JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2620:96:a004::239

2620:96:a004::239 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 54%: ?

54%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Internet Measurement Research
Usage Type	University/College/School
ASN	AS399628
Domain Name	internetmeasurementresearch.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2620:96:a004::239

Whois 2620:96:a004::239

IP Abuse Reports for 2620:96:a004::239:

This IP address has been reported a total of 9 times from 9 distinct sources. 2620:96:a004::239 was first reported on June 26th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 centurion	2026-06-27 01:11:14 (4 days ago)	Unauthorized attempt on coresecret [1883/tcp] Source port: 42671 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [1883/tcp] Source port: 42671 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-06-27 01:11:14 (4 days ago)	Connection atttempts against closed TCP ports Jun 27 03:11:12 BLOCK SRC=2620:0096:a004:0000:0000:000 ... show more Connection atttempts against closed TCP ports Jun 27 03:11:12 BLOCK SRC=2620:0096:a004:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=2404 WINDOW=1024 RES=0x00 SYN Jun 27 03:11:13 BLOCK SRC=2620:0096:a004:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=5006 WINDOW=1024 RES=0x00 SYN Jun 27 03:11:14 BLOCK SRC=2620:0096:a004:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=55565 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇩🇪 gnb	2026-06-27 01:11:13 (4 days ago)	2026-06-27T03:11:12.442344+02:00 atlas kernel: [48361321.319232] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ... show more 2026-06-27T03:11:12.442344+02:00 atlas kernel: [48361321.319232] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=18519 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-27T03:11:12.859660+02:00 atlas kernel: [48361321.739935] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=18507 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-27T03:11:13.360804+02:00 atlas kernel: [48361322.241072] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=1332 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Quarks Solutions	2026-06-27 00:57:30 (4 days ago)	crowdsecurity/iptables-scan-multi_ports	Port Scan
🇩🇪 Admins@Storch	2026-06-27 00:25:04 (4 days ago)	Blocked by OPNsese; 59 hits, proto=tcp, ports=10001,102,1025,1026,1089,1090,1091,11740,1200,1217,123 ... show more Blocked by OPNsese; 59 hits, proto=tcp, ports=10001,102,1025,1026,1089,1090,1091,11740,1200,1217,12345,133 show less	Port Scan Hacking
🇧🇷 marlorodrigues	2026-06-26 23:43:39 (4 days ago)	Brute Force SSH or Port Scan	Port Scan
🇬🇧 pearbright	2026-06-26 23:42:11 (4 days ago)	2026-06-26T23:37:51.956646+00:00 srv1093252 kernel: [3263052.538570] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-06-26T23:37:51.956646+00:00 srv1093252 kernel: [3263052.538570] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=2a02:4780:000f:1358:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=57064 DPT=55553 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T23:38:38.450312+00:00 srv1093252 kernel: [3263099.032023] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=2a02:4780:000f:1358:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=57064 DPT=4712 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T23:38:41.555468+00:00 srv1093252 kernel: [3263102.137174] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=2a02:4780:000f:1358:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=57064 DPT=502 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T23:38:56.72617 ... show less	Port Scan
🇳🇱 Erik	2026-06-26 21:49:58 (4 days ago)	Port Scan detected from 2620:96:a004::239 (US/United States/-/-/-). 11 hits in the last 211 second ... show more Port Scan detected from 2620:96:a004::239 (US/United States/-/-/-). 11 hits in the last 211 seconds show less	Web App Attack Port Scan
Anonymous	2026-06-26 21:28:12 (4 days ago)	Port Scan detected from 2620:96:a004::239 (Unknown). 16 hits in the last 80 seconds	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 63.33.203.100

🇳🇱 45.156.87.204

🇨🇳 101.67.139.74

🇸🇬 97.74.87.152

🇺🇸 66.94.100.232

🇮🇳 27.123.113.10

🇧🇷 200.219.200.16

🇺🇸 192.169.201.223

🇺🇸 162.216.149.170

🇨🇳 116.179.32.160

🇨🇳 116.179.32.148

🇳🇱 45.148.10.183

🇺🇸 43.162.124.208

🇬🇧 2a06:4880:c000::df

🇨🇭 195.176.3.23

🇸🇾 185.225.41.144

🇮🇹 185.15.171.114

🇧🇷 177.54.207.23

🇺🇸 136.107.182.221

🇨🇳 113.142.72.27