JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0e:6a80:3:7f::

Neutral Activity IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

505 reports

133 reporters · latest 9 months ago

ISP: Rene Roeth trading as ROETH & BECK GbR
Usage Type: Data Center/Web Hosting/Transit
ASN: AS44486
Domain Name: roeth-und-beck.de
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a0e:6a80:3:7f:: has been reported 505 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

505 from 133 distinct reporters

First reported

July 4th 2025

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 boxed-it	2026-02-01 01:31:10 UTC · (9 months ago)	GET /.git/config (Tarpitted for 1d15h8m30s, wasted 8.06MB)	Web App Attack
🇫🇮 as211431.net	2026-01-30 10:23:38 UTC · (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env.as211431 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.1 ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env.as211431 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 marcel-knorr.de	2025-12-27 01:30:35 UTC · (10 months ago)	[mail-backup-2] Blocked by UFW	Port Scan Brute-Force
🇩🇪 Tamsweb	2025-12-27 01:28:01 UTC · (10 months ago)	Unauthorized connection attempt or scan from 2a0e:6a80:0003:007f:0000:0000:0000:0000 on port 65535 ...	Port Scan
🇫🇮 kumiko	2025-12-27 01:27:58 UTC · (10 months ago)	[2025-12-27 03:27:58] Unauthorized port scan/probing (3 times on ports 2022, 2025, 25565) Blocked by UFW	Port Scan
🇩🇪 enjoyably	2025-12-21 01:03:21 UTC · (10 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Bad Web Bot Web App Attack
🇭🇺 DumaNet	2025-12-19 05:53:00 UTC · (10 months ago)	Blocked for port scanning. Time: Tue Dec 16. 18:02:43 2025 +0100 IP: 2a0e:6a80:3:7f:: (DE/Germany/default.reselling.services) Sample of block hits: Dec 16 18:01:29 sirius kernel: [221920700.317755] Firewall: TCP6IN Blocked IN=eth0 OUT= MAC= S ... show more Blocked for port scanning. Time: Tue Dec 16. 18:02:43 2025 +0100 IP: 2a0e:6a80:3:7f:: (DE/Germany/default.reselling.services) Sample of block hits: Dec 16 18:01:29 sirius kernel: [221920700.317755] Firewall: TCP6IN Blocked IN=eth0 OUT= MAC= SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=[removed] LEN=60 TC=0 HOPLIMIT=246 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25574 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 16 18:01:36 sirius kernel: [221920707.242708] Firewall: TCP6IN Blocked IN=eth0 OUT= MAC= SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=[removed] LEN=60 TC=0 HOPLIMIT=246 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25567 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 16 18:01:42 sirius kernel: [221920712.874862] Firewall: TCP6IN Blocked IN=eth0 OUT= MAC= SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=[removed] LEN=60 TC=0 HOPLIMIT=247 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25562 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 16 18:01:54 sirius kernel: [221920725.123883] Firewall: TCP6IN Blocked IN=eth0 OUT= MAC= SRC=2a0e:6a80:0003.... show less	Port Scan
🇬🇧 pearbright	2025-12-16 17:03:54 UTC · (10 months ago)	2025-12-16T16:47:51.989738+00:00 srv740043 kernel: [25158339.731562] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=40 HOPLIMIT= ... show more 2025-12-16T16:47:51.989738+00:00 srv740043 kernel: [25158339.731562] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=40 HOPLIMIT=52 FLOWLBL=0 PROTO=TCP SPT=38953 DPT=1859 WINDOW=65535 RES=0x00 SYN URGP=0 2025-12-16T16:59:27.208180+00:00 srv740043 kernel: [25159034.951325] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=40 HOPLIMIT=242 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25570 WINDOW=1024 RES=0x00 SYN URGP=0 2025-12-16T17:00:25.696587+00:00 srv740043 kernel: [25159093.440209] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2a02:4780:000f:44bd:0000:0000:0000:0001 LEN=60 TC=40 HOPLIMIT=243 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25563 WINDOW=1024 RES=0x00 SYN URGP=0 2025-12-16T17:00:31. ... show less	Port Scan
🇩🇪 baltic-lab.com	2025-12-16 17:03:15 UTC · (10 months ago)	Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked offender ...	Port Scan Brute-Force
🇩🇪 Tamsweb	2025-12-16 17:03:01 UTC · (10 months ago)	Unauthorized connection attempt or scan from 2a0e:6a80:0003:007f:0000:0000:0000:0000 on port 1024 ...	Port Scan
🇩🇪 [email protected]	2025-12-16 17:02:58 UTC · (10 months ago)	Attack attempt against Interwebbi servers; Port Scan detected from 2a0e:6a80:3:7f:: (default.reselling.services). 5 hits in the last 135 seconds; IP: 2a0e:6a80:3:7f::; Ports: *; Direction: 0; Trigger: PS_LIMIT;	Brute-Force
🇩🇪 DerLukas	2025-12-16 17:02:42 UTC · (10 months ago)		Port Scan
🇩🇪 mattk	2025-12-16 17:02:13 UTC · (10 months ago)	port scan	Port Scan
🇫🇷 Yepngo	2025-12-16 17:02:08 UTC · (10 months ago)	2025-12-16T16:58:26.443720+01:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2001:41d0:000d:2409:0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO= ... show more 2025-12-16T16:58:26.443720+01:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2001:41d0:000d:2409:0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=47951 DPT=25565 WINDOW=65535 RES=0x00 SYN URGP=0 2025-12-16T17:48:14.417586+01:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2001:41d0:000d:2409:0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=54 FLOWLBL=0 PROTO=TCP SPT=46150 DPT=1859 WINDOW=65535 RES=0x00 SYN URGP=0 2025-12-16T18:00:21.052628+01:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:86:dd SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 DST=2001:41d0:000d:2409:0000:0000:0000:0000 LEN=60 TC=0 HOPLIMIT=245 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25560 WINDOW=1024 RES=0x00 SYN URGP=0 2025-12-16T18:00:50.580102+01:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= M ... show less	Port Scan
🇩🇪 london2038.com	2025-12-16 17:01:53 UTC · (10 months ago)	Connection atttempts against closed TCP ports Dec 16 18:00:25 BLOCK SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 LEN=60 TC=32 HOPLIMIT=249 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25565 WINDOW=1024 RES=0x00 SYN Dec 16 18:00:50 BLOCK SRC=2a0e:6a80:0003:007f: ... show more Connection atttempts against closed TCP ports Dec 16 18:00:25 BLOCK SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 LEN=60 TC=32 HOPLIMIT=249 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25565 WINDOW=1024 RES=0x00 SYN Dec 16 18:00:50 BLOCK SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 LEN=60 TC=40 HOPLIMIT=250 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25573 WINDOW=1024 RES=0x00 SYN Dec 16 18:00:58 BLOCK SRC=2a0e:6a80:0003:007f:0000:0000:0000:0000 LEN=60 TC=32 HOPLIMIT=249 FLOWLBL=0 PROTO=TCP SPT=44356 DPT=25564 WINDOW=1024 RES=0x00 SYN show less	Port Scan

Showing 1 to 15 of 505 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇪 217.211.15.160

🇺🇸 162.216.149.110

🇬🇧 35.203.211.192

🇮🇳 2400:6180:100:d0:0:1:c53d:c001

🇳🇱 195.178.110.217

🇳🇱 193.176.31.227

🇩🇪 185.201.139.242

🇷🇺 185.77.205.246

🇧🇩 103.86.198.162

🇺🇸 94.176.84.120

🇺🇸 87.85.141.230

🇸🇬 188.166.178.163

🇸🇬 161.120.171.246

🇫🇷 144.91.81.169

🇮🇳 134.209.148.248

🇮🇳 103.176.160.146

🇺🇸 66.132.195.210

🇺🇸 66.132.159.116

🇨🇴 64.76.115.204

🇭🇰 220.246.42.212