JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0e:97c0:3ea:80b::1

2a0e:97c0:3ea:80b::1 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Datalix
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203446
Domain Name	datalix.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0e:97c0:3ea:80b::1

Whois 2a0e:97c0:3ea:80b::1

IP Abuse Reports for 2a0e:97c0:3ea:80b::1:

This IP address has been reported a total of 43 times from 26 distinct sources. 2a0e:97c0:3ea:80b::1 was first reported on May 26th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-06-01 12:42:07 (2 months ago)	[MonJun0114:42:04.5859452026][security2:error][pid2738148:tid2738285][client2a0e:97c0:3ea:80b::1:0]M ... show more [MonJun0114:42:04.5859452026][security2:error][pid2738148:tid2738285][client2a0e:97c0:3ea:80b::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mgevents.ch\"][uri\"/.git/HEAD\"][unique_id\"ah1-HOzpFStawLtpjpPD_AAAARM\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 antlac1	2026-06-01 07:23:39 (2 months ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇩🇪 SCHAPPY	2026-06-01 05:48:55 (2 months ago)	Mutliple attempts to access forbidden web resources, HTTP code 403.	Web App Attack
🇩🇪 ger-stg-sifi1	2026-06-01 02:13:29 (2 months ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 Ba-Yu	2026-05-31 10:09:38 (2 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇳🇱 e.fierstra	2026-05-31 08:52:10 (2 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-05-31 02:37:37 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 dynamix	2026-05-30 22:33:57 (2 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-05-30 21:37:45 (2 months ago)	2026/05/30 22:37:41 [error] 1725767#1725767: 498394 access forbidden by rule, client: 2a0e:97c0:3ea ... show more 2026/05/30 22:37:41 [error] 1725767#1725767: 498394 access forbidden by rule, client: 2a0e:97c0:3ea:80b::1, server: simetria.org, request: "GET /.env HTTP/2.0", host: "simetria.org" 2a0e:97c0:3ea:80b::1 - - [30/May/2026:22:37:41 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 2026/05/30 22:37:44 [error] 1725771#1725771: *498421 access forbidden by rule, client: 2a0e:97c0:3ea:80b::1, server: simetria.org, request: "GET /backend/.env HTTP/2.0", host: "simetria.org" show less	Brute-Force Web App Attack
🇺🇸 Sylvyon	2026-05-30 00:40:51 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.aws/credentials \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 4server	2026-05-30 00:39:59 (2 months ago)	[SatMay3002:39:58.4305862026][security2:error][pid2964720:tid2964834][client2a0e:97c0:3ea:80b::1:0]M ... show more [SatMay3002:39:58.4305862026][security2:error][pid2964720:tid2964834][client2a0e:97c0:3ea:80b::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"subitotraslochi.ch\"][uri\"/.git/HEAD\"][unique_id\"ahox3j9Zx5_rXcs4ee8NfwAAAM4\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-29 22:14:37 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3ea:80b::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3ea:80b::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 18:14:27.627549 2026] [security2:error] [pid 4466:tid 4466] [client 2a0e:97c0:3ea:80b::1:36474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sublimationconsultants.com"] [uri "/.git/HEAD"] [unique_id "ahoPw9JzIsVnf70obAcQmwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-05-29 20:34:43 (2 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-05-29 20:21:46 (2 months ago)	2a0e:97c0:3ea:80b::1 - - [29/May/2026:14:21:45 -0600] "GET /.git/config HTTP/1.1" 300 11261 "-" "Moz ... show more 2a0e:97c0:3ea:80b::1 - - [29/May/2026:14:21:45 -0600] "GET /.git/config HTTP/1.1" 300 11261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Web App Attack
🇧🇪 cmbplf	2026-05-29 17:42:16 (2 months ago)	168 requests with url.path .git/	Brute-Force Bad Web Bot

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 85.217.149.43

🇹🇿 41.59.202.241

🇺🇸 35.231.130.18

🇺🇸 34.125.213.132

🇱🇹 213.176.26.94

🇺🇸 172.253.2.21

🇨🇳 112.103.61.31

🇸🇬 68.183.177.63

🇰🇷 52.141.19.25

🇦🇷 45.182.220.37

🇷🇴 2.57.122.53

🇨🇭 209.99.191.17

🇮🇳 106.219.120.12

🇫🇷 82.65.183.240

🇳🇱 45.148.10.141

🇮🇳 182.95.190.150

🇵🇱 94.26.88.14

🇺🇸 66.132.224.225

🇳🇱 45.198.224.231

🇷🇺 37.110.113.113