JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4020:1:1:103::234

2a01:4020:1:1:103::234 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4020:1:1:103::234

Whois 2a01:4020:1:1:103::234

IP Abuse Reports for 2a01:4020:1:1:103::234:

This IP address has been reported a total of 36 times from 25 distinct sources. 2a01:4020:1:1:103::234 was first reported on September 17th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Peter-Johann Sarbach	2026-09-18 23:34:56 (1 day ago)	Sep 18 08:34:12 imap-login: Info: Disconnected: Inactivity (no auth attempts in 180 secs): user=<>, ... show more Sep 18 08:34:12 imap-login: Info: Disconnected: Inactivity (no auth attempts in 180 secs): user=<>, rip=2a01:4020:1:1:103::234, lip=x.x.x.x, TLS handshaking show less	Hacking
🇩🇪 london2038.com	2026-09-18 12:48:00 (1 day ago)	Connection atttempts against closed TCP ports Sep 18 14:38:42 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 18 14:38:42 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0234 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=48896 DPT=62078 WINDOW=65535 RES=0x00 SYN Sep 18 14:43:59 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0234 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=20746 DPT=6048 WINDOW=65535 RES=0x00 SYN Sep 18 14:47:59 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0234 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=49593 DPT=6467 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇫🇮 6kilowatti	2026-09-18 12:45:02 (1 day ago)	2026-09-18T15:45:00.504537+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-18T15:45:00.504537+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0234 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=32517 DPT=2000 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 en0	2026-09-18 12:44:09 (1 day ago)	2a01:4020:0001:0001:0103:0000:0000:0234 was recorded 3 times by 2 hosts attempting to connect to 3 u ... show more 2a01:4020:0001:0001:0103:0000:0000:0234 was recorded 3 times by 2 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 9 show less	Port Scan
🇩🇪 gnb	2026-09-18 12:35:07 (1 day ago)	2026-09-18T14:28:26.816320+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020 ... show more 2026-09-18T14:28:26.816320+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:0234 DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=56761 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-18T14:31:08.653632+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:0234 DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=18370 DPT=25565 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-18T14:35:07.419540+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:0234 DST=(redacted) LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=33032 DPT=64738 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-09-18 09:28:10 (2 days ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 2a01:4020:1:1:103::234 (IPv6) \| Port: N/A \| Country: United Kingdom \| ISP: INFRAWATCH \| rDNS: None === TARGET === Host: insightvm.goline.ch \| IP: insightvm.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-09-18 11:28:09 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇷🇴 DamonOne	2026-09-18 09:21:33 (2 days ago)	Blocked by OPNsense; 7 hits, proto=tcp, ports=138,3306,3309,44818,47808,6045	Port Scan Hacking
Anonymous	2026-09-18 09:20:45 (2 days ago)	Blocked by UFW [6037/tcp] \| SPT: 59269 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [6037/tcp] \| SPT: 59269 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-09-18 09:03:51 (2 days ago)	Connection atttempts against closed TCP ports Sep 18 10:59:53 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 18 10:59:53 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0234 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=26458 DPT=88 WINDOW=65535 RES=0x00 SYN Sep 18 10:59:55 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0234 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=39498 DPT=8333 WINDOW=65535 RES=0x00 SYN Sep 18 11:03:51 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0234 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=64241 DPT=465 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇺🇸 xmission.com	2026-09-18 08:59:51 (2 days ago)	Blocked by UFW (TCP on 4433) Source port: 20768 Packet length: 60 This report (for 2a01:4020:0001:0 ... show more Blocked by UFW (TCP on 4433) Source port: 20768 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:0234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 LotPhantom	2026-09-18 08:50:04 (2 days ago)	2026-09-18T08:50:03.704663+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-18T08:50:03.704663+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0234 DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=63099 DPT=18080 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇭🇰 PingMeMaybe	2026-09-18 06:53:14 (2 days ago)	Blocked by UFW on hk [14580/tcp] Source port: 21441 TTL: null Packet length: 60 TOS: null This repo ... show more Blocked by UFW on hk [14580/tcp] Source port: 21441 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 sayz	2026-09-18 06:50:06 (2 days ago)	Unauthorized connection attempt detected from 2a01:4020:1:1:103::234 to TCP port 8009	Port Scan
🇳🇱 Roderic	2026-09-18 06:46:27 (2 days ago)	Port Scan detected from 2a01:4020:1:1:103::234 (GB/United Kingdom/England/City of London/-/[redact ... show more Port Scan detected from 2a01:4020:1:1:103::234 (GB/United Kingdom/England/City of London/-/[redacted]). show less	Port Scan
🇺🇸 thororen	2026-09-18 06:36:06 (2 days ago)	Blocked by UFW [20256/tcp] Source port: 44456 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [20256/tcp] Source port: 44456 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.178.15.7

🇻🇪 167.250.49.144

🇱🇰 122.255.14.70

🇺🇸 64.23.226.163

🇧🇬 46.10.201.90

🇵🇪 38.224.49.7

🇺🇸 20.163.3.122

🇰🇷 221.161.235.168

🇺🇸 212.28.177.22

🇵🇾 190.104.146.5

🇵🇱 146.59.95.254

🇮🇹 79.20.216.233

🇳🇱 45.148.10.141

🇧🇪 35.241.218.31

🇮🇳 14.139.242.55

🇰🇷 218.239.53.194

🇵🇰 119.152.102.54

🇻🇳 113.163.202.114

🇸🇬 101.47.152.216

🇷🇺 89.108.74.178