JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4020:1:1:103::42b

2a01:4020:1:1:103::42b was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4020:1:1:103::42b

Whois 2a01:4020:1:1:103::42b

IP Abuse Reports for 2a01:4020:1:1:103::42b:

This IP address has been reported a total of 45 times from 28 distinct sources. 2a01:4020:1:1:103::42b was first reported on September 8th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-09-18 12:48:18 (7 hours ago)	2026-09-18T15:48:17.853367+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-18T15:48:17.853367+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:042b DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=41380 DPT=51007 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 HoneyPot-FrPri	2026-09-18 12:44:11 (7 hours ago)	Sep 18 14:44:10 [redacted] dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): us ... show more Sep 18 14:44:10 [redacted] dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a01:4020:1:1:103::42b, lip=2a0f:5707:aaf1:bbab::1, session=<sJjFQcFb14IqAUAgAAEAAQEDAAAAAAQr> ... show less	Email Spam Brute-Force
🇩🇪 gnb	2026-09-18 12:36:28 (7 hours ago)	2026-09-18T14:29:48.001199+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020 ... show more 2026-09-18T14:29:48.001199+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:042b DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=27795 DPT=6010 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-18T14:33:46.769818+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:042b DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=42457 DPT=6047 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-18T14:36:28.600203+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:042b DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=53218 DPT=8009 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-18 12:34:52 (7 hours ago)	Fail2Ban triggered	Spoofing Port Scan
Anonymous	2026-09-18 09:21:45 (11 hours ago)	Blocked by UFW [6039/tcp] \| SPT: 24517 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [6039/tcp] \| SPT: 24517 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇴 DamonOne	2026-09-18 09:21:34 (11 hours ago)	Blocked by OPNsense; 7 hits, proto=tcp, ports=1080,48898,5094,6047,6881,7001,993	Port Scan Hacking
🇫🇮 Ticlem	2026-09-18 09:15:29 (11 hours ago)	2026-09-18T11:05:47.384845+02:00 clement-turlure kernel: [10728591.497764] [UFW BLOCK] IN=enp0s31f6 ... show more 2026-09-18T11:05:47.384845+02:00 clement-turlure kernel: [10728591.497764] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:042b DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=59565 DPT=6021 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-18T11:14:09.724911+02:00 clement-turlure kernel: [10729093.841835] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:042b DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=19481 DPT=554 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-18T11:15:29.039629+02:00 clement-turlure kernel: [10729173.157190] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:042b DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=34387 DPT=7200 WINDOW=65535 RES=0x00 SYN U ... show less	Port Scan
🇺🇸 xmission.com	2026-09-18 09:15:13 (11 hours ago)	Blocked by UFW (TCP on 1701) Source port: 47898 Packet length: 60 This report (for 2a01:4020:0001:0 ... show more Blocked by UFW (TCP on 1701) Source port: 47898 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:042b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 SysAdmin Dylan	2026-09-18 09:12:02 (11 hours ago)	Port Scan detected from 2a01:4020:1:1:103::42b (Unknown). 11 hits in the last 213 seconds	Brute-Force
🇨🇦 Blinker73	2026-09-18 09:09:56 (11 hours ago)	2026-09-18T05:00 kernel: OUT= SRC=2a01:4020:0001:0001:0103:0000:0000:042b LEN=60 TC=0 HOPLIMIT ... show more 2026-09-18T05:00 kernel: OUT= SRC=2a01:4020:0001:0001:0103:0000:0000:042b LEN=60 TC=0 HOPLIMIT=49 FLOWLBL=0 PROTO=TCP SPT=23787 DPT=49 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-18T05:02 kernel: OUT= SRC=2a01:4020:0001:0001:0103:0000:0000:042b LEN=60 TC=0 HOPLIMIT=49 FLOWLBL=0 PROTO=TCP SPT=27899 DPT=8090 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 Blexyel	2026-09-18 09:05:25 (11 hours ago)	tcp/25565 abuse detected for ip=2a01:4020:1:1:103::42b ...	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-09-18 09:00:08 (11 hours ago)	Blocked by UFW (TCP on 1494) Source port: 32885 Packet length: 60 This report (for 2a01:4020:0001:0 ... show more Blocked by UFW (TCP on 1494) Source port: 32885 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:042b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-09-18 08:57:24 (11 hours ago)	2a01:4020:0001:0001:0103:0000:0000:042b was recorded 3 times by 1 hosts attempting to connect to 3 u ... show more 2a01:4020:0001:0001:0103:0000:0000:042b was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 6, 7 show less	Port Scan
🇺🇸 LotPhantom	2026-09-18 08:43:43 (11 hours ago)	2026-09-18T08:43:43.157905+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-18T08:43:43.157905+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:042b DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=48003 DPT=6002 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 kelliwic.net	2026-09-18 07:05:12 (13 hours ago)	Port scan detected (F2B)	Port Scan

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 170.78.226.1

🇰🇷 222.107.156.227

🇨🇳 221.226.17.34

🇳🇱 216.252.238.176

🇰🇷 210.99.112.82

🇵🇰 182.183.153.7

🇺🇸 147.185.132.38

🇨🇳 122.195.48.95

🇨🇳 117.72.69.18

🇨🇦 85.217.149.31

🇺🇸 205.210.31.98

🇲🇦 196.74.27.106

🇧🇷 190.9.66.41

🇦🇺 182.160.155.236

🇫🇮 147.185.133.242

🇺🇸 136.144.35.112

🇹🇼 122.117.106.13

🇨🇦 96.63.152.243

🇬🇧 35.203.211.153

🇮🇪 34.240.148.190