AbuseIPDB » 2620:96:a005::239
2620:96:a005::239
This IP was reported 6 times. Confidence of
Abuse
is 23% : ?
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
ISP
Internet Measurement Research
Usage Type
University/College/School
ASN
AS399628
Domain Name
internetmeasurementresearch.com
Country
🇺🇸
United States of America
City
San Francisco, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 2620:96:a005::239 :
This IP address has been reported a total of
6
times from
3 distinct
sources.
2620:96:a005::239 was first reported on
June 26th 2026 , and the most recent report was
5 minutes ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
gnb
2026-06-27 01:21:48
(5 minutes ago)
2026-06-27T03:21:45.893997+02:00 atlas kernel: [48361954.773076] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ...
show more
2026-06-27T03:21:45.893997+02:00 atlas kernel: [48361954.773076] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a005:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=43305 DPT=18550 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-27T03:21:47.510342+02:00 atlas kernel: [48361956.389288] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a005:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=43305 DPT=51100 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-27T03:21:47.622477+02:00 atlas kernel: [48361956.500827] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a005:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=43305 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇩🇪
london2038.com
2026-06-27 01:02:47
(24 minutes ago)
Connection atttempts against closed TCP ports
Jun 27 03:02:46 BLOCK SRC=2620:0096:a005:0000:0000:000 ...
show more
Connection atttempts against closed TCP ports
Jun 27 03:02:46 BLOCK SRC=2620:0096:a005:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42166 DPT=1330 WINDOW=1024 RES=0x00 SYN
Jun 27 03:02:46 BLOCK SRC=2620:0096:a005:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42166 DPT=44818 WINDOW=1024 RES=0x00 SYN
Jun 27 03:02:47 BLOCK SRC=2620:0096:a005:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42166 DPT=18518 WINDOW=1024 RES=0x00 SYN
show less
Port Scan
🇩🇪
gnb
2026-06-27 01:02:47
(24 minutes ago)
2026-06-27T03:02:46.611812+02:00 atlas kernel: [48360815.492919] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ...
show more
2026-06-27T03:02:46.611812+02:00 atlas kernel: [48360815.492919] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a005:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42166 DPT=5094 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-27T03:02:46.998534+02:00 atlas kernel: [48360815.875527] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a005:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42166 DPT=4712 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-27T03:02:47.621431+02:00 atlas kernel: [48360816.502546] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a005:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=42166 DPT=5007 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇬🇧
pearbright
2026-06-26 22:13:17
(3 hours ago)
2026-06-26T22:09:50.882927+00:00 srv740043 kernel: [3249376.759719] [UFW BLOCK] IN=eth0 OUT= MAC=bc: ...
show more
2026-06-26T22:09:50.882927+00:00 srv740043 kernel: [3249376.759719] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a005:0000:0000:0000:0000:0239 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=51787 DPT=5001 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-26T22:10:12.889627+00:00 srv740043 kernel: [3249398.766628] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a005:0000:0000:0000:0000:0239 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=51787 DPT=1883 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-26T22:10:19.954465+00:00 srv740043 kernel: [3249405.831609] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a005:0000:0000:0000:0000:0239 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=51787 DPT=18519 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-26T22:10:40.811921+
...
show less
Port Scan
🇩🇪
london2038.com
2026-06-26 21:40:34
(3 hours ago)
Unsolicited connect to 2222/TCP
2026-06-26 23:31:13.081779097 +0200 CEST, [2620:96:a005::239]:49455, ...
show more
Unsolicited connect to 2222/TCP
2026-06-26 23:31:13.081779097 +0200 CEST, [2620:96:a005::239]:49455, closing
2026-06-26 23:40:33.369054494 +0200 CEST, [2620:96:a005::239]:48999, closing
show less
Port Scan
SSH
🇩🇪
london2038.com
2026-06-26 21:06:59
(4 hours ago)
Connection atttempts against closed TCP ports
Jun 26 23:00:05 BLOCK SRC=2620:0096:a005:0000:0000:000 ...
show more
Connection atttempts against closed TCP ports
Jun 26 23:00:05 BLOCK SRC=2620:0096:a005:0000:0000:0000:0000:0239 LEN=60 TC=32 HOPLIMIT=243 FLOWLBL=0 PROTO=TCP SPT=48017 DPT=3671 WINDOW=1024 RES=0x00 SYN
Jun 26 23:00:06 BLOCK SRC=2620:0096:a005:0000:0000:0000:0000:0239 LEN=60 TC=32 HOPLIMIT=243 FLOWLBL=0 PROTO=TCP SPT=48017 DPT=9600 WINDOW=1024 RES=0x00 SYN
Jun 26 23:00:06 BLOCK SRC=2620:0096:a005:0000:0000:0000:0000:0239 LEN=60 TC=32 HOPLIMIT=243 FLOWLBL=0 PROTO=TCP SPT=48017 DPT=19999 WINDOW=1024 RES=0x00 SYN
show less
Port Scan
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: