JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a01:4020:1:1:102::2

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

100% Critical

55 reports

30 reporters · latest 11 hours ago

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a01:4020:1:1:102::2

Export CSV

This IP address has been reported a total of 55 times from 30 distinct sources. 2a01:4020:1:1:102::2 was first reported on September 23rd 2026, and the most recent report was 11 hours ago. In the last 60 days, the top reporter locations were: United States of America with 17 reports; Germany with 16 reports; Japan with 7 reports. The most common categories in these recent reports were: Port Scan 48 times; Brute-Force 7 times; Hacking 6 times; Bad Web Bot 3 times; Email Spam 3 times; Other 6 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-10-05 10:01:37 (11 hours ago)	Port scan detected on multiple ports	Port Scan
🇺🇸 chronos	2026-10-05 06:30:35 (15 hours ago)	[AUTORAVALT][[05/10/2026 - 03:30:34 -03:00 UTC] Attack from [2a01:4020:1:1:102::2] Action: BLocKed ... show more [AUTORAVALT][[05/10/2026 - 03:30:34 -03:00 UTC] Attack from [2a01:4020:1:1:102::2] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force attacks on web] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇩🇪 london2038.com	2026-10-03 13:15:17 (2 days ago)	Connection atttempts against closed TCP ports Oct 3 15:04:18 BLOCK SRC=2a01:4020:0001:0001:0102:000 ... show more Connection atttempts against closed TCP ports Oct 3 15:04:18 BLOCK SRC=2a01:4020:0001:0001:0102:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=61002 DPT=19 WINDOW=65535 RES=0x00 SYN Oct 3 15:07:56 BLOCK SRC=2a01:4020:0001:0001:0102:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=49986 DPT=444 WINDOW=65535 RES=0x00 SYN Oct 3 15:15:16 BLOCK SRC=2a01:4020:0001:0001:0102:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=60373 DPT=6023 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇩🇪 HoneyPot-FrPri	2026-10-03 13:10:06 (2 days ago)	Oct 3 15:10:05 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, ... show more Oct 3 15:10:05 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a01:4020:1:1:102::2, lip=2a0f:5707:aaf1:bbab::1, session=<RKIWXu9cznIqAUAgAAEAAQECAAAAAAAC> ... show less	Email Spam Brute-Force
🇩🇪 _ArminS_	2026-10-03 12:44:37 (2 days ago)	SP-Scan6 25996:8009 detected 2026.10.03 14:44:37 blocked until 2026.11.22 06:47:24	Port Scan
🇩🇪 DSK	2026-10-03 12:44:13 (2 days ago)	Unauthorized connection Drop [6034/tcp] #16040	Bad Web Bot
🇫🇮 6kilowatti	2026-10-03 12:43:18 (2 days ago)	2026-10-03T15:43:17.886309+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-10-03T15:43:17.886309+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:86:dd SRC=2a01:4020:0001:0001:0102:0000:0000:0002 DST=2a03:50a0:0014:0075:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=50 FLOWLBL=0 PROTO=TCP SPT=64944 DPT=6056 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 mattk	2026-10-03 09:46:58 (2 days ago)	port scan	Port Scan
Anonymous	2026-10-03 09:45:36 (2 days ago)	Blocked by UFW [523/tcp] \| SPT: 23244 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/se ... show more Blocked by UFW [523/tcp] \| SPT: 23244 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-10-03 09:30:28 (2 days ago)	Blocked by UFW (TCP on 5671) Source port: 29860 Packet length: 60 This report (for 2a01:4020:0001:0 ... show more Blocked by UFW (TCP on 5671) Source port: 29860 Packet length: 60 This report (for 2a01:4020:0001:0001:0102:0000:0000:0002) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-10-03 09:28:18 (2 days ago)	2a01:4020:0001:0001:0102:0000:0000:0002 was recorded 3 times by 1 hosts attempting to connect to 3 u ... show more 2a01:4020:0001:0001:0102:0000:0000:0002 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 7 show less	Port Scan
🇺🇸 LotPhantom	2026-10-03 09:15:41 (2 days ago)	2026-10-03T09:15:40.984247+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-10-03T09:15:40.984247+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0102:0000:0000:0002 DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=54317 DPT=6029 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 xmission.com	2026-10-03 09:14:25 (2 days ago)	Blocked by UFW (TCP on 11740) Source port: 38385 Packet length: 60 This report (for 2a01:4020:0001: ... show more Blocked by UFW (TCP on 11740) Source port: 38385 Packet length: 60 This report (for 2a01:4020:0001:0001:0102:0000:0000:0002) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 kelliwic.net	2026-10-03 06:57:46 (2 days ago)	Port scan detected (F2B)	Port Scan
🇯🇵 sayz	2026-10-03 06:57:33 (2 days ago)	Unauthorized connection attempt detected from 2a01:4020:1:1:102::2 to TCP port 9999	Port Scan

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.11

🇺🇸 208.82.113.88

🇰🇷 175.45.204.121

🇳🇱 104.23.170.60

🇪🇸 83.32.171.70

🇵🇱 83.7.25.27

🇳🇱 77.239.124.151

🇫🇮 193.187.110.214

🇺🇸 185.223.152.15

🇭🇰 156.225.14.74

🇳🇱 104.23.170.25

🇮🇩 103.158.121.21

🇻🇳 103.69.96.120

🇺🇸 103.4.250.26

🇳🇱 89.200.85.114

🇳🇱 81.19.216.83

🇺🇸 66.132.172.220

🇱🇹 62.60.130.198

🇺🇸 52.2.83.227

🇸🇬 51.79.212.36