JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4020:1:1:103::352

2a01:4020:1:1:103::352 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4020:1:1:103::352

Whois 2a01:4020:1:1:103::352

IP Abuse Reports for 2a01:4020:1:1:103::352:

This IP address has been reported a total of 36 times from 27 distinct sources. 2a01:4020:1:1:103::352 was first reported on September 17th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 WebTejo	2026-09-18 12:50:40 (1 day ago)	Detected multiple authentication failures and invalid user attempts in PS_LIMIT from IP address 2a01 ... show more Detected multiple authentication failures and invalid user attempts in PS_LIMIT from IP address 2a01:4020:1:1:103::352 on [PT] Tucano Node. show less	Brute-Force SSH
🇩🇪 london2038.com	2026-09-18 12:46:41 (1 day ago)	Connection atttempts against closed TCP ports Sep 18 14:38:23 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 18 14:38:23 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0352 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=56798 DPT=4001 WINDOW=65535 RES=0x00 SYN Sep 18 14:41:21 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0352 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=24408 DPT=6002 WINDOW=65535 RES=0x00 SYN Sep 18 14:46:41 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0352 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=26837 DPT=6047 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇫🇮 6kilowatti	2026-09-18 12:40:00 (1 day ago)	2026-09-18T15:39:59.994721+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-18T15:39:59.994721+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0352 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=22180 DPT=8010 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇹 matthew_eli	2026-09-18 09:45:08 (1 day ago)	Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (37 hits in 24h ... show more Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (37 hits in 24h). show less	Port Scan
🇷🇴 DamonOne	2026-09-18 09:21:33 (1 day ago)	Blocked by OPNsense; 7 hits, proto=tcp, ports=119,19132,20547,3307,5090,6043,6046	Port Scan Hacking
Anonymous	2026-09-18 09:17:24 (1 day ago)	Blocked by UFW [502/tcp] \| SPT: 60055 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/se ... show more Blocked by UFW [502/tcp] \| SPT: 60055 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Blinker73	2026-09-18 09:14:40 (1 day ago)	2026-09-18T05:00 kernel: OUT= SRC=2a01:4020:0001:0001:0103:0000:0000:0352 LEN=60 TC=0 HOPLIMIT ... show more 2026-09-18T05:00 kernel: OUT= SRC=2a01:4020:0001:0001:0103:0000:0000:0352 LEN=60 TC=0 HOPLIMIT=50 FLOWLBL=0 PROTO=TCP SPT=25974 DPT=2080 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-18T05:01 kernel: OUT= SRC=2a01:4020:0001:0001:0103:0000:0000:0352 LEN=60 TC=0 HOPLIMIT=50 FLOWLBL=0 PROTO=TCP SPT=60024 DPT=6042 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 xmission.com	2026-09-18 09:00:01 (1 day ago)	Blocked by UFW (TCP on 50001) Source port: 19669 Packet length: 60 This report (for 2a01:4020:0001: ... show more Blocked by UFW (TCP on 50001) Source port: 19669 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:0352) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-09-18 08:54:24 (1 day ago)	2a01:4020:0001:0001:0103:0000:0000:0352 was recorded 3 times by 1 hosts attempting to connect to 3 u ... show more 2a01:4020:0001:0001:0103:0000:0000:0352 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 4, 7 show less	Port Scan
🇺🇸 LotPhantom	2026-09-18 08:51:56 (1 day ago)	2026-09-18T08:51:56.459150+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-18T08:51:56.459150+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0352 DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=60283 DPT=51005 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇯🇵 sayz	2026-09-18 06:49:25 (1 day ago)	Unauthorized connection attempt detected from 2a01:4020:1:1:103::352 to TCP port 1883	Port Scan
🇭🇰 PingMeMaybe	2026-09-18 06:47:35 (1 day ago)	Blocked by UFW on hk [6058/tcp] Source port: 42503 TTL: null Packet length: 60 TOS: null This repor ... show more Blocked by UFW on hk [6058/tcp] Source port: 42503 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 Axel	2026-09-18 06:46:53 (1 day ago)	Blocked by UFW on BGPGB [2598/tcp] \| SPT: 50101 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: git ... show more Blocked by UFW on BGPGB [2598/tcp] \| SPT: 50101 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-09-18 06:38:45 (1 day ago)	Blocked by UFW [5038/tcp] Source port: 34925 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [5038/tcp] Source port: 34925 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Roderic	2026-09-18 06:36:17 (1 day ago)	Port Scan detected from 2a01:4020:1:1:103::352 (GB/United Kingdom/England/City of London/-/[redact ... show more Port Scan detected from 2a01:4020:1:1:103::352 (GB/United Kingdom/England/City of London/-/[redacted]). show less	Port Scan

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇨 190.10.189.68

🇱🇹 62.60.130.253

🇮🇳 160.30.39.50

🇦🇺 134.199.159.238

🇺🇸 97.74.236.4

🇩🇪 63.176.8.218

🇮🇩 43.157.200.91

🇬🇧 35.203.210.184

🇰🇷 14.34.130.204

🇩🇪 213.209.159.241

🇧🇷 179.190.100.143

🇺🇸 156.232.10.218

🇺🇸 107.115.39.177

🇫🇷 104.165.180.151

🇳🇱 91.148.244.131

🇳🇱 81.171.72.93

🇰🇿 212.154.234.9

🇨🇳 211.155.100.9

🇭🇰 206.238.40.37

🇧🇷 205.210.31.130