JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4020:1:1:103::5db

2a01:4020:1:1:103::5db was found in our database!

This IP was reported 23 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4020:1:1:103::5db

Whois 2a01:4020:1:1:103::5db

IP Abuse Reports for 2a01:4020:1:1:103::5db:

This IP address has been reported a total of 23 times from 21 distinct sources. 2a01:4020:1:1:103::5db was first reported on September 17th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HoneyPot-FrPri	2026-09-17 12:43:12 (5 hours ago)	Sep 17 14:43:11 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, ... show more Sep 17 14:43:11 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a01:4020:1:1:103::5db, lip=2a0f:5707:aaf1:bbab::1, session=<uIJrIK1bDLAqAUAgAAEAAQEDAAAAAAXb> ... show less	Email Spam Brute-Force
🇩🇰 SaltySoftworks	2026-09-17 12:36:15 (5 hours ago)	2026-09-17T12:34:10.658564+00:00 kernel: TCP Attack: SRC=2a01:4020:0001:0001:0103:0000:0000:05db DS ... show more 2026-09-17T12:34:10.658564+00:00 kernel: TCP Attack: SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=[Masked]0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=50 FLOWLBL=0 PROTO=TCP SPT=57524 DPT=1761 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot Web App Attack
🇫🇮 6kilowatti	2026-09-17 12:29:00 (5 hours ago)	2026-09-17T15:28:59.650152+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-17T15:28:59.650152+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=20583 DPT=5684 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 gnb	2026-09-17 12:14:03 (5 hours ago)	2026-09-17T14:11:43.193402+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020 ... show more 2026-09-17T14:11:43.193402+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=(redacted) LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=19481 DPT=47001 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-17T14:12:04.749194+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=(redacted) LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=24824 DPT=55555 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-17T14:14:03.545513+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=46800 DPT=5094 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 6kilowatti	2026-09-17 12:11:47 (5 hours ago)	2026-09-17T15:11:46.569543+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-09-17T15:11:46.569543+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=2a03:50a0:0014:0075:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=51 FLOWLBL=0 PROTO=TCP SPT=32702 DPT=6028 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇹 matthew_eli	2026-09-17 09:45:06 (8 hours ago)	Keenetic Firewall: Blocked Traffic (No Port Detected - likely UDP). Blocked 37 times in last 24h.	Port Scan
Anonymous	2026-09-17 09:26:44 (8 hours ago)	Port Scanner	Port Scan
Anonymous	2026-09-17 09:12:28 (8 hours ago)	Blocked by UFW [6031/tcp] \| SPT: 53086 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [6031/tcp] \| SPT: 53086 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 SysAdmin Dylan	2026-09-17 09:11:33 (8 hours ago)	Port Scan detected from 2a01:4020:1:1:103::5db (Unknown). 11 hits in the last 229 seconds	Brute-Force
Anonymous	2026-09-17 09:09:08 (8 hours ago)	Unauthorized connection to RDP port 3389	Port Scan
Anonymous	2026-09-17 09:09:06 (8 hours ago)	Port Scan	Port Scan
🇫🇮 Ticlem	2026-09-17 08:56:49 (8 hours ago)	2026-09-17T10:56:11.807863+02:00 clement-turlure kernel: [10641615.238050] [UFW BLOCK] IN=enp0s31f6 ... show more 2026-09-17T10:56:11.807863+02:00 clement-turlure kernel: [10641615.238050] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=21535 DPT=1965 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-17T10:56:17.298952+02:00 clement-turlure kernel: [10641620.729160] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=59175 DPT=5631 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-17T10:56:48.832676+02:00 clement-turlure kernel: [10641652.262354] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=28256 DPT=2101 WINDOW=65535 RES=0x00 SYN ... show less	Port Scan
🇺🇸 xmission.com	2026-09-17 08:56:06 (8 hours ago)	Blocked by UFW (TCP on 48899) Source port: 32330 Packet length: 60 This report (for 2a01:4020:0001: ... show more Blocked by UFW (TCP on 48899) Source port: 32330 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:05db) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-09-17 08:53:10 (8 hours ago)	2a01:4020:0001:0001:0103:0000:0000:05db was recorded 3 times by 1 hosts attempting to connect to 3 u ... show more 2a01:4020:0001:0001:0103:0000:0000:05db was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 3 show less	Port Scan
🇺🇸 LotPhantom	2026-09-17 08:52:52 (8 hours ago)	2026-09-17T08:45:17.010124+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-17T08:45:17.010124+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=63284 DPT=9333 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-17T08:52:51.443680+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:05db DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=16642 DPT=6021 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇪 197.232.56.34

🇺🇸 162.216.149.137

🇺🇸 162.216.149.38

🇨🇳 111.32.153.180

🇩🇪 94.156.114.92

🇷🇺 78.138.168.46

🇺🇸 45.33.54.78

🇹🇷 31.223.89.160

🇺🇸 8.228.243.253

🇳🇮 208.96.134.49

🇺🇸 193.36.224.143

🇺🇸 165.232.144.71

🇭🇰 119.28.133.226

🇺🇸 66.132.186.209

🇺🇸 35.188.128.26

🇨🇴 190.99.136.136

🇭🇰 154.221.20.92

🇻🇳 103.28.37.12

🇺🇸 66.132.195.61

🇫🇷 5.39.10.241