JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a01:4020:2:b:101::12

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

100% Critical

43 reports

28 reporters · latest 1 day ago

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a01:4020:2:b:101::12

This IP address has been reported a total of 43 times from 28 distinct sources. 2a01:4020:2:b:101::12 was first reported on September 21st 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 16 reports; United States of America with 9 reports; Finland with 4 reports. The most common categories in these recent reports were: Port Scan 36 times; Hacking 6 times; Brute-Force 5 times; Email Spam 2 times; Spoofing 2 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-09-28 06:30:17 (1 day ago)	[AUTORAVALT][[28/09/2026 - 03:30:16 -03:00 UTC] Attack from [2a01:4020:2:b:101::12] Action: BLocKed ... show more [AUTORAVALT][[28/09/2026 - 03:30:16 -03:00 UTC] Attack from [2a01:4020:2:b:101::12] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force attacks on we] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇮🇹 matthew_eli	2026-09-27 12:45:11 (1 day ago)	Keenetic Firewall: Blocked Traffic (No Port Detected - likely UDP). Blocked 123 times in last 24h.	Port Scan
🇬🇧 Axel	2026-09-27 12:37:40 (1 day ago)	Blocked by UFW on BGPGB [2077/tcp] \| SPT: 30361 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: git ... show more Blocked by UFW on BGPGB [2077/tcp] \| SPT: 30361 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-09-27 12:35:45 (1 day ago)	Connection atttempts against closed TCP ports Sep 27 14:32:08 BLOCK SRC=2a01:4020:0002:000b:0101:000 ... show more Connection atttempts against closed TCP ports Sep 27 14:32:08 BLOCK SRC=2a01:4020:0002:000b:0101:0000:0000:0012 LEN=60 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=TCP SPT=23508 DPT=6005 WINDOW=65535 RES=0x00 SYN Sep 27 14:34:43 BLOCK SRC=2a01:4020:0002:000b:0101:0000:0000:0012 LEN=60 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=TCP SPT=55994 DPT=6056 WINDOW=65535 RES=0x00 SYN Sep 27 14:35:44 BLOCK SRC=2a01:4020:0002:000b:0101:0000:0000:0012 LEN=60 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=TCP SPT=50775 DPT=6002 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇫🇷 WebServ	2026-09-27 12:25:42 (1 day ago)	Fail2Ban jail [portscan-block]: banned after 5 failed attempt(s). Unauthorized port scan	Port Scan
🇫🇷 pm33	2026-09-27 12:19:14 (1 day ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇩🇪 DSK	2026-09-27 12:16:35 (1 day ago)	Unauthorized connection Drop [5269/tcp] #8683	Bad Web Bot
🇫🇮 Ticlem	2026-09-27 09:25:38 (2 days ago)	2026-09-27T11:16:16.943369+02:00 clement-turlure kernel: [11588.039041] [UFW BLOCK] IN=enp0s31f6 OUT ... show more 2026-09-27T11:16:16.943369+02:00 clement-turlure kernel: [11588.039041] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0002:000b:0101:0000:0000:0012 DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=TCP SPT=60424 DPT=6015 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-27T11:24:20.126266+02:00 clement-turlure kernel: [12071.208347] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0002:000b:0101:0000:0000:0012 DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=TCP SPT=34249 DPT=8291 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-27T11:25:37.803738+02:00 clement-turlure kernel: [12148.883066] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:86:dd SRC=2a01:4020:0002:000b:0101:0000:0000:0012 DST=2a01:04f9:002a:15ec:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=TCP SPT=55540 DPT=3000 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-27 09:22:57 (2 days ago)	Blocked by UFW [6042/tcp] \| SPT: 46211 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [6042/tcp] \| SPT: 46211 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-09-27 09:16:54 (2 days ago)	Connection atttempts against closed TCP ports Sep 27 11:15:24 BLOCK SRC=2a01:4020:0002:000b:0101:000 ... show more Connection atttempts against closed TCP ports Sep 27 11:15:24 BLOCK SRC=2a01:4020:0002:000b:0101:0000:0000:0012 LEN=60 TC=0 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=22575 DPT=6012 WINDOW=65535 RES=0x00 SYN Sep 27 11:16:14 BLOCK SRC=2a01:4020:0002:000b:0101:0000:0000:0012 LEN=60 TC=0 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=30512 DPT=6021 WINDOW=65535 RES=0x00 SYN Sep 27 11:16:53 BLOCK SRC=2a01:4020:0002:000b:0101:0000:0000:0012 LEN=60 TC=0 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=51088 DPT=135 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇺🇸 xmission.com	2026-09-27 09:14:31 (2 days ago)	Blocked by UFW (TCP on 10011) Source port: 27423 Packet length: 60 This report (for 2a01:4020:0002: ... show more Blocked by UFW (TCP on 10011) Source port: 27423 Packet length: 60 This report (for 2a01:4020:0002:000b:0101:0000:0000:0012) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-27 09:09:08 (2 days ago)	Unauthorized connection to RDP port 3389	Port Scan
Anonymous	2026-09-27 09:09:06 (2 days ago)	Port Scan	Port Scan
🇺🇸 LotPhantom	2026-09-27 09:07:15 (2 days ago)	2026-09-27T09:00:34.270677+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-27T09:00:34.270677+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0002:000b:0101:0000:0000:0012 DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=59627 DPT=9570 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-27T09:07:14.112950+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0002:000b:0101:0000:0000:0012 DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=48283 DPT=1911 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 chronos	2026-09-27 09:03:30 (2 days ago)	[AUTORAVALT][[27/09/2026 - 06:03:30 -03:00 UTC] Attack from [2a01:4020:2:b:101::12] Action: BLocKed ... show more [AUTORAVALT][[27/09/2026 - 06:03:30 -03:00 UTC] Attack from [2a01:4020:2:b:101::12] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force attacks on we] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:fb5::77

🇺🇸 205.210.31.30

🇺🇦 188.163.105.218

🇧🇷 187.9.232.170

🇳🇱 45.148.10.171

🇨🇳 218.17.163.229

🇩🇪 213.209.159.223

🇪🇬 197.63.166.132

🇺🇸 191.96.106.158

🇧🇷 172.69.11.240

🇻🇳 116.109.216.74

🇩🇪 62.80.98.102

🇯🇵 35.221.100.163

🇩🇪 31.70.123.22

🇮🇪 20.13.164.162

🇻🇳 14.225.218.99

🇮🇱 2a06:c701:9cf0:6000:18da:7044:ed42:6d3d

🇺🇸 2607:ff10:c8:594::6

🇹🇼 198.235.24.103

🇺🇸 192.30.83.224