JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4020:1:1:103::3e3

2a01:4020:1:1:103::3e3 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4020:1:1:103::3e3

Whois 2a01:4020:1:1:103::3e3

IP Abuse Reports for 2a01:4020:1:1:103::3e3:

This IP address has been reported a total of 35 times from 24 distinct sources. 2a01:4020:1:1:103::3e3 was first reported on September 15th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-09-16 12:16:15 (19 hours ago)	Connection atttempts against closed TCP ports Sep 16 14:04:51 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 16 14:04:51 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e3 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=51425 DPT=5050 WINDOW=65535 RES=0x00 SYN Sep 16 14:13:53 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e3 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=29607 DPT=6043 WINDOW=65535 RES=0x00 SYN Sep 16 14:16:14 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e3 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=40196 DPT=41794 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇫🇮 6kilowatti	2026-09-16 12:07:23 (19 hours ago)	2026-09-16T15:07:22.835911+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-16T15:07:22.835911+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:03e3 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=49 FLOWLBL=0 PROTO=TCP SPT=58045 DPT=6002 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 en0	2026-09-16 12:04:54 (19 hours ago)	2a01:4020:0001:0001:0103:0000:0000:03e3 was recorded 3 times by 2 hosts attempting to connect to 3 u ... show more 2a01:4020:0001:0001:0103:0000:0000:03e3 was recorded 3 times by 2 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 8 show less	Port Scan
Anonymous	2026-09-16 09:10:27 (22 hours ago)	Blocked by UFW [10288/tcp] \| SPT: 20481 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/ ... show more Blocked by UFW [10288/tcp] \| SPT: 20481 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-09-16 09:04:36 (22 hours ago)	Connection atttempts against closed TCP ports Sep 16 10:57:57 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 16 10:57:57 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e3 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=43813 DPT=1194 WINDOW=65535 RES=0x00 SYN Sep 16 11:04:19 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e3 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=25742 DPT=34567 WINDOW=65535 RES=0x00 SYN Sep 16 11:04:36 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e3 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=56933 DPT=6049 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇺🇸 drewf.ink	2026-09-16 08:51:33 (23 hours ago)	[08:51] Port scanning. Port(s) scanned: TCP/194, TCP/548, TCP/3309, TCP/5632	Port Scan
🇨🇦 alexbfr	2026-09-16 08:48:02 (23 hours ago)	Fail2Ban report from custom-honeypot; automated Telnet honeypot detection.	Brute-Force IoT Targeted
🇺🇸 LotPhantom	2026-09-16 08:47:16 (23 hours ago)	2026-09-16T08:47:16.273758+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-16T08:47:16.273758+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:03e3 DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=62527 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 xmission.com	2026-09-16 08:38:37 (23 hours ago)	Blocked by UFW (TCP on 8009) Source port: 42178 Packet length: 60 This report (for 2a01:4020:0001:0 ... show more Blocked by UFW (TCP on 8009) Source port: 42178 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:03e3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 sayz	2026-09-16 06:50:09 (1 day ago)	Unauthorized connection attempt detected from 2a01:4020:1:1:103::3e3 to TCP port 6015	Port Scan
🇭🇰 PingMeMaybe	2026-09-16 06:48:34 (1 day ago)	Blocked by UFW on hk [5353/tcp] Source port: 28011 TTL: null Packet length: 60 TOS: null This repor ... show more Blocked by UFW on hk [5353/tcp] Source port: 28011 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 Axel	2026-09-16 06:42:33 (1 day ago)	Blocked by UFW on BGPGB [6006/tcp] \| SPT: 45637 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: git ... show more Blocked by UFW on BGPGB [6006/tcp] \| SPT: 45637 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-09-16 06:38:30 (1 day ago)	Blocked by UFW [4369/tcp] Source port: 39845 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [4369/tcp] Source port: 39845 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-09-15 12:07:20 (1 day ago)	2026-09-15T15:07:19.449311+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-15T15:07:19.449311+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:03e3 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=49 FLOWLBL=0 PROTO=TCP SPT=59293 DPT=64738 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇹 WebTejo	2026-09-15 12:05:48 (1 day ago)	Detected multiple authentication failures and invalid user attempts in PS_LIMIT from IP address 2a01 ... show more Detected multiple authentication failures and invalid user attempts in PS_LIMIT from IP address 2a01:4020:1:1:103::3e3 on [PT] Tucano Node. show less	Brute-Force SSH

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.87.32.137

🇺🇿 188.113.246.19

🇪🇨 181.113.114.61

🇰🇿 176.64.104.2

🇸🇦 144.86.43.233

🇮🇩 103.166.33.51

🇸🇬 85.203.21.49

🇲🇾 49.125.201.86

🇭🇰 46.247.61.28

🇰🇷 43.108.43.158

🇺🇸 35.196.130.12

🇯🇵 34.97.137.10

🇺🇸 34.24.51.203

🇻🇳 27.74.192.73

🇷🇴 2.57.122.53

🇸🇪 2a02:26f0:9500:a87::1ea2

🇨🇳 218.21.246.238

🇺🇸 205.210.31.77

🇹🇼 198.235.24.126

🇨🇳 182.119.92.249