JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a01:4020:2:b:101::6

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

100% Critical

65 reports

27 reporters · latest 1 hour ago

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a01:4020:2:b:101::6

This IP address has been reported a total of 65 times from 27 distinct sources. 2a01:4020:2:b:101::6 was first reported on September 21st 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: Germany with 27 reports; United States of America with 14 reports; Japan with 6 reports. The most common categories in these recent reports were: Port Scan 51 times; Bad Web Bot 9 times; Hacking 5 times; Web App Attack 3 times; Brute-Force 3 times; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bontekoe.technology	2026-09-30 13:58:18 (1 day ago)	Port scan or Brute-Force detected. (src_port=36271, dst_port=6028)	Brute-Force
🇫🇷 pm33	2026-09-30 13:31:43 (1 day ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇩🇪 london2038.com	2026-09-30 13:29:19 (1 day ago)	Connection atttempts against closed TCP ports Sep 30 15:28:39 BLOCK SRC=2a01:4020:0002:000b:0101:000 ... show more Connection atttempts against closed TCP ports Sep 30 15:28:39 BLOCK SRC=2a01:4020:0002:000b:0101:0000:0000:0006 LEN=60 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=TCP SPT=29003 DPT=3690 WINDOW=65535 RES=0x00 SYN Sep 30 15:28:58 BLOCK SRC=2a01:4020:0002:000b:0101:0000:0000:0006 LEN=60 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=TCP SPT=18212 DPT=6019 WINDOW=65535 RES=0x00 SYN Sep 30 15:29:18 BLOCK SRC=2a01:4020:0002:000b:0101:0000:0000:0006 LEN=60 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=TCP SPT=56573 DPT=7001 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇺🇸 en0	2026-09-30 13:27:21 (1 day ago)	2a01:4020:0002:000b:0101:0000:0000:0006 was recorded 3 times by 1 hosts attempting to connect to 3 u ... show more 2a01:4020:0002:000b:0101:0000:0000:0006 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 20 show less	Port Scan
🇩🇰 SaltySoftworks	2026-09-30 13:26:50 (1 day ago)	2026-09-30T13:25:57.539362+00:00 kernel: TCP Attack: SRC=2a01:4020:0002:000b:0101:0000:0000:0006 DS ... show more 2026-09-30T13:25:57.539362+00:00 kernel: TCP Attack: SRC=2a01:4020:0002:000b:0101:0000:0000:0006 DST=[Masked]0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=51 FLOWLBL=0 PROTO=TCP SPT=60417 DPT=322 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot Web App Attack
🇩🇪 DSK	2026-09-30 13:25:04 (1 day ago)	Unauthorized connection Drop [2404/tcp] #14227	Bad Web Bot
🇩🇪 gnb	2026-09-30 13:16:25 (1 day ago)	2026-09-30T15:08:49.519047+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020 ... show more 2026-09-30T15:08:49.519047+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0002:000b:0101:0000:0000:0006 DST=(redacted) LEN=60 TC=0 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=38995 DPT=9600 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-30T15:10:04.605595+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0002:000b:0101:0000:0000:0006 DST=(redacted) LEN=60 TC=0 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=37019 DPT=6016 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-30T15:16:24.901217+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a01:4020:0002:000b:0101:0000:0000:0006 DST=(redacted) LEN=60 TC=0 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=61309 DPT=5500 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 DSK	2026-09-30 13:08:57 (1 day ago)	Unauthorized connection Drop [9443/tcp] #14163	Bad Web Bot
🇺🇸 en0	2026-09-29 13:15:05 (2 days ago)	2a01:4020:0002:000b:0101:0000:0000:0006 was recorded 3 times by 1 hosts attempting to connect to 3 u ... show more 2a01:4020:0002:000b:0101:0000:0000:0006 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 15 show less	Port Scan
🇩🇰 SaltySoftworks	2026-09-29 13:13:36 (2 days ago)	2026-09-29T13:11:43.733255+00:00 kernel: TCP Attack: SRC=2a01:4020:0002:000b:0101:0000:0000:0006 DS ... show more 2026-09-29T13:11:43.733255+00:00 kernel: TCP Attack: SRC=2a01:4020:0002:000b:0101:0000:0000:0006 DST=[Masked]0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=51 FLOWLBL=0 PROTO=TCP SPT=44231 DPT=1762 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot Web App Attack
🇫🇷 WebServ	2026-09-29 13:05:12 (2 days ago)	Fail2Ban jail [portscan-block]: banned after 5 failed attempt(s). Unauthorized port scan	Port Scan
🇫🇮 6kilowatti	2026-09-29 12:56:18 (2 days ago)	2026-09-29T15:56:18.162262+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-09-29T15:56:18.162262+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:86:dd SRC=2a01:4020:0002:000b:0101:0000:0000:0006 DST=2a03:50a0:0102:6b00:6a55:d21d:e6d1:3f80 LEN=60 TC=0 HOPLIMIT=51 FLOWLBL=0 PROTO=TCP SPT=18742 DPT=6004 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 DSK	2026-09-29 12:49:55 (2 days ago)	Unauthorized connection Drop [34964/tcp] #13631	Bad Web Bot
🇺🇸 en0	2026-09-27 12:46:48 (4 days ago)	2a01:4020:0002:000b:0101:0000:0000:0006 was recorded 3 times by 2 hosts attempting to connect to 3 u ... show more 2a01:4020:0002:000b:0101:0000:0000:0006 was recorded 3 times by 2 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 4, 11 show less	Port Scan
🇮🇹 matthew_eli	2026-09-27 12:45:09 (4 days ago)	Keenetic Firewall: Blocked Traffic (No Port Detected - likely UDP). Blocked 127 times in last 24h.	Port Scan

Showing 16 to 30 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.199.72.117

🇳🇱 138.226.239.234

🇳🇱 77.239.124.185

🇧🇷 45.231.155.147

🇲🇽 189.190.143.229

🇵🇰 111.92.155.54

🇲🇦 102.102.15.222

🇹🇷 95.6.255.229

🇷🇺 89.109.50.49

🇧🇬 79.124.62.230

🇦🇷 45.71.155.157

🇧🇷 205.210.31.242

🇨🇱 201.189.187.137

🇷🇺 185.50.25.47

🇨🇭 178.174.50.100

🇻🇪 38.74.249.155

🇺🇸 21.19.160.73

🇺🇸 208.84.66.46

🇦🇷 201.180.138.187

🇹🇿 197.186.0.28