JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0e:6a80:3:7f::

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

505 reports

133 reporters · latest 7 months ago

ISP	Rene Roeth trading as ROETH & BECK GbR
Usage Type	Data Center/Web Hosting/Transit
ASN	AS44486
Hostname(s)	default.reselling.services
Domain Name	roeth-und-beck.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a0e:6a80:3:7f:: has been reported 505 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a0e:6a80:3:7f::

This IP address has been reported a total of 505 times from 133 distinct sources. 2a0e:6a80:3:7f:: was first reported on July 4th 2025, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 boxed-it	2026-02-01 01:31:10 (7 months ago)	GET /.git/config (Tarpitted for 1d15h8m30s, wasted 8.06MB)	Web App Attack
🇫🇮 as211431.net	2026-01-30 10:23:38 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env.as211431 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 marcel-knorr.de	2025-12-27 01:30:35 (8 months ago)	[mail-backup-2] Blocked by UFW	Port Scan Brute-Force
🇩🇪 Tamsweb	2025-12-27 01:28:01 (8 months ago)	Unauthorized connection attempt or scan from 2a0e:6a80:0003:007f:0000:0000:0000:0000 on port 65535 . ... show more Unauthorized connection attempt or scan from 2a0e:6a80:0003:007f:0000:0000:0000:0000 on port 65535 ... show less	Port Scan
🇫🇮 kumiko	2025-12-27 01:27:58 (8 months ago)	[2025-12-27 03:27:58] Unauthorized port scan/probing (3 times on ports 2022, 2025, 25565) Blocked b ... show more [2025-12-27 03:27:58] Unauthorized port scan/probing (3 times on ports 2022, 2025, 25565) Blocked by UFW show less	Port Scan
🇩🇪 enjoyably	2025-12-21 01:03:21 (9 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Bad Web Bot Web App Attack
🇭🇺 DumaNet	2025-12-19 05:53:00 (9 months ago)	Blocked for port scanning. Time: Tue Dec 16. 18:02:43 2025 +0100 IP: 2a0e:6a80:3:7f:: (DE/Germany/ ... show more Blocked for port scanning. Time: Tue Dec 16. 18:02:43 2025 +0100 IP: 2a0e:6a80:3:7f:: (DE/Germany/default.reselling.services) Sample of block hits: Dec 16 18:01:29 sirius kernel: [221920700.317755] Firewall: TCP6IN Blocked IN=eth0 OUT= MAC= SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=[removed] LEN=60 TC=0 HOPLIMIT=246 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25574 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 16 18:01:36 sirius kernel: [221920707.242708] Firewall: TCP6IN Blocked IN=eth0 OUT= MAC= SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=[removed] LEN=60 TC=0 HOPLIMIT=246 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25567 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 16 18:01:42 sirius kernel: [221920712.874862] Firewall: TCP6IN Blocked IN=eth0 OUT= MAC= SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=[removed] LEN=60 TC=0 HOPLIMIT=247 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25562 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 16 18:01:54 sirius kernel: [221920725.123883] Firewall: TCP6IN Blocked IN=eth0 OUT= MAC= SRC=2a0e:6a80:0003.... show less	Port Scan
🇬🇧 pearbright	2025-12-16 17:03:54 (9 months ago)	2025-12-16T16:47:51.989738+00:00 srv740043 kernel: [25158339.731562] [UFW BLOCK] IN=eth0 OUT= MAC=bc ... show more 2025-12-16T16:47:51.989738+00:00 srv740043 kernel: [25158339.731562] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=40 HOPLIMIT=52 FLOWLBL=0 PROTO=TCP SPT=38953 DPT=1859 WINDOW=65535 RES=0x00 SYN URGP=0 2025-12-16T16:59:27.208180+00:00 srv740043 kernel: [25159034.951325] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=40 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25570 WINDOW=1024 RES=0x00 SYN URGP=0 2025-12-16T17:00:25.696587+00:00 srv740043 kernel: [25159093.440209] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=40 HOPLIMIT=243 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25563 WINDOW=1024 RES=0x00 SYN URGP=0 2025-12-16T17:00:31. ... show less	Port Scan
🇩🇪 baltic-lab.com	2025-12-16 17:03:15 (9 months ago)	Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked ... show more Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Port Scan Brute-Force
🇩🇪 Tamsweb	2025-12-16 17:03:01 (9 months ago)	Unauthorized connection attempt or scan from 2a0e:6a80:0003:007f:0000:0000:0000:0000 on port 1024 .. ... show more Unauthorized connection attempt or scan from 2a0e:6a80:0003:007f:0000:0000:0000:0000 on port 1024 ... show less	Port Scan
🇩🇪 [email protected]	2025-12-16 17:02:58 (9 months ago)	Attack attempt against Interwebbi servers; Port Scan detected from 2a0e:6a80:3:7f:: (default.resel ... show more Attack attempt against Interwebbi servers; Port Scan detected from 2a0e:6a80:3:7f:: (default.reselling.services). 5 hits in the last 135 seconds; IP: 2a0e:6a80:3:7f::; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇩🇪 DerLukas	2025-12-16 17:02:42 (9 months ago)		Port Scan
🇩🇪 mattk	2025-12-16 17:02:13 (9 months ago)	port scan	Port Scan
🇫🇷 Yepngo	2025-12-16 17:02:08 (9 months ago)	2025-12-16T16:58:26.443720+01:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00 ... show more 2025-12-16T16:58:26.443720+01:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2001:41d0:000d:2409:0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=47951 DPT=25565 WINDOW=65535 RES=0x00 SYN URGP=0 2025-12-16T17:48:14.417586+01:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2001:41d0:000d:2409:0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=46150 DPT=1859 WINDOW=65535 RES=0x00 SYN URGP=0 2025-12-16T18:00:21.052628+01:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2001:41d0:000d:2409:0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=245 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25560 WINDOW=1024 RES=0x00 SYN URGP=0 2025-12-16T18:00:50.580102+01:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= M ... show less	Port Scan
🇩🇪 london2038.com	2025-12-16 17:01:53 (9 months ago)	Connection atttempts against closed TCP ports Dec 16 18:00:25 BLOCK SRC=2a0e:6a80:0003:007f:0000:000 ... show more Connection atttempts against closed TCP ports Dec 16 18:00:25 BLOCK SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 LEN=60 TC=32 HOPLIMIT=249 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25565 WINDOW=1024 RES=0x00 SYN Dec 16 18:00:50 BLOCK SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 LEN=60 TC=40 HOPLIMIT=250 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25573 WINDOW=1024 RES=0x00 SYN Dec 16 18:00:58 BLOCK SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 LEN=60 TC=32 HOPLIMIT=249 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25564 WINDOW=1024 RES=0x00 SYN show less	Port Scan

Showing 1 to 15 of 505 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 217.26.178.47

🇺🇸 216.25.89.89

🇺🇸 193.56.116.21

🇧🇬 193.24.211.230

🇸🇪 104.243.207.245

🇳🇱 94.154.43.214

🇺🇸 91.230.168.190

🇹🇷 78.163.142.18

🇯🇵 38.127.4.134

🇨🇳 14.103.213.5

🇸🇬 13.212.166.230

🇭🇰 223.197.196.92

🇨🇳 223.96.0.0

🇹🇼 198.235.24.127

🇮🇩 182.253.171.213

🇵🇾 181.103.15.204

🇨🇱 181.43.217.244

🇺🇸 178.16.55.50

🇧🇷 170.81.93.145

🇩🇪 167.94.146.41