JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2620:96:a004::239

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

9 reports

9 reporters · latest 2 months ago

ISP	Internet Measurement Research
Usage Type	University/College/School
ASN	AS399628
Domain Name	internetmeasurementresearch.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2620:96:a004::239 has been reported 9 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2620:96:a004::239

This IP address has been reported a total of 9 times from 9 distinct sources. 2620:96:a004::239 was first reported on June 26th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 centurion	2026-06-27 01:11:14 (2 months ago)	Unauthorized attempt on coresecret [1883/tcp] Source port: 42671 TTL: null Packet length: 60 TOS: nu ... show more Unauthorized attempt on coresecret [1883/tcp] Source port: 42671 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-06-27 01:11:14 (2 months ago)	Connection atttempts against closed TCP ports Jun 27 03:11:12 BLOCK SRC=2620:0096:a004:0000:0000:000 ... show more Connection atttempts against closed TCP ports Jun 27 03:11:12 BLOCK SRC=2620:0096:a004:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=2404 WINDOW=1024 RES=0x00 SYN Jun 27 03:11:13 BLOCK SRC=2620:0096:a004:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=5006 WINDOW=1024 RES=0x00 SYN Jun 27 03:11:14 BLOCK SRC=2620:0096:a004:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=55565 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇩🇪 gnb	2026-06-27 01:11:13 (2 months ago)	2026-06-27T03:11:12.442344+02:00 atlas kernel: [48361321.319232] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ... show more 2026-06-27T03:11:12.442344+02:00 atlas kernel: [48361321.319232] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=18519 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-27T03:11:12.859660+02:00 atlas kernel: [48361321.739935] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=18507 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-27T03:11:13.360804+02:00 atlas kernel: [48361322.241072] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42671 DPT=1332 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Quarks Solutions	2026-06-27 00:57:30 (2 months ago)	crowdsecurity/iptables-scan-multi_ports	Port Scan
🇩🇪 Admins@Storch	2026-06-27 00:25:04 (2 months ago)	Blocked by OPNsese; 59 hits, proto=tcp, ports=10001,102,1025,1026,1089,1090,1091,11740,1200,1217,123 ... show more Blocked by OPNsese; 59 hits, proto=tcp, ports=10001,102,1025,1026,1089,1090,1091,11740,1200,1217,12345,133 show less	Port Scan Hacking
🇧🇷 marlorodrigues	2026-06-26 23:43:39 (2 months ago)	Brute Force SSH or Port Scan	Port Scan
🇬🇧 pearbright	2026-06-26 23:42:11 (2 months ago)	2026-06-26T23:37:51.956646+00:00 srv1093252 kernel: [3263052.538570] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-06-26T23:37:51.956646+00:00 srv1093252 kernel: [3263052.538570] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=2a02:4780:000f:1358:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=57064 DPT=55553 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T23:38:38.450312+00:00 srv1093252 kernel: [3263099.032023] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=2a02:4780:000f:1358:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=57064 DPT=4712 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T23:38:41.555468+00:00 srv1093252 kernel: [3263102.137174] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a004:0000:0000:0000:0000:0239 DST=2a02:4780:000f:1358:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=57064 DPT=502 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T23:38:56.72617 ... show less	Port Scan
🇳🇱 Erik	2026-06-26 21:49:58 (2 months ago)	Port Scan detected from 2620:96:a004::239 (US/United States/-/-/-). 11 hits in the last 211 second ... show more Port Scan detected from 2620:96:a004::239 (US/United States/-/-/-). 11 hits in the last 211 seconds show less	Web App Attack Port Scan
Anonymous	2026-06-26 21:28:12 (2 months ago)	Port Scan detected from 2620:96:a004::239 (Unknown). 16 hits in the last 80 seconds	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.170

🇹🇿 197.186.0.34

🇺🇸 173.239.214.78

🇺🇸 162.216.149.166

🇩🇪 157.90.12.151

🇯🇵 153.123.7.218

🇺🇸 148.135.0.242

🇵🇹 144.64.142.235

🇺🇸 142.111.152.92

🇺🇸 136.144.33.134

🇵🇰 119.156.76.67

🇮🇩 103.147.159.91

🇮🇳 98.70.48.241

🇲🇩 94.176.76.202

🇪🇸 90.74.105.210

🇺🇦 77.87.40.114

🇦🇩 46.172.227.145

🇳🇱 45.158.204.16

🇬🇧 35.203.211.26

🇺🇸 34.94.147.57