JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 240e:58:5001:6:2::100

240e:58:5001:6:2::100 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 32%: ?

32%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Asia Pacific Network Information Centre
Usage Type	Fixed Line ISP
ASN	AS4812
Domain Name	apnic.net
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 240e:58:5001:6:2::100

Whois 240e:58:5001:6:2::100

IP Abuse Reports for 240e:58:5001:6:2::100:

This IP address has been reported a total of 48 times from 37 distinct sources. 240e:58:5001:6:2::100 was first reported on November 2nd 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 SOC [GOLINE SA]	2026-08-22 21:58:37 (1 day ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 240e:58:5001:6:2::100 (IPv6) \| Port: N/A \| Country: China \| ISP: CT-IPv6-Networks \| rDNS: None === TARGET === Host: www.goline.ch \| IP: www.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-08-22 23:58:30 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-08-21 22:38:56 (2 days ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 240e:58:5001:6:2::100 (IPv6) \| Port: N/A \| Country: China \| ISP: CT-IPv6-Networks \| rDNS: None === TARGET === Host: www.goline.ch \| IP: www.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-08-22 00:38:52 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇩🇪 MarkGGN	2026-08-07 23:52:52 (2 weeks ago)	SMTP Bruteforce. 2026-08-08T01:52:50.954800+02:00 . postfix/submission/smtpd[3698339]: improper co ... show more SMTP Bruteforce. 2026-08-08T01:52:50.954800+02:00 . postfix/submission/smtpd[3698339]: improper command pipelining after CONNECT from unknown[240e:58:5001:6:2::100]: EHLOrn 2026-08-08T01:52:51.638082+02:00 . postfix/submission/smtpd[3698339]: improper command pipelining after CONNECT from unknown[240e:58:5001:6:2::100]: HELPrn show less	Brute-Force
🇩🇪 febrian.de	2026-07-31 00:37:28 (3 weeks ago)	Excessive HTTP(S) probing or bad web bot detected by Fail2Ban	Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2026-07-24 20:54:53 (4 weeks ago)	trying to access non-authorized port	Port Scan
🇨🇦 1gz	2026-07-14 06:53:58 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-10 08:51:00 (1 month ago)		DNS Compromise DDoS Attack
🇺🇸 xmission.com	2026-07-07 12:27:29 (1 month ago)	Blocked by UFW (TCP on 32768) Source port: 36113 Packet length: 64 This report (for 240e:0058:5001: ... show more Blocked by UFW (TCP on 32768) Source port: 36113 Packet length: 64 This report (for 240e:0058:5001:0006:0002:0000:0000:0100) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 gomasy	2026-07-03 08:06:49 (1 month ago)	2026-07-03T17:06:48.585426+09:00 ssv01 postfix/submission/smtpd[3794810]: improper command pipelinin ... show more 2026-07-03T17:06:48.585426+09:00 ssv01 postfix/submission/smtpd[3794810]: improper command pipelining after CONNECT from unknown[240e:58:5001:6:2::100]: EHLO\r\n ... show less	Brute-Force
🇩🇪 wsyq	2026-07-02 23:48:41 (1 month ago)	Fail2Ban - \[NGINX\]40x-Forcing to access a restricted resource ...	Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-06-05 02:43:48 (2 months ago)	SASL LOGIN authentication failed	Brute-Force
🇳🇱 celltek	2026-06-04 17:30:03 (2 months ago)	POP or IMAP failed login attempts detected	Brute-Force
🇺🇸 xmission.com	2026-05-31 08:32:15 (2 months ago)	Blocked by UFW (TCP on 32768) Source port: 44799 Packet length: 64 This report (for 240e:0058:5001: ... show more Blocked by UFW (TCP on 32768) Source port: 44799 Packet length: 64 This report (for 240e:0058:5001:0006:0002:0000:0000:0100) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇿 TazzNZ	2026-05-28 14:01:06 (2 months ago)	2026-05-29T02:00:02.996441+12:00 eragon sm-mta[1207330]: 64SDxxPc1207330: [IPv6:240e:58:5001:6:2:0:0 ... show more 2026-05-29T02:00:02.996441+12:00 eragon sm-mta[1207330]: 64SDxxPc1207330: [IPv6:240e:58:5001:6:2:0:0:100] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTASSL 2026-05-29T02:00:06.585884+12:00 eragon sm-mta[1207392]: 64SE04oF1207392: [IPv6:240e:58:5001:6:2:0:0:100] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTASSL 2026-05-29T02:00:30.370605+12:00 eragon sm-mta[1207413]: 64SE0KUb1207413: [IPv6:240e:58:5001:6:2:0:0:100] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTASSL ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-22 21:50:21 (3 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 192.250.235.217

🇬🇧 154.16.44.58

🇩🇪 69.5.169.26

🇺🇸 66.132.172.236

🇷🇴 2.57.122.150

🇦🇷 190.211.135.251

🇨🇦 138.197.164.175

🇫🇷 169.58.152.83

🇨🇳 114.223.72.179

🇺🇸 107.180.88.176

🇮🇷 78.109.200.147

🇺🇸 66.132.186.209

🇸🇬 43.156.115.178

🇨🇦 20.151.128.234

🇷🇴 2.57.121.112

🇦🇺 212.70.23.181

🇺🇸 152.32.207.229

🇸🇬 85.203.23.38

🇲🇩 80.94.251.244

🇳🇱 68.183.4.194