IP Report
2a0e:97c0:3e3:91f::1
Florian Kolb · AS58087 · Frankfurt am Main (Innenstadt I), Germany
Score 50 of 100, in the medium risk band. Bands run 0 to 19 minimal, 20 to 49 low, 50 to 79 medium, 80 to 100 high.
Its risk score of 50/100 is elevated — enough signal to justify friction such as a CAPTCHA or extra verification, though not necessarily an outright block.
Detection signals
Not detected: Tor, VPN, Proxy, Crawler
Summary
2a0e:97c0:3e3:91f::1 is a server address in commercial hosting space, not a home or mobile connection. Traffic from it is almost always software rather than a person browsing.
The address is announced by Florian Kolb (AS58087) and geolocates to Frankfurt am Main (Innenstadt I), Hesse, Germany.
Why this address scores 50
It sits in datacenter address space, where automated traffic vastly outnumbers human visitors.
Together these produce the score of 50/100 shown above.
Observation history
This address has been looked up through Predax 24 times between July 20, 2026 and September 4, 2026.
Each lookup re-evaluates the address against current feeds, so the classification above reflects its most recent check, not a stale record.
Network & location
- ASN
- AS58087
- Country
- Germany (DE)
- Provider
- Florian Kolb
- Region
- Hesse
- CIDR
- 2a0e:97c0:3e3::/48
- City
- Frankfurt am Main (Innenstadt I)
- Network type
- hosting
- First seen
- 7/20/2026, 3:02:06 PM
- Last seen
- 9/4/2026, 8:17:35 AM
- Times seen
- 24
What to do with this
If you run a site and this address showed up
Traffic from server space is rarely a person on a browser. If this address hit your site, it was most likely a bot, a monitor, or a scripted client.
Unblocking it is only worth doing if you can tie it to a service you actually use — an uptime monitor, a payment webhook, an integration. Otherwise a block costs you nothing.
Acting on a score like 50/100 is what the Predax Security plugin for WordPress automates: set a threshold once and addresses scoring above it are challenged or blocked as they arrive, using the same data behind this report.
If you found this address in your logs
In your logs this address is almost certainly automation. Check the user agent and the request pattern before attributing its traffic to a human.
If you operate this address yourself and it is being blocked elsewhere, this datacenter classification is why — hosting IPs start from a lower trust position everywhere.
Loading map...
Detection sources
No risk signals triggered
This IP didn't match any of our VPN, proxy, Tor, datacenter, or crawler detectors.