This IP was reported 56 times. Confidence of
Abuse
is 41%: ?
41%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
56
times from
31 distinct
sources.
240e:659:500:26:1::1 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-20T18:53:19.598656+08:00 Galaxy postfix/smtpd[684624]: improper command pipelining after CON ...
show more2026-06-20T18:53:19.598656+08:00 Galaxy postfix/smtpd[684624]: improper command pipelining after CONNECT from unknown[240e:659:500:26:1::1]: EHLO\r\n
2026-06-20T18:53:19.852046+08:00 Galaxy postfix/smtpd[684624]: lost connection after EHLO from unknown[240e:659:500:26:1::1]
2026-06-20T18:53:22.384115+08:00 Galaxy postfix/smtpd[684624]: lost connection after CONNECT from unknown[240e:659:500:26:1::1]
...
show less
Blocked by UFW (TCP on 32768)
Source port: 42930
Packet length: 64
This report (for 240e:0659:0500: ...
show moreBlocked by UFW (TCP on 32768)
Source port: 42930
Packet length: 64
This report (for 240e:0659:0500:0026:0001:0000:0000:0001) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-06-12T00:48:16.772767+02:00 mx1 postfix/submission/smtpd[2424115]: improper command pipelining ...
show more2026-06-12T00:48:16.772767+02:00 mx1 postfix/submission/smtpd[2424115]: improper command pipelining after CONNECT from unknown[240e:659:500:26:1::1]: EHLO
2026-06-12T00:48:17.357972+02:00 mx1 postfix/submission/smtpd[2424115]: improper command pipelining after CONNECT from unknown[240e:659:500:26:1::1]: HELP
2026-06-12T00:48:17.950184+02:00 mx1 postfix/submission/smtpd[2424115]: improper command pipelining after CONNECT from unknown[240e:659:500:26:1::1]: GET / HTTP/1.0
show less
Blocked by UFW (TCP on 32768)
Source port: 61354
Packet length: 64
This report (for 240e:0659:0500: ...
show moreBlocked by UFW (TCP on 32768)
Source port: 61354
Packet length: 64
This report (for 240e:0659:0500:0026:0001:0000:0000:0001) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Gets ban for 4h for triggering crowdsecurity/postfix-spam at root1.
Web App Attack
Anonymous
2026-05-28T16:59:41.299811+02:00 host postfix/smtpd[1789038]: lost connection after CONNECT from unk ...
show more2026-05-28T16:59:41.299811+02:00 host postfix/smtpd[1789038]: lost connection after CONNECT from unknown[240e:659:500:26:1::1]
2026-05-28T16:59:41.302249+02:00 host postfix/smtpd[1789037]: lost connection after CONNECT from unknown[240e:659:500:26:1::1]
2026-05-28T17:02:34.613639+02:00 host postfix/smtpd[1789749]: lost connection after CONNECT from unknown[240e:659:500:26:1::1]
...
show less
Blocked by UFW (TCP on 587)
Source port: 34351
Packet length: 64
This report (for 240e:0659:0500:00 ...
show moreBlocked by UFW (TCP on 587)
Source port: 34351
Packet length: 64
This report (for 240e:0659:0500:0026:0001:0000:0000:0001) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-04-24T15:51:38.173521+00:00 server dovecot: imap-login: Disconnected: Connection closed (no aut ...
show more2026-04-24T15:51:38.173521+00:00 server dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=, rip=240e:659:500:26:1::1, lip=X.X.X.X session=
show less