JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4020:1:1:103::648

2a01:4020:1:1:103::648 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4020:1:1:103::648

Whois 2a01:4020:1:1:103::648

IP Abuse Reports for 2a01:4020:1:1:103::648:

This IP address has been reported a total of 37 times from 27 distinct sources. 2a01:4020:1:1:103::648 was first reported on September 8th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Axel	2026-09-16 12:16:13 (1 day ago)	Blocked by UFW on BGPGB [6049/tcp] \| SPT: 17504 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: git ... show more Blocked by UFW on BGPGB [6049/tcp] \| SPT: 17504 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇹 WebTejo	2026-09-16 12:15:59 (1 day ago)	Detected multiple authentication failures and invalid user attempts in PS_LIMIT from IP address 2a01 ... show more Detected multiple authentication failures and invalid user attempts in PS_LIMIT from IP address 2a01:4020:1:1:103::648 on [PT] Tucano Node. show less	Brute-Force SSH
🇫🇮 6kilowatti	2026-09-16 12:14:19 (1 day ago)	2026-09-16T15:14:18.848988+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-16T15:14:18.848988+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0648 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=49 FLOWLBL=0 PROTO=TCP SPT=17400 DPT=888 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 en0	2026-09-16 12:05:50 (1 day ago)	2a01:4020:0001:0001:0103:0000:0000:0648 was recorded 3 times by 2 hosts attempting to connect to 3 u ... show more 2a01:4020:0001:0001:0103:0000:0000:0648 was recorded 3 times by 2 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 4 show less	Port Scan
🇩🇪 gnb	2026-09-16 11:53:48 (1 day ago)	2026-09-16T13:48:38.121203+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020 ... show more 2026-09-16T13:48:38.121203+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:0648 DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=46871 DPT=6051 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-16T13:50:09.361243+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:0648 DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=16677 DPT=1217 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-16T13:53:48.261207+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0001:0001:0103:0000:0000:0648 DST=(redacted) LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=21718 DPT=322 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇹 matthew_eli	2026-09-16 09:45:06 (1 day ago)	Keenetic Firewall: Blocked Traffic (No Port Detected - likely UDP). Blocked 39 times in last 24h.	Port Scan
Anonymous	2026-09-16 09:10:04 (1 day ago)	Blocked by UFW [5900/tcp] \| SPT: 49786 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [5900/tcp] \| SPT: 49786 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-16 09:09:12 (1 day ago)	Unauthorized connection to SSH port 22	Port Scan SSH
Anonymous	2026-09-16 09:09:06 (1 day ago)	Port Scan	Port Scan
🇩🇪 london2038.com	2026-09-16 09:08:36 (1 day ago)	Connection atttempts against closed TCP ports Sep 16 10:54:25 BLOCK SRC=2a01:4020:0001:0001:0103:000 ... show more Connection atttempts against closed TCP ports Sep 16 10:54:25 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0648 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=60574 DPT=6003 WINDOW=65535 RES=0x00 SYN Sep 16 11:04:56 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0648 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=19777 DPT=6021 WINDOW=65535 RES=0x00 SYN Sep 16 11:08:36 BLOCK SRC=2a01:4020:0001:0001:0103:0000:0000:0648 LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=62911 DPT=6653 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇩🇪 Viveronese	2026-09-16 09:07:45 (1 day ago)	SASL LOGIN authentication failed	Brute-Force
🇫🇮 Ticlem	2026-09-16 09:02:56 (1 day ago)	2026-09-16T10:54:14.281585+02:00 clement-turlure kernel: [10555097.040428] [UFW BLOCK] IN=enp0s31f6 ... show more 2026-09-16T10:54:14.281585+02:00 clement-turlure kernel: [10555097.040428] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0648 DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=52447 DPT=8081 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-16T10:56:14.399956+02:00 clement-turlure kernel: [10555217.160409] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0648 DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=55423 DPT=8880 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-16T11:02:55.491216+02:00 clement-turlure kernel: [10555618.255264] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0648 DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=56 FLOWLBL=0 PROTO=TCP SPT=39232 DPT=7946 WINDOW=65535 RES=0x00 SYN ... show less	Port Scan
🇺🇸 drewf.ink	2026-09-16 08:51:33 (1 day ago)	[08:51] Port scanning. Port(s) scanned: TCP/123, TCP/554	Port Scan
🇺🇸 LotPhantom	2026-09-16 08:47:14 (1 day ago)	2026-09-16T08:47:14.598443+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-16T08:47:14.598443+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0001:0001:0103:0000:0000:0648 DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=18785 DPT=19 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 xmission.com	2026-09-16 08:40:12 (1 day ago)	Blocked by UFW (TCP on 17) Source port: 42042 Packet length: 60 This report (for 2a01:4020:0001:000 ... show more Blocked by UFW (TCP on 17) Source port: 42042 Packet length: 60 This report (for 2a01:4020:0001:0001:0103:0000:0000:0648) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 194.153.198.230

🇺🇸 70.123.4.193

🇺🇸 216.25.89.88

🇧🇷 205.210.31.232

🇺🇦 195.18.19.30

🇺🇸 172.56.233.160

🇺🇸 157.230.234.202

🇭🇰 103.182.96.231

🇺🇸 99.121.112.251

🇺🇸 47.251.165.50

🇲🇾 47.250.161.217

🇺🇸 45.156.129.62

🇹🇷 45.147.46.223

🇺🇸 45.79.181.223

🇺🇸 216.25.89.110

🇳🇱 193.142.146.201

🇲🇾 183.171.41.110

🇷🇺 178.204.251.124

🇮🇳 165.22.215.77

🇨🇳 139.226.28.157