JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c6a0:4001:b000::ff

2a02:c6a0:4001:b000::ff

Neutral Activity IPv6 SLAAC Note

1,290 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

FH Muenster

Usage Type

University/College/School

ASN

AS680

Hostname(s)

fb02itsscan02.fh-muenster.de

Domain Name

fh-muenster.de

Country

🇩🇪 Germany

City

Munster, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a02:c6a0:4001:b000::ff has been reported 1,290 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a02:c6a0:4001:b000::ff:

This IP address has been reported a total of 1,290 times from 105 distinct sources. 2a02:c6a0:4001:b000::ff was first reported on April 13th 2025, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Admins@FBN	2026-03-10 20:34:02 (5 months ago)	FW-PortScan: Traffic Blocked srcport=58521 dstport=4242	Port Scan
Anonymous	2026-03-10 20:21:56 (5 months ago)	Shorewall log file match.	Port Scan
🇯🇵 Kinsei Engineering Inc.	2026-03-10 20:20:12 (5 months ago)	UFW:High-frequency access to unused ports	Port Scan
🇺🇸 xmission.com	2026-03-10 20:19:45 (5 months ago)	Blocked by UFW (TCP on 2761) Source port: 58425 Packet length: 60 This report (for 2a02:c6a0:4001:b ... show more Blocked by UFW (TCP on 2761) Source port: 58425 Packet length: 60 This report (for 2a02:c6a0:4001:b000:0000:0000:0000:00ff) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 gnb	2026-03-10 20:17:49 (5 months ago)	2026-03-10T21:17:48.661074+01:00 atlas kernel: [39012513.819654] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ... show more 2026-03-10T21:17:48.661074+01:00 atlas kernel: [39012513.819654] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a02:c6a0:4001:b000:0000:0000:0000:00ff DST=(redacted) LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=52417 DPT=104 WINDOW=65535 RES=0x00 SYN URGP=0 2026-03-10T21:17:48.661175+01:00 atlas kernel: [39012513.819700] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a02:c6a0:4001:b000:0000:0000:0000:00ff DST=(redacted) LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=52418 DPT=104 WINDOW=65535 RES=0x00 SYN URGP=0 2026-03-10T21:17:48.664155+01:00 atlas kernel: [39012513.820753] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=2a02:c6a0:4001:b000:0000:0000:0000:00ff DST=(redacted) LEN=60 TC=40 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=52419 DPT=104 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 london2038.com	2026-03-10 20:16:29 (5 months ago)	Connection atttempts against closed TCP ports Mar 10 21:16:27 BLOCK SRC=2a02:c6a0:4001:b000:0000:000 ... show more Connection atttempts against closed TCP ports Mar 10 21:16:27 BLOCK SRC=2a02:c6a0:4001:b000:0000:0000:0000:00ff LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=57137 DPT=104 WINDOW=65535 RES=0x00 SYN Mar 10 21:16:27 BLOCK SRC=2a02:c6a0:4001:b000:0000:0000:0000:00ff LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=57138 DPT=104 WINDOW=65535 RES=0x00 SYN Mar 10 21:16:27 BLOCK SRC=2a02:c6a0:4001:b000:0000:0000:0000:00ff LEN=60 TC=0 HOPLIMIT=55 FLOWLBL=0 PROTO=TCP SPT=57136 DPT=104 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇺🇸 en0	2026-03-10 20:16:06 (5 months ago)	2a02:c6a0:4001:b000:0000:0000:0000:00ff was recorded 3 times by 1 hosts attempting to connect to 1 u ... show more 2a02:c6a0:4001:b000:0000:0000:0000:00ff was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 1557 show less	Port Scan
🇺🇸 LotPhantom	2026-03-10 20:16:05 (5 months ago)	2026-03-10T20:16:05.328313+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-03-10T20:16:05.328313+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:86:dd SRC=2a02:c6a0:4001:b000:0000:0000:0000:00ff DST=2604:a880:0400:00d0:0000:0000:1753:7001 LEN=60 TC=0 HOPLIMIT=48 FLOWLBL=0 PROTO=TCP SPT=55889 DPT=104 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇹🇭 Sawasdee	2026-03-10 20:15:33 (5 months ago)	Port Scan ...	Port Scan
🇩🇪 Admins@FBN	2026-03-10 20:15:02 (5 months ago)	FW-PortScan: Traffic Blocked srcport=56861 dstport=104	Port Scan
🇺🇸 thororen	2026-03-10 20:14:56 (5 months ago)	Blocked by UFW [104/tcp] Source port: 51770 TTL: null Packet length: 60 TOS: null This report was g ... show more Blocked by UFW [104/tcp] Source port: 51770 TTL: null Packet length: 60 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 geot	2026-03-08 12:38:38 (6 months ago)	GET /r4/metadata HTTP/1.1 GET /fhir/r4/metadata HTTP/1.1 GET /fhirproxy/api/fhir/r4/metadata HTTP/1. ... show more GET /r4/metadata HTTP/1.1 GET /fhir/r4/metadata HTTP/1.1 GET /fhirproxy/api/fhir/r4/metadata HTTP/1.1 GET /baseR2/metadata HTTP/1.1 GET /baseR4/metadata HTTP/1.1 GET /fhir-server/api/v4/metadata HTTP/1.1 GET /metadata HTTP/1.1 GET /baseDstu3/metadata HTTP/1.1 GET /fhir/metadata HTTP/1.1 GET /r5/metadata HTTP/1.1 GET /baseR3/metadata HTTP/1.1 GET /r3/metadata HTTP/1.1 GET /baseR5/metadata HTTP/1.1 show less	Web App Attack
🇺🇸 natdem.org	2026-03-08 00:00:36 (6 months ago)	Web: Empty user agent + errors, API enumeration	Web App Attack Hacking
🇭🇺 DumaNet	2026-03-07 18:39:00 (6 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Mar 07. 09:30:12 Source IP: 2a02:c ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Mar 07. 09:30:12 Source IP: 2a02:c6a0:4001:b000::ff Portion of the log(s): 2a02:c6a0:4001:b000::ff - [07/Mar/2026:09:30:12 +0100] "GET /fhir-server/api/v4/metadata HTTP/1.1" 404 153 "-" "fhms-its-research-scanner/1.0 (+https://fb02itsscan02.fh-muenster.de)" 2a02:c6a0:4001:b000::ff - [07/Mar/2026:09:30:12 +0100] "GET /baseDstu3/metadata HTTP/1.1" 404 153 "-" "fhms-its-research-scanner/1.0 (+https://fb02itsscan02.fh-muenster.de)" 2a02:c6a0:4001:b000::ff - [07/Mar/2026:09:30:12 +0100] "GET /baseDstu2/metadata HTTP/1.1" 404 153 "-" "fhms-its-research-scanner/1.0 (+https://fb02itsscan02.fh-muenster.de)" 2a02:c6a0:4001:b000::ff - [07/Mar/2026:09:30:12 +0100] "GET /r2/metadata HTTP/1.1" 404 153 "-" "fhms-its-research-scanner/1.0 (+https://fb02itsscan02.fh-muenster.de)" 2a02:c6a0:4001:b000::ff - [07/Mar/2026:09:30:12 +0100] "GET /r3/metadata HTTP/1.1" 404 153 "-" "fhms-its-research-scanner/1.0 (+https://fb02itsscan02.fh-muenster.de)" .... show less	Web App Attack
🇺🇸 drewf.ink	2026-03-07 08:43:06 (6 months ago)	[08:43] Port scanning. Port(s) scanned: TCP/8888	Port Scan

Showing 1 to 15 of 1290 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 193.32.204.199

🇺🇸 136.144.33.41

🇨🇳 120.229.179.133

🇸🇬 103.250.10.63

🇳🇱 194.124.211.242

🇵🇱 176.53.159.198

🇩🇪 151.243.11.172

🇹🇼 125.229.31.210

🇮🇳 115.114.95.98

🇲🇦 105.154.12.47

🇮🇩 103.94.10.70

🇺🇸 66.132.224.30

🇺🇦 46.164.148.190

🇪🇸 34.175.26.87

🇮🇹 34.154.21.204

🇻🇳 14.241.150.101

🇱🇹 213.176.24.83

🇺🇸 195.184.76.229

🇺🇦 194.0.89.139

🇺🇸 192.185.4.96