK SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=45311 DPT=3306 WINDOW=1024 RES=0x00 SYN Apr 23 12:11:42 BLOCK SRC=240e:0108:4b61:fffe:00 ... show more Connection atttempts against closed TCP ports Apr 23 12:11:42 BLOCK SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=45311 DPT=3306 WINDOW=1024 RES=0x00 SYN Apr 23 12:11:42 BLOCK SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=45311 DPT=3389 WINDOW=1024 RES=0x00 SYN Apr 23 12:11:42 BLOCK SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 LEN=64 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=45311 DPT=1723 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇧🇷 Padawan	2026-04-23 00:07:40 UTC · (6 months ago)	Unauthorized request on port 22 or 53	Brute-Force
🇩🇪 ksol-hostmaster	2026-04-20 10:24:38 UTC · (6 months ago)	Apr 20 12:24:31 ksol dovecot[66775]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=240e:108:4b61:fffe::2, lip=2a01:4f8:2200:30c2::22, session=<n6pKtOFPds8kDgEIS2H//gAAAAAAAAAC> Apr 20 12:24:32 ksol dovecot[667 ... show more Apr 20 12:24:31 ksol dovecot[66775]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=240e:108:4b61:fffe::2, lip=2a01:4f8:2200:30c2::22, session=<n6pKtOFPds8kDgEIS2H//gAAAAAAAAAC> Apr 20 12:24:32 ksol dovecot[66775]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=240e:108:4b61:fffe::2, lip=2a01:4f8:2200:30c2::22, session=<3MJZtOFPBJEkDgEIS2H//gAAAAAAAAAC> Apr 20 12:24:37 ksol dovecot[66775]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=240e:108:4b61:fffe::2, lip=2a01:4f8:2200:30c2::22, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<oQyjtOFPvpEkDgEIS2H//gAAAAAAAAAC> Apr 20 12:24:37 ksol dovecot[66775]: pop3-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=240e ... show less	Brute-Force
🇩🇪 Richie	2026-04-10 18:09:51 UTC · (6 months ago)	[HOST1] Port Scan detected	Port Scan
🇩🇪 Live Home Cams	2026-04-10 15:04:39 UTC · (6 months ago)	WebApp brute force attack detected. Multiple file scanning attempts from 240e:108:4b61:fffe::2. Detected by fail2ban.	Web App Attack Brute-Force
🇨🇦 AwesomeSheep48	2026-04-03 04:40:12 UTC · (7 months ago)	2026-04-03T00:40:12.139312-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 ... show more 2026-04-03T00:40:12.139312-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=42850 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 2026-04-03T00:40:12.147300-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=42850 DPT=135 WINDOW=1024 RES=0x00 SYN URGP=0 2026-04-03T00:40:12.150843-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0108:4b61:fffe:0000:0000:0000:0002 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=42850 DPT=1025 WINDOW=1024 RES=0x00 SYN URGP=0 2026-04-03T00:40:12.152715-04:00 awesomesheep48 kernel: [UFW BLOC ... show less	Port Scan
Anonymous	2026-03-29 05:07:20 UTC · (7 months ago)	Port Scan detected from 240e:108:4b61:fffe::2 (CN/China/-).	Port Scan
🇩🇪 Mr-Money	2026-03-27 08:47:09 UTC · (7 months ago)	scenario: crowdsecurity/postfix-spam - events: 6	Email Spam
🇩🇪 Admins@FBN	2026-03-24 11:07:52 UTC · (7 months ago)	FW-PortScan: Traffic Blocked srcport=61681 dstport=500	Port Scan
🇺🇸 xmission.com	2026-03-22 02:42:27 UTC · (7 months ago)	Blocked by UFW (TCP on 3389) Source port: 56568 Packet length: 64 This report (for 240e:0108:4b61:fffe:0000:0000:0000:0002) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Hacking Brute-Force

Showing 46 to 60 of 106 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 185.77.223.148

🇦🇷 181.99.151.104

🇨🇦 85.217.149.74

🇬🇧 35.203.211.92

🇩🇪 31.76.32.38

🇬🇧 213.166.84.54

🇺🇸 199.165.159.65

🇺🇸 194.104.11.102

🇩🇪 194.88.98.93

🇺🇸 162.216.150.150

🇺🇸 158.101.21.209

🇺🇸 150.107.38.251

🇨🇳 125.124.226.217

🇺🇸 98.225.180.63

🇷🇴 92.118.39.77

🇺🇸 89.117.45.148

🇺🇸 50.234.108.8

🇧🇪 35.189.223.103

🇵🇰 202.69.59.164

🇱🇻 196.196.53.91