JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a01:4020:31:0:102::1

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

100% Critical

48 reports

30 reporters · latest 3 days ago

ISP	Infrawatch Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25369
Domain Name	infrawat.ch
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a01:4020:31:0:102::1

Export CSV

This IP address has been reported a total of 48 times from 30 distinct sources. 2a01:4020:31:0:102::1 was first reported on September 19th 2026, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: Germany with 16 reports; United States of America with 15 reports; Finland with 3 reports. The most common categories in these recent reports were: Port Scan 43 times; Hacking 8 times; Brute-Force 4 times; Spoofing 2 times; Phishing 2 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-30 10:26:44 (3 days ago)	Port Scanner	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-09-30 10:26:32 (3 days ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 2a01:4020:31:0:102::1 (IPv6) \| Port: N/A \| Country: Germany \| ISP: INFRAWATCH \| rDNS: None === TARGET === Host: insightvm.goline.ch \| IP: insightvm.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-09-30 12:26:31 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇩🇪 london2038.com	2026-09-30 10:08:57 (3 days ago)	Connection atttempts against closed TCP ports Sep 30 11:53:53 BLOCK SRC=2a01:4020:0031:0000:0102:000 ... show more Connection atttempts against closed TCP ports Sep 30 11:53:53 BLOCK SRC=2a01:4020:0031:0000:0102:0000:0000:0001 LEN=60 TC=40 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=26393 DPT=6969 WINDOW=65535 RES=0x00 SYN Sep 30 11:57:12 BLOCK SRC=2a01:4020:0031:0000:0102:0000:0000:0001 LEN=60 TC=40 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=34301 DPT=5684 WINDOW=65535 RES=0x00 SYN Sep 30 12:08:56 BLOCK SRC=2a01:4020:0031:0000:0102:0000:0000:0001 LEN=60 TC=40 HOPLIMIT=57 FLOWLBL=0 PROTO=TCP SPT=27701 DPT=5061 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇩🇪 mattk	2026-09-30 10:06:54 (3 days ago)	port scan	Port Scan
Anonymous	2026-09-30 09:53:59 (3 days ago)	Blocked by UFW [5269/tcp] \| SPT: 44876 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [5269/tcp] \| SPT: 44876 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-30 09:52:12 (3 days ago)	Blocked by UFW (TCP on 32683) Source port: 55700 Packet length: 60 This report (for 2a01:4020:0031: ... show more Blocked by UFW (TCP on 32683) Source port: 55700 Packet length: 60 This report (for 2a01:4020:0031:0000:0102:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Blinker73	2026-09-30 09:37:03 (3 days ago)	2026-09-30T05:36 kernel: OUT= SRC=2a01:4020:0031:0000:0102:0000:0000:0001 LEN=60 TC=0 HOPLIMIT ... show more 2026-09-30T05:36 kernel: OUT= SRC=2a01:4020:0031:0000:0102:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=48 FLOWLBL=0 PROTO=TCP SPT=36174 DPT=2095 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-30T05:37 kernel: OUT= SRC=2a01:4020:0031:0000:0102:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=48 FLOWLBL=0 PROTO=TCP SPT=42178 DPT=17 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 xmission.com	2026-09-30 09:36:19 (3 days ago)	Blocked by UFW (TCP on 5683) Source port: 51026 Packet length: 60 This report (for 2a01:4020:0031:0 ... show more Blocked by UFW (TCP on 5683) Source port: 51026 Packet length: 60 This report (for 2a01:4020:0031:0000:0102:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 LotPhantom	2026-09-28 09:27:36 (5 days ago)	2026-09-28T09:27:36.513066+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-28T09:27:36.513066+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a01:4020:0031:0000:0102:0000:0000:0001 DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=40 HOPLIMIT=53 FLOWLBL=0 PROTO=TCP SPT=22862 DPT=6018 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 xmission.com	2026-09-28 09:27:20 (5 days ago)	Blocked by UFW (TCP on 322) Source port: 63319 Packet length: 60 This report (for 2a01:4020:0031:00 ... show more Blocked by UFW (TCP on 322) Source port: 63319 Packet length: 60 This report (for 2a01:4020:0031:0000:0102:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 chronos	2026-09-28 06:30:43 (5 days ago)	[AUTORAVALT][[28/09/2026 - 03:30:43 -03:00 UTC] Attack from [2a01:4020:31:0:102::1] Action: BLocKed ... show more [AUTORAVALT][[28/09/2026 - 03:30:43 -03:00 UTC] Attack from [2a01:4020:31:0:102::1] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force attacks on we] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇬🇧 openstrike.co.uk	2026-09-26 13:09:48 (1 week ago)	39 packets to ports 79 81 137 322 548 789 1505 1965 2053 2101 2152 2193 2598 3308 3671 4500 4840 509 ... show more 39 packets to ports 79 81 137 322 548 789 1505 1965 2053 2101 2152 2193 2598 3308 3671 4500 4840 5094 5684 5986 6004 6018 6049 6443 6653 6699 7777 8001 8010 8880 8883 9080 10333 14440 20000 37443 47808 48898 55555 show less	Port Scan
🇮🇹 matthew_eli	2026-09-25 09:45:11 (1 week ago)	Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (55 hits in 24h ... show more Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (55 hits in 24h). show less	Port Scan
Anonymous	2026-09-25 09:17:45 (1 week ago)	Blocked by UFW [322/tcp] \| SPT: 22844 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/se ... show more Blocked by UFW [322/tcp] \| SPT: 22844 \| TTL: null \| LEN: 60 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-25 09:15:50 (1 week ago)	Blocked by UFW (TCP on 110) Source port: 17520 Packet length: 60 This report (for 2a01:4020:0031:00 ... show more Blocked by UFW (TCP on 110) Source port: 17520 Packet length: 60 This report (for 2a01:4020:0031:0000:0102:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.179.117.8

🇳🇱 195.178.110.217

🇩🇪 167.94.145.30

🇺🇸 91.230.168.162

🇨🇭 83.228.227.141

🇺🇸 172.121.219.123

🇨🇳 140.246.70.45

🇰🇷 121.184.144.232

🇨🇳 112.86.225.100

🇭🇰 103.210.21.178

🇮🇳 59.184.182.151

🇮🇳 49.37.225.243

🇳🇱 34.6.16.227

🇨🇦 15.235.81.212

🇵🇸 217.66.242.112

🇺🇦 178.137.8.234

🇮🇳 176.227.240.46

🇻🇳 113.161.66.110

🇮🇳 103.248.120.6

🇮🇳 103.104.112.8