JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2620:96:a006::239

2620:96:a006::239 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 77%: ?

77%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Internet Measurement Research
Usage Type	University/College/School
ASN	AS399628
Domain Name	internetmeasurementresearch.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2620:96:a006::239

Whois 2620:96:a006::239

IP Abuse Reports for 2620:96:a006::239:

This IP address has been reported a total of 14 times from 13 distinct sources. 2620:96:a006::239 was first reported on June 26th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 en0	2026-06-27 04:25:00 (2 days ago)	2620:0096:a006:0000:0000:0000:0000:0239 was recorded 3 times by 1 hosts attempting to connect to 3 u ... show more 2620:0096:a006:0000:0000:0000:0000:0239 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 3 show less	Port Scan
🇩🇪 voemedia	2026-06-27 03:54:08 (2 days ago)	Port Scan detected from 2620:96:a006::239 (US/United States/-).	Port Scan
🇩🇪 marcel-knorr.de	2026-06-27 03:53:57 (2 days ago)	[mail-backup-1] Blocked by UFW	Brute-Force Port Scan
🇩🇪 gnb	2026-06-27 03:45:28 (2 days ago)	2026-06-27T05:45:25.846365+02:00 atlas kernel: [48370574.708205] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ... show more 2026-06-27T05:45:25.846365+02:00 atlas kernel: [48370574.708205] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a006:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=51925 DPT=12345 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-27T05:45:26.522360+02:00 atlas kernel: [48370575.386852] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a006:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=51925 DPT=1911 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-27T05:45:28.334517+02:00 atlas kernel: [48370577.197952] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a006:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=51925 DPT=789 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Admins@Storch	2026-06-27 02:35:03 (2 days ago)	Blocked by OPNsese; 17 hits, proto=tcp, ports=1217,1330,13722,18245,18518,18550,1883,1962,3671,4000, ... show more Blocked by OPNsese; 17 hits, proto=tcp, ports=1217,1330,13722,18245,18518,18550,1883,1962,3671,4000,44818, show less	Port Scan Hacking
🇳🇱 Roderic	2026-06-27 01:52:03 (2 days ago)	Port Scan detected from 2620:96:a006::239 (US/United States/-/-/-/-).	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-06-27 01:50:14 (2 days ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇯🇵 Kinsei Engineering Inc.	2026-06-27 01:49:53 (2 days ago)	UFW:High-frequency access to unused ports	Port Scan
🇩🇪 london2038.com	2026-06-27 01:42:59 (2 days ago)	Connection atttempts against closed TCP ports Jun 27 03:42:51 BLOCK SRC=2620:0096:a006:0000:0000:000 ... show more Connection atttempts against closed TCP ports Jun 27 03:42:51 BLOCK SRC=2620:0096:a006:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=44570 DPT=10001 WINDOW=1024 RES=0x00 SYN Jun 27 03:42:51 BLOCK SRC=2620:0096:a006:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=44570 DPT=5413 WINDOW=1024 RES=0x00 SYN Jun 27 03:42:59 BLOCK SRC=2620:0096:a006:0000:0000:0000:0000:0239 LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=44570 DPT=13722 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇩🇪 gnb	2026-06-27 01:42:53 (2 days ago)	2026-06-27T03:42:52.184997+02:00 atlas kernel: [48363221.061967] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ... show more 2026-06-27T03:42:52.184997+02:00 atlas kernel: [48363221.061967] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a006:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=44570 DPT=20547 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-27T03:42:52.896883+02:00 atlas kernel: [48363221.773919] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a006:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=44570 DPT=135 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-27T03:42:53.154479+02:00 atlas kernel: [48363222.031521] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2620:0096:a006:0000:0000:0000:0000:0239 DST=(redacted) LEN=60 TC=0 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=44570 DPT=20000 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 centurion	2026-06-27 01:42:52 (2 days ago)	Unauthorized attempt on coresecret [13722/tcp] Source port: 44570 TTL: null Packet length: 60 TOS: n ... show more Unauthorized attempt on coresecret [13722/tcp] Source port: 44570 TTL: null Packet length: 60 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Quarks Solutions	2026-06-26 22:44:17 (3 days ago)	crowdsecurity/iptables-scan-multi_ports	Port Scan
🇫🇷 wiredalter	2026-06-26 22:44:00 (3 days ago)	Blocked by fail2ban on o2VPS [5006/tcp] Source Port: 53838 TTL: Packet Length: 60 TOS: Analyzed b ... show more Blocked by fail2ban on o2VPS [5006/tcp] Source Port: 53838 TTL: Packet Length: 60 TOS: Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
🇬🇧 pearbright	2026-06-26 21:34:40 (3 days ago)	2026-06-26T21:31:00.626625+00:00 srv740043 kernel: [3247046.509887] [UFW BLOCK] IN=eth0 OUT= MAC=bc: ... show more 2026-06-26T21:31:00.626625+00:00 srv740043 kernel: [3247046.509887] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a006:0000:0000:0000:0000:0239 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=49455 DPT=1090 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T21:31:04.134798+00:00 srv740043 kernel: [3247050.017685] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a006:0000:0000:0000:0000:0239 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=49455 DPT=20000 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T21:32:05.098957+00:00 srv740043 kernel: [3247110.981988] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2620:0096:a006:0000:0000:0000:0000:0239 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=237 FLOWLBL=0 PROTO=TCP SPT=49455 DPT=1025 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T21:32:41.656466+ ... show less	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 195.142.70.153

🇷🇴 159.26.117.37

🇬🇧 35.203.211.64

🇺🇸 192.171.82.114

🇺🇸 173.255.210.89

🇺🇸 162.216.150.53

🇨🇳 120.236.49.131

🇺🇸 100.29.192.95

🇹🇷 94.154.43.181

🇫🇷 85.217.140.43

🇯🇵 45.43.60.220

🇬🇧 35.203.210.19

🇺🇸 2.57.168.7

🇺🇸 2605:a601:f301:1600:acb4:dbff:fe0f:a453

🇺🇸 212.28.177.163

🇲🇽 189.167.250.51

🇺🇸 147.185.132.36

🇩🇪 94.103.172.56

🇳🇱 45.148.10.239

🇪🇸 5.225.25.31