JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4020:1:1:103::599

2a01:4020:1:1:103::599 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4020:1:1:103::599

Whois 2a01:4020:1:1:103::599

IP Abuse Reports for 2a01:4020:1:1:103::599:

This IP address has been reported a total of 35 times from 27 distinct sources. 2a01:4020:1:1:103::599 was first reported on September 15th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Zarla	2026-09-17 19:22:02 (18 hours ago)	Scan or attack attempt on email service.	Email Spam Port Scan Brute-Force
🇫🇮 6kilowatti	2026-09-16 12:19:02 (2 days ago)	2026-09-16T15:19:01.510871+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-16T15:19:01.510871+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0599 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=38587 DPT=11112 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 london2038.com	2026-09-16 12:16:35 (2 days ago)	Connection atttempts against closed TCP ports Sep 16 14:04:35 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 16 14:04:35 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0599 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=59666 DPT=6039 WINDOW=65535 RES=0x00 SYN Sep 16 14:10:10 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0599 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=43782 DPT=1505 WINDOW=65535 RES=0x00 SYN Sep 16 14:16:35 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0599 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=29204 DPT=7200 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇩🇪 HoneyPot-FrPri	2026-09-16 12:15:27 (2 days ago)	Sep 16 14:15:27 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, ... show more Sep 16 14:15:27 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a01:4020:1:1:103::599, lip=2a0f:5707:aaf1:bbab::1, session=<Qhdhn5hb0bgqAUAgAAEAAQEDAAAAAAWZ> ... show less	Email Spam Brute-Force
🇩🇪 Blexyel	2026-09-16 12:06:21 (2 days ago)	tcp/25565 abuse detected for ip=2a01:4020:1:1:103::599 ...	Port Scan Hacking Brute-Force
Anonymous	2026-09-16 12:01:44 (2 days ago)	Fail2Ban triggered	Spoofing Port Scan
🇩🇪 gnb	2026-09-16 11:55:13 (2 days ago)	2026-09-16T13:48:28.021211+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020 ... show more 2026-09-16T13:48:28.021211+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:0599 DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=18092 DPT=502 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-16T13:49:28.792500+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:0599 DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=21593 DPT=6061 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-16T13:55:12.381218+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:0599 DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=61465 DPT=79 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇹 matthew_eli	2026-09-16 09:45:08 (2 days ago)	Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (31 hits in 24h ... show more Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (31 hits in 24h). show less	Port Scan
Anonymous	2026-09-16 09:10:15 (2 days ago)	Blocked by UFW [6062/tcp] \| SPT: 35134 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [6062/tcp] \| SPT: 35134 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 Ticlem	2026-09-16 09:00:56 (2 days ago)	2026-09-16T10:55:56.118467+02:00 clement-turlure kernel: [10555198.878748] [UFW BLOCK] IN=enp0s31f6 ... show more 2026-09-16T10:55:56.118467+02:00 clement-turlure kernel: [10555198.878748] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0599 DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=63275 DPT=3493 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-16T10:57:56.237408+02:00 clement-turlure kernel: [10555318.998797] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0599 DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=17099 DPT=4500 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-16T11:00:55.372884+02:00 clement-turlure kernel: [10555498.135869] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0599 DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=36239 DPT=6809 WINDOW=65535 RES=0x00 SYN ... show less	Port Scan
🇺🇸 LotPhantom	2026-09-16 08:51:42 (2 days ago)	2026-09-16T08:51:42.105633+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-16T08:51:42.105633+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0599 DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=32255 DPT=31416 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
Anonymous	2026-09-16 08:39:19 (2 days ago)	...	Bad Web Bot
🇺🇸 xmission.com	2026-09-16 08:39:06 (2 days ago)	Blocked by UFW (TCP on 8080) Source port: 53525 Packet length: 60 This report (for 2a01:4020:0001:0 ... show more Blocked by UFW (TCP on 8080) Source port: 53525 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:0599) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇯🇵 sayz	2026-09-16 06:50:07 (2 days ago)	Unauthorized connection attempt detected from 2a01:4020:1:1:103::599 to TCP port 8090	Port Scan
🇭🇰 PingMeMaybe	2026-09-16 06:48:35 (2 days ago)	Blocked by UFW on hk [3493/tcp] Source port: 17050 TTL: null Packet length: 60 TOS: null This repor ... show more Blocked by UFW on hk [3493/tcp] Source port: 17050 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 141.95.162.162

🇨🇳 122.96.50.241

🇨🇦 85.217.149.48

🇺🇸 168.91.173.57

🇨🇭 141.255.164.75

🇵🇱 109.205.211.23

🇫🇷 91.196.152.205

🇺🇸 45.74.252.82

🇮🇳 34.180.20.66

🇧🇷 187.182.236.128

🇩🇪 185.168.30.196

🇺🇦 185.96.30.2

🇦🇱 185.80.227.47

🇳🇬 102.90.123.54

🇩🇪 69.5.169.10

🇳🇱 45.198.224.32

🇷🇺 45.9.75.8

🇲🇦 41.249.49.174

🇺🇸 40.119.26.27

🇬🇧 35.203.210.206