JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4020:1:1:103::1fa

2a01:4020:1:1:103::1fa was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4020:1:1:103::1fa

Whois 2a01:4020:1:1:103::1fa

IP Abuse Reports for 2a01:4020:1:1:103::1fa:

This IP address has been reported a total of 35 times from 26 distinct sources. 2a01:4020:1:1:103::1fa was first reported on September 15th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-09-16 12:09:25 (16 hours ago)	2026-09-16T15:09:25.053777+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-16T15:09:25.053777+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:01fa DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=60466 DPT=135 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 Axel	2026-09-16 12:06:52 (16 hours ago)	Blocked by UFW on BGPGB [1099/tcp] \| SPT: 21558 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: git ... show more Blocked by UFW on BGPGB [1099/tcp] \| SPT: 21558 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-16 09:12:06 (19 hours ago)	Blocked by UFW [6061/tcp] \| SPT: 41605 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [6061/tcp] \| SPT: 41605 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-09-16 09:02:16 (19 hours ago)	Connection atttempts against closed TCP ports Sep 16 10:54:31 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 16 10:54:31 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:01fa LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=61207 DPT=1764 WINDOW=65535 RES=0x00 SYN Sep 16 11:00:15 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:01fa LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=38971 DPT=6053 WINDOW=65535 RES=0x00 SYN Sep 16 11:02:15 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:01fa LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=41947 DPT=6095 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇺🇸 drewf.ink	2026-09-16 08:51:03 (20 hours ago)	[08:51] Port scanning. Port(s) scanned: TCP/17, TCP/49, TCP/6000, TCP/10011	Port Scan
🇺🇸 LotPhantom	2026-09-16 08:47:13 (20 hours ago)	2026-09-16T08:47:12.935515+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-16T08:47:12.935515+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:01fa DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=24196 DPT=7 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 xmission.com	2026-09-16 08:38:38 (20 hours ago)	Blocked by UFW (TCP on 8010) Source port: 64049 Packet length: 60 This report (for 2a01:4020:0001:0 ... show more Blocked by UFW (TCP on 8010) Source port: 64049 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:01fa) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 sayz	2026-09-16 06:50:05 (22 hours ago)	Unauthorized connection attempt detected from 2a01:4020:1:1:103::1fa to TCP port 34567	Port Scan
🇭🇰 PingMeMaybe	2026-09-16 06:48:29 (22 hours ago)	Blocked by UFW on hk [33060/tcp] Source port: 44625 TTL: null Packet length: 60 TOS: null This repo ... show more Blocked by UFW on hk [33060/tcp] Source port: 44625 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 pwozniak	2026-09-16 06:45:18 (22 hours ago)	lost connection after CONNECT from unknown[2a01:4020:1:1:103::1fa]	Brute-Force
🇺🇸 thororen	2026-09-16 06:32:44 (22 hours ago)	Blocked by UFW [6054/tcp] Source port: 32209 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [6054/tcp] Source port: 32209 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-09-15 12:08:32 (1 day ago)	2026-09-15T15:08:31.380023+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-15T15:08:31.380023+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:01fa DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=31804 DPT=6060 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 HoneyPot-FrPri	2026-09-15 12:02:44 (1 day ago)	Sep 15 14:02:43 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, ... show more Sep 15 14:02:43 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a01:4020:1:1:103::1fa, lip=2a0f:5707:aaf1:bbab::1, session=<SAsJVIRbb6UqAUAgAAEAAQEDAAAAAAH6> ... show less	Email Spam Brute-Force
🇩🇪 bontekoe.technology	2026-09-15 12:00:29 (1 day ago)	Port scan or Brute-Force detected. (src_port=40245, dst_port=6054)	Brute-Force
🇩🇪 _ArminS_	2026-09-15 11:57:27 (1 day ago)	SP-Scan6 61735:6881 detected 2026.09.15 13:57:27 blocked until 2026.11.04 06:00:14	Port Scan

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 216.28.211.116

🇨🇦 159.203.31.4

🇵🇰 154.208.50.10

🇨🇳 120.48.118.142

🇩🇿 105.96.102.146

🇨🇾 81.4.156.50

🇺🇸 66.132.224.25

🇺🇸 65.49.1.142

🇺🇸 64.62.156.80

🇱🇹 62.60.130.242

🇳🇱 45.156.128.132

🇺🇸 45.79.207.110

🇺🇸 34.74.130.64

🇳🇱 34.12.10.127

🇺🇸 23.185.200.28

🇸🇬 8.219.13.78

🇷🇺 2.62.108.201

🇷🇴 2.57.122.53

🇮🇳 223.181.56.37

🇧🇷 200.152.88.19