JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4020:1:1:103::3e7

2a01:4020:1:1:103::3e7 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4020:1:1:103::3e7

Whois 2a01:4020:1:1:103::3e7

IP Abuse Reports for 2a01:4020:1:1:103::3e7:

This IP address has been reported a total of 36 times from 26 distinct sources. 2a01:4020:1:1:103::3e7 was first reported on September 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-09-16 12:17:32 (1 day ago)	Connection atttempts against closed TCP ports Sep 16 14:07:53 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 16 14:07:53 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=49635 DPT=8888 WINDOW=65535 RES=0x00 SYN Sep 16 14:16:55 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=18216 DPT=5986 WINDOW=65535 RES=0x00 SYN Sep 16 14:17:31 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=57736 DPT=6030 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇫🇮 6kilowatti	2026-09-16 12:15:19 (1 day ago)	2026-09-16T15:15:19.176730+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-16T15:15:19.176730+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=52773 DPT=5400 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 HoneyPot-FrPri	2026-09-16 12:15:02 (1 day ago)	Sep 16 14:15:01 [redacted] dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): us ... show more Sep 16 14:15:01 [redacted] dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a01:4020:1:1:103::3e7, lip=2a0f:5707:aaf1:bbab::1, session=<dhTZnZhbcO4qAUAgAAEAAQEDAAAAAAPn> ... show less	Email Spam Brute-Force
🇩🇪 gnb	2026-09-16 12:02:31 (1 day ago)	2026-09-16T13:48:29.014888+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020 ... show more 2026-09-16T13:48:29.014888+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=18229 DPT=5061 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-16T13:58:52.277209+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 DST=(redacted) LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=17492 DPT=2082 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-16T14:02:31.177320+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 DST=(redacted) LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=22533 DPT=1433 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇹 matthew_eli	2026-09-16 09:45:06 (1 day ago)	Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (38 hits in 24h ... show more Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (38 hits in 24h). show less	Port Scan
Anonymous	2026-09-16 09:10:12 (1 day ago)	Blocked by UFW [902/tcp] \| SPT: 40181 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/se ... show more Blocked by UFW [902/tcp] \| SPT: 40181 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-09-16 09:03:56 (1 day ago)	Connection atttempts against closed TCP ports Sep 16 10:54:21 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 16 10:54:21 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=30633 DPT=2077 WINDOW=65535 RES=0x00 SYN Sep 16 10:57:16 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=19821 DPT=3128 WINDOW=65535 RES=0x00 SYN Sep 16 11:03:55 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=32941 DPT=8443 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇺🇸 LotPhantom	2026-09-16 08:51:16 (1 day ago)	2026-09-16T08:51:16.353638+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-16T08:51:16.353638+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=42404 DPT=10110 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 drewf.ink	2026-09-16 08:51:03 (1 day ago)	[08:51] Port scanning. Port(s) scanned: TCP/88, TCP/161, TCP/1099	Port Scan
🇺🇸 xmission.com	2026-09-16 08:38:33 (1 day ago)	Blocked by UFW (TCP on 8000) Source port: 25719 Packet length: 60 This report (for 2a01:4020:0001:0 ... show more Blocked by UFW (TCP on 8000) Source port: 25719 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:03e7) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 PingMeMaybe	2026-09-16 06:56:46 (1 day ago)	Blocked by UFW on hk [58000/tcp] Source port: 59292 TTL: null Packet length: 60 TOS: null This repo ... show more Blocked by UFW on hk [58000/tcp] Source port: 59292 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 sayz	2026-09-16 06:50:10 (1 day ago)	Unauthorized connection attempt detected from 2a01:4020:1:1:103::3e7 to TCP port 5400	Port Scan
Anonymous	2026-09-16 06:40:32 (1 day ago)	hacking	Hacking
🇺🇸 thororen	2026-09-16 06:32:59 (1 day ago)	Blocked by UFW [6024/tcp] Source port: 26112 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [6024/tcp] Source port: 26112 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-09-15 12:04:20 (2 days ago)	2026-09-15T15:04:19.575350+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-15T15:04:19.575350+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:03e7 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=46543 DPT=6699 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.150.153.202

🇳🇱 192.144.90.2

🇨🇳 125.69.195.10

🇵🇰 119.160.107.62

🇨🇳 116.232.127.196

🇧🇬 109.160.32.110

🇺🇸 107.174.82.77

🇷🇴 92.118.39.227

🇳🇱 34.91.131.188

🇺🇸 199.45.130.23

🇹🇳 197.2.55.139

🇳🇱 195.178.110.232

🇪🇨 190.110.206.234

🇧🇷 177.37.197.160

🇷🇺 92.126.250.36

🇺🇸 18.215.183.116

🇩🇿 197.204.84.22

🇳🇱 193.47.62.69

🇮🇹 151.42.193.23

🇺🇸 147.224.161.222