JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4020:1:1:103::53f

2a01:4020:1:1:103::53f was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4020:1:1:103::53f

Whois 2a01:4020:1:1:103::53f

IP Abuse Reports for 2a01:4020:1:1:103::53f:

This IP address has been reported a total of 29 times from 23 distinct sources. 2a01:4020:1:1:103::53f was first reported on September 15th 2026, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-09-16 12:13:23 (21 hours ago)	2026-09-16T15:13:22.093027+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-16T15:13:22.093027+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:053f DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=47603 DPT=9092 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-16 09:14:46 (1 day ago)	Blocked by UFW [6027/tcp] \| SPT: 34067 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [6027/tcp] \| SPT: 34067 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 mattk	2026-09-16 09:04:55 (1 day ago)	port scan	Port Scan
🇺🇸 LotPhantom	2026-09-16 08:47:21 (1 day ago)	2026-09-16T08:47:21.243914+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-16T08:47:21.243914+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:053f DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=46290 DPT=69 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 xmission.com	2026-09-16 08:38:31 (1 day ago)	Blocked by UFW (TCP on 6466) Source port: 28123 Packet length: 60 This report (for 2a01:4020:0001:0 ... show more Blocked by UFW (TCP on 6466) Source port: 28123 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:053f) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 sayz	2026-09-16 06:48:38 (1 day ago)	Unauthorized connection attempt detected from 2a01:4020:1:1:103::53f to TCP port 2727	Port Scan
🇺🇸 thororen	2026-09-16 06:40:29 (1 day ago)	Blocked by UFW [6027/tcp] Source port: 40428 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [6027/tcp] Source port: 40428 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 pm33	2026-09-16 06:40:04 (1 day ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇮🇹 matthew_eli	2026-09-15 18:45:09 (1 day ago)	Keenetic Firewall: Blocked Traffic (No Port Detected - likely UDP). Blocked 29 times in last 24h.	Port Scan
🇫🇮 6kilowatti	2026-09-15 12:12:29 (1 day ago)	2026-09-15T15:12:28.785732+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-15T15:12:28.785732+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:053f DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=27215 DPT=8081 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 london2038.com	2026-09-15 12:12:24 (1 day ago)	Connection atttempts against closed TCP ports Sep 15 14:02:26 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 15 14:02:26 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:053f LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=29221 DPT=50000 WINDOW=65535 RES=0x00 SYN Sep 15 14:06:45 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:053f LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=58550 DPT=14580 WINDOW=65535 RES=0x00 SYN Sep 15 14:12:24 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:053f LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=29436 DPT=6443 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇵🇹 WebTejo	2026-09-15 12:10:50 (1 day ago)	Detected multiple authentication failures and invalid user attempts in PS_LIMIT from IP address 2a01 ... show more Detected multiple authentication failures and invalid user attempts in PS_LIMIT from IP address 2a01:4020:1:1:103::53f on [PT] Tucano Node. show less	Brute-Force SSH
🇩🇪 HoneyPot-FrPri	2026-09-15 12:08:08 (1 day ago)	Sep 15 14:08:07 [redacted] dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): us ... show more Sep 15 14:08:07 [redacted] dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a01:4020:1:1:103::53f, lip=2a0f:5707:aaf1:bbab::1, session=<c/FVZ4RbTrYqAUAgAAEAAQEDAAAAAAU/> ... show less	Email Spam Brute-Force
🇩🇪 bontekoe.technology	2026-09-15 12:03:07 (1 day ago)	Port scan or Brute-Force detected. (src_port=21676, dst_port=5684)	Brute-Force
🇩🇪 gnb	2026-09-15 11:49:21 (1 day ago)	2026-09-15T13:43:58.953279+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020 ... show more 2026-09-15T13:43:58.953279+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:053f DST=(redacted) LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=22108 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-15T13:44:04.453625+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:053f DST=(redacted) LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=54553 DPT=873 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-15T13:49:20.997194+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:053f DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=49535 DPT=6000 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.176.83.74

🇷🇺 109.194.108.203

🇦🇺 45.133.5.51

🇳🇱 34.91.211.22

🇶🇦 34.18.96.249

🇮🇩 210.79.142.201

🇧🇷 200.124.166.47

🇦🇷 179.238.43.206

🇸🇳 179.64.79.225

🇧🇷 177.23.67.225

🇺🇸 166.62.94.210

🇺🇸 162.248.100.97

🇨🇿 109.164.48.33

🇨🇳 106.117.114.181

🇳🇱 64.225.69.31

🇨🇦 51.222.110.150

🇺🇸 162.216.150.129

🇫🇮 147.185.133.233

🇺🇸 131.106.102.24

🇲🇾 113.23.225.9