JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 240e:46:2800:6:1::100

240e:46:2800:6:1::100 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 36%: ?

36%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Asia Pacific Network Information Centre
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	apnic.net
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 240e:46:2800:6:1::100

Whois 240e:46:2800:6:1::100

IP Abuse Reports for 240e:46:2800:6:1::100:

This IP address has been reported a total of 60 times from 38 distinct sources. 240e:46:2800:6:1::100 was first reported on November 13th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 lirion	2026-06-19 19:44:58 (5 days ago)	2026-06-19T21:44:51.421276+02:00 rserver.lirion.de postfix/smtpd[4028981]: improper command pipelini ... show more 2026-06-19T21:44:51.421276+02:00 rserver.lirion.de postfix/smtpd[4028981]: improper command pipelining after CONNECT from unknown[240e:46:2800:6:1::100]: EHLO\r\n 2026-06-19T21:44:51.813393+02:00 rserver.lirion.de postfix/smtpd[4028981]: improper command pipelining after CONNECT from unknown[240e:46:2800:6:1::100]: HELP\r\n 2026-06-19T21:44:52.204390+02:00 rserver.lirion.de postfix/smtpd[4028981]: improper command pipelining after CONNECT from unknown[240e:46:2800:6:1::100]: \r\n\r\n 2026-06-19T21:44:52.674080+02:00 rserver.lirion.de postfix/smtpd[4028981]: improper command pipelining after CONNECT from unknown[240e:46:2800:6:1::100]: GET / HTTP/1.0\r\n\r\n ... show less	Email Spam Brute-Force
🇺🇸 Starburst SysOp Team	2026-06-13 00:45:53 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-14)	Hacking Bad Web Bot
🇺🇸 ersei.net	2026-06-07 22:40:02 (2 weeks ago)	Brute force multiple 403s	Brute-Force
🇳🇱 SysAdmin Dylan	2026-06-04 08:04:18 (3 weeks ago)	Port Scan detected from 240e:46:2800:6:1::100 (Unknown). 11 hits in the last 140 seconds	Brute-Force
🇵🇱 nfsec.pl	2026-06-04 07:52:41 (3 weeks ago)	2026-06-04T07:52:40.792216+00:00 stardust postfix/smtpd[1344901]: improper command pipelining after ... show more 2026-06-04T07:52:40.792216+00:00 stardust postfix/smtpd[1344901]: improper command pipelining after CONNECT from unknown[240e:46:2800:6:1::100]: HELP\r\n ... show less	Email Spam Open Proxy
🇩🇪 samba.org	2026-05-22 15:02:15 (1 month ago)	spam (f2b h2)	Brute-Force
🇩🇪 Viveronese	2026-05-15 17:25:20 (1 month ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 ksol-hostmaster	2026-05-14 05:55:53 (1 month ago)	May 14 07:55:46 ksol dovecot[58127]: imap-login: Disconnected: Connection closed (no auth attempts i ... show more May 14 07:55:46 ksol dovecot[58127]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=240e:46:2800:6:1::100, lip=2a01:4f8:2200:30c2::22, session=<1hFfv8BRTIAkDgBGKAAABgABAAAAAAEA> May 14 07:55:47 ksol dovecot[58127]: pop3-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=240e:46:2800:6:1::100, lip=2a01:4f8:2200:30c2::22, session=<eSxsv8BRNJIkDgBGKAAABgABAAAAAAEA> May 14 07:55:52 ksol dovecot[58127]: pop3-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=240e:46:2800:6:1::100, lip=2a01:4f8:2200:30c2::22, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<t8S3v8BRFqQkDgBGKAAABgABAAAAAAEA> May 14 07:55:52 ksol dovecot[58127]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=240e ... show less	Brute-Force
Anonymous	2026-05-14 05:30:39 (1 month ago)	2026-05-14 07:30:38.084 [49117] no host name found for IP address 240e:46:2800:6:1::100 2026-05-14 0 ... show more 2026-05-14 07:30:38.084 [49117] no host name found for IP address 240e:46:2800:6:1::100 2026-05-14 07:30:38.085 [49118] no host name found for IP address 240e:46:2800:6:1::100 2026-05-14 07:30:38.441 [49116] no host name found for IP address 240e:46:2800:6:1::100 ... show less	Email Spam
🇳🇱 Roderic	2026-05-08 13:15:22 (1 month ago)	Port Scan detected from 240e:46:2800:6:1::100 (CN/China/-/-/-/[redacted]).	Port Scan
🇮🇳 Starburst SysOp Team	2026-04-23 21:57:34 (2 months ago)	Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-bom2-2)	Hacking
🇩🇪 london2038.com	2026-04-23 11:17:30 (2 months ago)	Unsolicited connect to 2222/TCP 2026-04-23 13:17:24.362621035 +0200 CEST, [240e:46:2800:6:1::100]:44 ... show more Unsolicited connect to 2222/TCP 2026-04-23 13:17:24.362621035 +0200 CEST, [240e:46:2800:6:1::100]:44234, closing 2026-04-23 13:17:29.601058874 +0200 CEST, [240e:46:2800:6:1::100]:45328, closing show less	Port Scan SSH
🇳🇱 Roderic	2026-04-23 10:16:37 (2 months ago)	Port Scan detected from 240e:46:2800:6:1::100 (CN/China/-/-/-/[redacted]).	Port Scan
🇦🇺 aranguren.org	2026-04-04 13:38:55 (2 months ago)	240e:46:2800:6:1::100 - - [05/Apr/2026:00:38:52 +1100] "GET /nmaplowercheck1775309930 HTTP/1.1" 400 ... show more 240e:46:2800:6:1::100 - - [05/Apr/2026:00:38:52 +1100] "GET /nmaplowercheck1775309930 HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:46:2800:6:1::100 - - [05/Apr/2026:00:38:52 +1100] "POST /sdk HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:46:2800:6:1::100 - - [05/Apr/2026:00:38:53 +1100] "HEAD / HTTP/1.1" 400 - "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:46:2800:6:1::100 - - [05/Apr/2026:00:38:54 +1100] "GET /evox/about HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240e:46:2800:6:1::100 - - [05/Apr/2026:00:38:54 +1100] "GET /HNAP1 HTTP/1.1" 400 918 "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36" 240 ... show less	Bad Web Bot
Anonymous	2026-04-04 05:44:35 (2 months ago)		DNS Compromise DDoS Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 212.108.107.87

🇬🇧 188.240.59.56

🇳🇱 173.194.170.114

🇺🇸 104.248.4.150

🇮🇪 52.178.175.225

🇫🇷 51.178.114.78

🇸🇦 37.56.29.134

🇺🇸 216.226.77.30

🇨🇳 123.246.110.25

🇫🇷 91.231.89.170

🇺🇸 69.49.246.176

🇨🇦 54.39.136.50

🇺🇸 45.146.55.247

🇨🇳 112.96.235.245

🇸🇬 103.250.11.176

🇳🇱 91.92.40.240

🇺🇸 34.186.63.89

🇮🇩 34.50.91.115

🇻🇳 27.79.46.181

🇺🇸 20.169.104.255