Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
2604:a940:301:225:0:17:: is an IP address from within our whitelist belonging to the subnet
2604:a940:301:225::/64,
which we identify as "Cortex Xpanse".
This IP address has been reported a total of
508
times from
13 distinct
sources.
2604:a940:301:225:0:17:: was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 152
reports;
Germany
with 50
reports;
Switzerland
with 1
report.
The most common categories in these recent reports were:
Port Scan
186
times;
Brute-Force
50
times;
Web App Attack
10
times;
Hacking
2
times;
Email Spam
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 8022)
Source port: 53114
Packet length: 60
This report (for 2604:a940:0301:0 ...
show moreBlocked by UFW (TCP on 8022)
Source port: 53114
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 8080)
Source port: 53191
Packet length: 60
This report (for 2604:a940:0301:0 ...
show moreBlocked by UFW (TCP on 8080)
Source port: 53191
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 20256)
Source port: 57257
Packet length: 60
This report (for 2604:a940:0301: ...
show moreBlocked by UFW (TCP on 20256)
Source port: 57257
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 8080)
Source port: 54601
Packet length: 60
This report (for 2604:a940:0301:0 ...
show moreBlocked by UFW (TCP on 8080)
Source port: 54601
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 44344)
Source port: 49156
Packet length: 60
This report (for 2604:a940:0301: ...
show moreBlocked by UFW (TCP on 44344)
Source port: 49156
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 4343)
Source port: 52371
Packet length: 60
This report (for 2604:a940:0301:0 ...
show moreBlocked by UFW (TCP on 4343)
Source port: 52371
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 11553)
Source port: 51865
Packet length: 60
This report (for 2604:a940:0301: ...
show moreBlocked by UFW (TCP on 11553)
Source port: 51865
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 2496)
Source port: 57290
Packet length: 60
This report (for 2604:a940:0301:0 ...
show moreBlocked by UFW (TCP on 2496)
Source port: 57290
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
SMTP Bruteforce. 2026-10-10T07:56:21.881641+02:00 *.* postfix/submission/smtpd[3933533]: improper co ...
show moreSMTP Bruteforce. 2026-10-10T07:56:21.881641+02:00 *.* postfix/submission/smtpd[3933533]: improper command pipelining after CONNECT from unknown[2604:a940:301:225:0:17::]: GET / HTTP/1.1rnHost: [2a01:4f8:191:9019::2]:587rnUser-Agent: Hello from Palo Alto Networks, find ou
show less
Blocked by UFW (TCP on 20256)
Source port: 53925
Packet length: 60
This report (for 2604:a940:0301: ...
show moreBlocked by UFW (TCP on 20256)
Source port: 53925
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 2525)
Source port: 54288
Packet length: 60
This report (for 2604:a940:0301:0 ...
show moreBlocked by UFW (TCP on 2525)
Source port: 54288
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 28080)
Source port: 55941
Packet length: 60
This report (for 2604:a940:0301: ...
show moreBlocked by UFW (TCP on 28080)
Source port: 55941
Packet length: 60
This report (for 2604:a940:0301:0225:0000:0017:0000:0000) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
