JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 240e:398:1e0f:6:1::101

240e:398:1e0f:6:1::101 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 21%: ?

21%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Chinatelecom IPv6 address for fixed broadband
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 240e:398:1e0f:6:1::101

Whois 240e:398:1e0f:6:1::101

IP Abuse Reports for 240e:398:1e0f:6:1::101:

This IP address has been reported a total of 48 times from 35 distinct sources. 240e:398:1e0f:6:1::101 was first reported on May 23rd 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 Starburst SysOp Team	2026-06-19 23:48:48 (5 days ago)	Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-sin2-2)	Hacking
🇩🇪 R.G.	2026-06-18 05:57:22 (1 week ago)	Port Scan detected from 240e:398:1e0f:6:1::101 (Unknown). 11 hits in the last 106 seconds; Ports: ... show more Port Scan detected from 240e:398:1e0f:6:1::101 (Unknown). 11 hits in the last 106 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 18 07:57:05 kernel: Firewall: UDP6IN Blocked* IN=enp5s0 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xxdd SRC=240e:0398:1e0f:0006:0001:0000 show less	Port Scan
🇨🇦 AwesomeSheep48	2026-05-15 05:59:07 (1 month ago)	2026-05-15T01:59:07.170463-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5: ... show more 2026-05-15T01:59:07.170463-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0398:1e0f:0006:0001:0000:0000:0101 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=40247 DPT=993 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-15T01:59:07.171061-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0398:1e0f:0006:0001:0000:0000:0101 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=40247 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-15T01:59:07.182745-04:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0398:1e0f:0006:0001:0000:0000:0101 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=40247 DPT=5900 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-15T01:59:07.183446-04:00 awesomesheep48 kernel: [UFW BLOC ... show less	Port Scan
🇩🇪 MarkGGN	2026-05-09 13:16:14 (1 month ago)	SMTP Bruteforce. 2026-05-09T15:16:12.694459+02:00 . postfix/submission/smtpd[2516842]: improper co ... show more SMTP Bruteforce. 2026-05-09T15:16:12.694459+02:00 . postfix/submission/smtpd[2516842]: improper command pipelining after CONNECT from unknown[240e:398:1e0f:6:1::101]: EHLOrn 2026-05-09T15:16:13.413275+02:00 . postfix/submission/smtpd[2516842]: improper command pipelining after CONNECT from unknown[240e:398:1e0f:6:1::101]: HELPrn show less	Brute-Force
🇺🇸 Starburst SysOp Team	2026-04-23 17:32:18 (2 months ago)	Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-stl2-17)	Hacking
🇺🇸 xmission.com	2026-04-20 06:05:18 (2 months ago)	Blocked by UFW (TCP on 143) Source port: 44761 Packet length: 64 This report (for 240e:0398:1e0f:00 ... show more Blocked by UFW (TCP on 143) Source port: 44761 Packet length: 64 This report (for 240e:0398:1e0f:0006:0001:0000:0000:0101) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 geot	2026-04-12 12:02:26 (2 months ago)	GET /evox/about HTTP/1.1 POST /sdk HTTP/1.1 GET /HNAP1 HTTP/1.1 GET /nmaplowercheck17<<removed>> HTT ... show more GET /evox/about HTTP/1.1 POST /sdk HTTP/1.1 GET /HNAP1 HTTP/1.1 GET /nmaplowercheck17<<removed>> HTTP/1.1 show less	Web App Attack
🇺🇸 xmission.com	2026-03-28 12:40:28 (2 months ago)	Blocked by UFW (TCP on 8888) Source port: 51842 Packet length: 64 This report (for 240e:0398:1e0f:0 ... show more Blocked by UFW (TCP on 8888) Source port: 51842 Packet length: 64 This report (for 240e:0398:1e0f:0006:0001:0000:0000:0101) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 final	2026-03-26 13:27:58 (2 months ago)	Mar 26 14:27:41 xxxxx postfix/smtpd[45583]: lost connection after CONNECT from unknown[240e:398:1e0f ... show more Mar 26 14:27:41 xxxxx postfix/smtpd[45583]: lost connection after CONNECT from unknown[240e:398:1e0f:6:1::101] Mar 26 14:27:41 xxxxx postfix/submission/smtpd[45588]: lost connection after CONNECT from unknown[240e:398:1e0f:6:1::101] Mar 26 14:27:57 xxxxx postfix/smtpd[45583]: lost connection after CONNECT from unknown[240e:398:1e0f:6:1::101] Mar 26 14:27:58 xxxxx postfix/submission/smtpd[45588]: lost connection after CONNECT from unknown[240e:398:1e0f:6:1::101] show less	Email Spam Phishing Spoofing
🇳🇱 Hobby Bob	2026-03-20 00:52:41 (3 months ago)	Mar 20 00:52:41 server dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 s ... show more Mar 20 00:52:41 server dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=240e:398:1e0f:6:1::101, lip=X.X.X.X session= show less	Port Scan Hacking
🇨🇦 AwesomeSheep48	2026-02-27 13:55:05 (3 months ago)	2026-02-27T08:55:04.349567-05:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5: ... show more 2026-02-27T08:55:04.349567-05:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0398:1e0f:0006:0001:0000:0000:0101 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=108 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=UDP SPT=53489 DPT=1701 LEN=68 2026-02-27T08:55:04.356807-05:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0398:1e0f:0006:0001:0000:0000:0101 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=277 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=UDP SPT=53489 DPT=5060 LEN=237 2026-02-27T08:55:04.356822-05:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e:0398:1e0f:0006:0001:0000:0000:0101 DST=2607:5300:0205:0200:0000:0000:0000:3b67 LEN=79 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=UDP SPT=53489 DPT=5060 LEN=39 2026-02-27T08:55:04.360596-05:00 awesomesheep48 kernel: [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:bd:c5:2d:d2:ef:9f:9d:dc:3d:86:dd SRC=240e: ... show less	Port Scan
🇩🇪 london2038.com	2026-02-20 22:43:50 (4 months ago)	Connection atttempts against closed TCP ports Feb 20 23:43:49 BLOCK SRC=240e:0398:1e0f:0006:0001:000 ... show more Connection atttempts against closed TCP ports Feb 20 23:43:49 BLOCK SRC=240e:0398:1e0f:0006:0001:0000:0000:0101 LEN=64 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=57521 DPT=5900 WINDOW=1024 RES=0x00 SYN Feb 20 23:43:49 BLOCK SRC=240e:0398:1e0f:0006:0001:0000:0000:0101 LEN=64 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=57521 DPT=110 WINDOW=1024 RES=0x00 SYN Feb 20 23:43:49 BLOCK SRC=240e:0398:1e0f:0006:0001:0000:0000:0101 LEN=64 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=57521 DPT=995 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇺🇸 Starburst SysOp Team	2026-02-16 06:11:50 (4 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-13)	Hacking Bad Web Bot
🇳🇱 SysAdmin Dylan	2026-02-13 20:14:34 (4 months ago)	Port Scan detected from 240e:398:1e0f:6:1::101 (Unknown). 11 hits in the last 15 seconds; Ports: * ... show more Port Scan detected from 240e:398:1e0f:6:1::101 (Unknown). 11 hits in the last 15 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Feb 13 21:14:12 kernel: Firewall: UDP6IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xxdd SRC=240e:0398:1e0f:0006:0001:0000:0 show less	Port Scan
🇳🇱 marzzzello	2026-02-08 14:04:00 (4 months ago)	Ports: multiple (397), 764 attempts	Port Scan

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.15

🇨🇳 202.120.37.109

🇧🇪 198.235.24.239

🇺🇸 195.184.76.168

🇳🇱 193.176.31.201

🇧🇷 186.195.16.41

🇫🇷 185.182.186.243

🇺🇸 173.255.221.189

🇺🇸 162.216.149.187

🇷🇺 92.53.96.150

🇺🇸 64.62.156.40

🇨🇳 61.136.142.13

🇨🇦 52.138.3.29

🇮🇳 182.95.103.74

🇩🇪 178.27.90.142

🇭🇰 165.154.43.179

🇫🇮 147.185.133.120

🇺🇸 147.185.132.153

🇨🇱 136.248.242.166

🇮🇳 117.216.69.195