JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2607:8500:faca:de::138

2607:8500:faca:de::138 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 2%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Rethem Hosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14987
Domain Name	rethemhosting.net
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2607:8500:faca:de::138

Whois 2607:8500:faca:de::138

IP Abuse Reports for 2607:8500:faca:de::138:

This IP address has been reported a total of 17 times from 9 distinct sources. 2607:8500:faca:de::138 was first reported on November 23rd 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 maviei	2026-06-21 06:18:56 (5 days ago)	2026-06-21T03:18:55.498352-03:00 srv1251771 kernel: [1789563.575833] [UFW BLOCK] IN=eth0 OUT= MAC=40 ... show more 2026-06-21T03:18:55.498352-03:00 srv1251771 kernel: [1789563.575833] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2607:8500:faca:00de:0000:0000:0000:0138 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=51 FLOWLBL=77869 PROTO=TCP SPT=34346 DPT=23 WINDOW=28800 RES=0x00 SYN URGP=0 2026-06-21T03:18:55.500265-03:00 srv1251771 kernel: [1789563.576777] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2607:8500:faca:00de:0000:0000:0000:0138 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=51 FLOWLBL=881285 PROTO=TCP SPT=35080 DPT=143 WINDOW=28800 RES=0x00 SYN URGP=0 2026-06-21T03:18:55.500314-03:00 srv1251771 kernel: [1789563.576986] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2607:8500:faca:00de:0000:0000:0000:0138 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=51 FLOWLBL=722768 PROTO=TCP SPT=45024 DPT=199 WINDOW=28800 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇷 marlorodrigues	2026-03-23 09:19:50 (3 months ago)	Brute Force SSH or Port Scan	Port Scan
🇩🇰 SaltySoftworks	2026-02-23 12:17:59 (4 months ago)	2026-02-23T12:17:58.887246+00:00 postfix/smtpd: lost connection after CONNECT from unknown[2607:850 ... show more 2026-02-23T12:17:58.887246+00:00 postfix/smtpd: lost connection after CONNECT from unknown[2607:8500:faca:de::138] 2026-02-23T12:17:58.967211+00:00 postfix/submission/smtpd: lost connection after CONNECT from unknown[2607:8500:faca:de::138] show less	Email Spam Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 Hobby Bob	2026-02-01 05:40:33 (4 months ago)	Feb 1 05:40:32 server dovecot: pop3-login: Disconnected: Connection closed: read(size=1026) failed: ... show more Feb 1 05:40:32 server dovecot: pop3-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (no auth attempts in 0 secs): user=, rip=2607:8500:faca:de::138, lip=X.X.X.X session= show less	Port Scan Hacking
🇬🇧 pearbright	2025-12-30 22:19:17 (5 months ago)	2025-12-30T22:19:16.084314+00:00 srv740043 kernel: [26387823.528870] [UFW BLOCK] IN=eth0 OUT= MAC=bc ... show more 2025-12-30T22:19:16.084314+00:00 srv740043 kernel: [26387823.528870] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2607:8500:faca:00de:0000:0000:0000:0138 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=50 FLOWLBL=143614 PROTO=TCP SPT=36942 DPT=143 WINDOW=28800 RES=0x00 SYN URGP=0 2025-12-30T22:19:16.095328+00:00 srv740043 kernel: [26387823.528871] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2607:8500:faca:00de:0000:0000:0000:0138 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=50 FLOWLBL=505274 PROTO=TCP SPT=33788 DPT=587 WINDOW=28800 RES=0x00 SYN URGP=0 2025-12-30T22:19:16.095371+00:00 srv740043 kernel: [26387823.528978] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2607:8500:faca:00de:0000:0000:0000:0138 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=50 FLOWLBL=124181 PROTO=TCP SPT=54574 DPT=993 WINDOW=28800 RES=0x00 SYN URGP=0 2025-12-30T22 ... show less	Port Scan
🇹🇭 Sawasdee	2025-01-31 05:11:40 (1 year ago)	Port Scan ...	Port Scan
🇩🇪 ghostwarriors	2025-01-21 21:20:36 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 geddo.in	2025-01-21 20:32:06 (1 year ago)	Jan 21 13:31:48 x-in-g xinetd[539]: START: telnet pid=27528 from=2607:8500:faca:de::138 Jan 21 13:31 ... show more Jan 21 13:31:48 x-in-g xinetd[539]: START: telnet pid=27528 from=2607:8500:faca:de::138 Jan 21 13:31:48 x-in-g xinetd[539]: START: telnet pid=27536 from=2607:8500:faca:de::138 Jan 21 13:31:59 x-in-g xinetd[539]: START: telnet pid=27552 from=2607:8500:faca:de::138 Jan 21 13:32:04 x-in-g xinetd[539]: START: telnet pid=27603 from=2607:8500:faca:de::138 ... show less	Brute-Force
🇩🇪 ghostwarriors	2025-01-19 21:20:10 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 geddo.in	2025-01-19 20:21:58 (1 year ago)	Jan 19 13:21:41 x-in-g xinetd[539]: START: telnet pid=7172 from=2607:8500:faca:de::138 Jan 19 13:21: ... show more Jan 19 13:21:41 x-in-g xinetd[539]: START: telnet pid=7172 from=2607:8500:faca:de::138 Jan 19 13:21:41 x-in-g xinetd[539]: START: telnet pid=7176 from=2607:8500:faca:de::138 Jan 19 13:21:52 x-in-g xinetd[539]: START: telnet pid=7191 from=2607:8500:faca:de::138 Jan 19 13:21:57 x-in-g xinetd[539]: START: telnet pid=7242 from=2607:8500:faca:de::138 ... show less	Brute-Force
🇩🇪 ghostwarriors	2024-12-19 08:20:16 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 geddo.in	2024-12-19 07:22:25 (1 year ago)	Dec 19 00:22:07 x-in-g xinetd[538]: START: telnet pid=45190 from=2607:8500:faca:de::138 Dec 19 00:22 ... show more Dec 19 00:22:07 x-in-g xinetd[538]: START: telnet pid=45190 from=2607:8500:faca:de::138 Dec 19 00:22:07 x-in-g xinetd[538]: START: telnet pid=45199 from=2607:8500:faca:de::138 Dec 19 00:22:18 x-in-g xinetd[538]: START: telnet pid=45215 from=2607:8500:faca:de::138 Dec 19 00:22:23 x-in-g xinetd[538]: START: telnet pid=45266 from=2607:8500:faca:de::138 ... show less	Brute-Force
Anonymous	2024-12-15 00:47:05 (1 year ago)	Scenario: crowdsecurity/http-bad-user-agent	Bad Web Bot
🇩🇪 ghostwarriors	2024-12-14 07:20:21 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 geddo.in	2024-12-14 06:35:35 (1 year ago)	Dec 13 23:35:17 x-in-g xinetd[539]: START: telnet pid=58417 from=2607:8500:faca:de::138 Dec 13 23:35 ... show more Dec 13 23:35:17 x-in-g xinetd[539]: START: telnet pid=58417 from=2607:8500:faca:de::138 Dec 13 23:35:17 x-in-g xinetd[539]: START: telnet pid=58428 from=2607:8500:faca:de::138 Dec 13 23:35:28 x-in-g xinetd[539]: START: telnet pid=58448 from=2607:8500:faca:de::138 Dec 13 23:35:33 x-in-g xinetd[539]: START: telnet pid=58499 from=2607:8500:faca:de::138 ... show less	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.207

🇸🇬 112.199.178.158

🇨🇳 111.26.6.111

🇫🇷 104.23.229.15

🇳🇱 86.54.31.34

🇫🇷 85.217.140.23

🇨🇳 60.12.249.51

🇩🇪 213.209.159.235

🇻🇳 171.244.143.209

🇨🇳 110.42.208.131

🇳🇱 88.210.63.69

🇱🇻 81.30.98.158

🇺🇸 68.194.117.122

🇩🇪 47.245.137.147

🇩🇪 2a01:4f8:202:241::2

🇸🇴 197.220.68.114

🇧🇷 191.240.36.102

🇮🇩 157.20.159.54

🇺🇸 148.153.193.42

🇮🇩 103.131.61.163