JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a01:4020:31:0:101::d

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

100% Critical

30 reports

24 reporters · latest 1 day ago

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a01:4020:31:0:101::d

This IP address has been reported a total of 30 times from 24 distinct sources. 2a01:4020:31:0:101::d was first reported on September 23rd 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: United States of America with 9 reports; Germany with 8 reports; Japan with 3 reports. The most common categories in these recent reports were: Port Scan 24 times; Hacking 5 times; Bad Web Bot 3 times; Web App Attack 2 times; SSH 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-09-26 13:09:41 (1 day ago)	21 packets to ports 1435 2095 2401 3690 5500 5683 6018 6025 6043 7000 7687 8333 8883 9333 10012 1913 ... show more 21 packets to ports 1435 2095 2401 3690 5500 5683 6018 6025 6043 7000 7687 8333 8883 9333 10012 19132 20000 20547 44818 58000 show less	Port Scan
🇩🇰 SaltySoftworks	2026-09-26 12:53:45 (1 day ago)	2026-09-26T12:52:37.299339+00:00 kernel: TCP Attack: SRC=2a01:4020:0031:0000:0101:0000:0000:000d DS ... show more 2026-09-26T12:52:37.299339+00:00 kernel: TCP Attack: SRC=2a01:4020:0031:0000:0101:0000:0000:000d DST=[Masked]0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=42216 DPT=2087 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot Web App Attack
🇵🇹 WebTejo	2026-09-26 12:51:29 (1 day ago)	Detected multiple authentication failures and invalid user attempts in PS_LIMIT from IP address 2a01 ... show more Detected multiple authentication failures and invalid user attempts in PS_LIMIT from IP address 2a01:4020:31:0:101::d on [PT] Tucano Node. show less	Brute-Force SSH
🇩🇪 london2038.com	2026-09-26 12:49:17 (1 day ago)	Connection atttempts against closed TCP ports Sep 26 14:40:57 BLOCK SRC=2a01:4020:0031:0000:0101:000 ... show more Connection atttempts against closed TCP ports Sep 26 14:40:57 BLOCK SRC=2a01:4020:0031:0000:0101:0000:0000:000d LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=33987 DPT=6049 WINDOW=65535 RES=0x00 SYN Sep 26 14:44:05 BLOCK SRC=2a01:4020:0031:0000:0101:0000:0000:000d LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=57829 DPT=9333 WINDOW=65535 RES=0x00 SYN Sep 26 14:49:16 BLOCK SRC=2a01:4020:0031:0000:0101:0000:0000:000d LEN=60 TC=0 HOPLIMIT=59 FLOWLBL=0 PROTO=TCP SPT=24309 DPT=11112 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇺🇸 en0	2026-09-26 12:47:39 (1 day ago)	2a01:4020:0031:0000:0101:0000:0000:000d was recorded 3 times by 1 hosts attempting to connect to 3 u ... show more 2a01:4020:0031:0000:0101:0000:0000:000d was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 10 show less	Port Scan
🇬🇧 Axel	2026-09-26 12:42:04 (1 day ago)	Blocked by UFW on BGPGB [2095/tcp] \| SPT: 37562 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: git ... show more Blocked by UFW on BGPGB [2095/tcp] \| SPT: 37562 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 DSK	2026-09-26 12:21:49 (1 day ago)	Unauthorized connection Drop [1762/tcp] #7417	Bad Web Bot
🇩🇪 london2038.com	2026-09-26 09:36:35 (1 day ago)	Connection atttempts against closed TCP ports Sep 26 11:34:35 BLOCK SRC=2a01:4020:0031:0000:0101:000 ... show more Connection atttempts against closed TCP ports Sep 26 11:34:35 BLOCK SRC=2a01:4020:0031:0000:0101:0000:0000:000d LEN=60 TC=40 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=55619 DPT=7000 WINDOW=65535 RES=0x00 SYN Sep 26 11:36:23 BLOCK SRC=2a01:4020:0031:0000:0101:0000:0000:000d LEN=60 TC=40 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=38564 DPT=6809 WINDOW=65535 RES=0x00 SYN Sep 26 11:36:34 BLOCK SRC=2a01:4020:0031:0000:0101:0000:0000:000d LEN=60 TC=40 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=42331 DPT=1884 WINDOW=65535 RES=0x00 SYN show less	Port Scan
Anonymous	2026-09-26 09:26:22 (1 day ago)	Port Scanner	Port Scan
Anonymous	2026-09-26 09:21:00 (1 day ago)	Blocked by UFW [3478/tcp] \| SPT: 48246 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [3478/tcp] \| SPT: 48246 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-26 09:19:51 (1 day ago)	Blocked by UFW (TCP on 8081) Source port: 19719 Packet length: 60 This report (for 2a01:4020:0031:0 ... show more Blocked by UFW (TCP on 8081) Source port: 19719 Packet length: 60 This report (for 2a01:4020:0031:0000:0101:0000:0000:000d) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Blinker73	2026-09-26 09:14:30 (1 day ago)	2026-09-26T05:05 kernel: OUT= SRC=2a01:4020:0031:0000:0101:0000:0000:000d LEN=60 TC=0 HOPLIMIT ... show more 2026-09-26T05:05 kernel: OUT= SRC=2a01:4020:0031:0000:0101:0000:0000:000d LEN=60 TC=0 HOPLIMIT=47 FLOWLBL=0 PROTO=TCP SPT=26108 DPT=6023 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-26T05:11 kernel: OUT= SRC=2a01:4020:0031:0000:0101:0000:0000:000d LEN=60 TC=0 HOPLIMIT=48 FLOWLBL=0 PROTO=TCP SPT=47201 DPT=3493 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-09-26 09:09:06 (1 day ago)	Port Scan	Port Scan
🇺🇸 LotPhantom	2026-09-26 09:08:04 (1 day ago)	2026-09-26T09:08:04.650405+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-26T09:08:04.650405+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0031:0000:0101:0000:0000:000d DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=65330 DPT=5351 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 xmission.com	2026-09-26 09:04:21 (1 day ago)	Blocked by UFW (TCP on 322) Source port: 63666 Packet length: 60 This report (for 2a01:4020:0031:00 ... show more Blocked by UFW (TCP on 322) Source port: 63666 Packet length: 60 This report (for 2a01:4020:0031:0000:0101:0000:0000:000d) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 2a02:5b41:4:409::3b

🇺🇸 2603:3:6101:f6b0::

🇩🇪 159.89.105.69

🇺🇸 40.67.172.96

🇳🇱 34.7.201.134

🇺🇸 3.86.210.219

🇷🇺 2a02:6b8::2eb

🇯🇵 2400:8500:2002:3177:160:251:210:23

🇰🇷 218.152.149.211

🇰🇷 218.146.163.192

🇺🇸 216.73.160.28

🇺🇸 216.25.89.102

🇬🇧 193.163.125.185

🇬🇧 141.101.99.205

🇮🇳 103.206.227.122

🇰🇬 85.113.1.243

🇺🇸 70.184.13.219

🇺🇸 65.49.1.218

🇬🇧 35.189.90.37

🇨🇳 27.19.6.75