240e:659:320:1:2::100
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
- ISP
- CHINANET BACKBONE
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.com.cn
- Country
- 🇨🇳 China
- City
- Xi'an, Shaanxi
Abuse Reports
Total reports
70 from
47 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 NXO WAN |
SMTP unauthorized access
|
Port Scan Brute-Force | |
| Anonymous |
240e:659:320:1:2::100 - - [08/Nov/2026:08:40:45 +0000] "\x16\x03\x01\x02" 400 432 "-" "-"
...
|
Bad Web Bot Web App Attack | |
| 🇩🇰 powerhostingdk |
[mailserver] CrowdSec detected crowdsecurity/postfix-non-smtp-command (1 events). Automated abuse report.
|
Brute-Force | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.
|
Bad Web Bot Web App Attack | |
| Anonymous |
B: f2b postfix aggressive 3x
|
Email Spam | |
| Anonymous |
Port Scan
|
Port Scan | |
| Anonymous |
Unauthorized connection to openVPN port 1194
|
Port Scan | |
| Anonymous |
Unauthorized connection to SIP port 5060
|
Fraud VoIP Port Scan | |
| 🇩🇪 VentryShield |
p0t honeypot: unknown connection on port 32768/tcp, 88 bytes received from client
|
Port Scan | |
| 🇨🇭 SOC [GOLINE SA] |
|
Port Scan Hacking Bad Web Bot | |
| 🇳🇱 SysAdmin Dylan |
*Port Scan* detected from 240e:659:320:1:2::100 (Unknown). 11 hits in the last 71 seconds
|
Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 32768)
Source port: 49973
Packet length: 64
This report (for 240e:0659:0320:0001:0002:0000:0000:0100) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
This IP was detected by CrowdSec triggering crowdsecurity/iptables-scan-multi_ports
|
Port Scan | |
| 🇧🇷 Padawan |
Unauthorized request on port 22 or 53
|
Brute-Force | |
| 🇫🇷 matthieul.dev |
Blocked by os-abuseipdb; 194 hits, proto=tcp,udp, ports=1000,10000,1025,1026,1027,1041,110,111,1110,113,119,13,135,1
|
Port Scan Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown