JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2800:6c0:3::b13

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

21 reports

7 reporters · latest 1 year ago

ISP	Dattatec.com
Usage Type	Data Center/Web Hosting/Transit
ASN	AS27823
Domain Name	donweb.com
Country	🇦🇷 Argentina
City	Rosario, Santa Fe

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2800:6c0:3::b13 has been reported 21 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2800:6c0:3::b13

Export CSV

This IP address has been reported a total of 21 times from 7 distinct sources. 2800:6c0:3::b13 was first reported on June 25th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-08-07 22:10:17 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 07 18:10:08.287191 2025] [security2:error] [pid 12945:tid 12945] [client 2800:6c0:3::b13:50974] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|citrineartstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "citrineartstudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aJUkQFl2EP9MN27x-MjpRwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-04 03:53:24 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 03 23:53:20.629662 2025] [security2:error] [pid 3972908:tid 3972990] [client 2800:6c0:3::b13:36770] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.datuinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.datuinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aJAusNhT6amrwWPJDIeXbQAAAZE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-30 22:51:48 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 30 18:51:39.527529 2025] [security2:error] [pid 6772:tid 6772] [client 2800:6c0:3::b13:48104] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.benchmarkbcs.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.benchmarkbcs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aIqh-3Sr2n8_1jx_2F8z8wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 mgarofano80	2025-07-18 01:56:42 (1 year ago)		Brute-Force Web App Attack
🇩🇪 LRob	2025-07-12 14:45:15 (1 year ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 LRob	2025-07-12 09:45:15 (1 year ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-08 01:12:15 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 21:12:07.794699 2025] [security2:error] [pid 20210:tid 20210] [client 2800:6c0:3::b13:43744] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jiggaboojones.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jiggaboojones.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGxwZ8XckYwXCLg7iNaNYwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-07 15:11:37 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 11:11:27.795350 2025] [security2:error] [pid 21170:tid 21170] [client 2800:6c0:3::b13:43504] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dunningtons.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dunningtons.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGvjnxiSAoz9FtAxAvFWlQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2025-07-05 02:15:11 (1 year ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 Hazzard	2025-07-04 16:58:15 (1 year ago)	(wordpress) Failed wordpress login from 2800:6c0:3::b13 (AR/Argentina/Buenos Aires F.D./Buenos Aires ... show more (wordpress) Failed wordpress login from 2800:6c0:3::b13 (AR/Argentina/Buenos Aires F.D./Buenos Aires/vps-1767239-x.dattaweb.com/[redacted]) show less	Brute-Force
🇩🇪 Hazzard	2025-07-03 10:26:35 (1 year ago)	(wordpress) Failed wordpress login from 2800:6c0:3::b13 (AR/Argentina/Buenos Aires F.D./Buenos Aires ... show more (wordpress) Failed wordpress login from 2800:6c0:3::b13 (AR/Argentina/Buenos Aires F.D./Buenos Aires/vps-1767239-x.dattaweb.com/[redacted]) show less	Brute-Force
🇩🇪 stinpriza	2025-07-03 05:28:42 (1 year ago)	(XMLRPC) xmlrpc banned 2800:6c0:3::b13 (AR/Argentina/vps-1767239-x.dattaweb.com): 1 in the last 3600 ... show more (XMLRPC) xmlrpc banned 2800:6c0:3::b13 (AR/Argentina/vps-1767239-x.dattaweb.com): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-06-30 19:45:48 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 15:45:41.599366 2025] [security2:error] [pid 29366:tid 29366] [client 2800:6c0:3::b13:58910] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cccorponline.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cccorponline.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGLpZZPIfFb87VQLN4V50gAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-30 14:25:17 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 2800:6c0:3::b13 (vps-1767239-x.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 10:25:12.182697 2025] [security2:error] [pid 24393:tid 24393] [client 2800:6c0:3::b13:39104] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.dorismitchell.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dorismitchell.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGKeSHT8-Xn69gaQ0-162gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2025-06-30 09:15:09 (1 year ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 210.61.216.167

🇨🇦 201.79.54.226

🇺🇸 193.228.129.81

🇩🇪 154.196.34.246

🇹🇿 154.73.171.250

🇨🇳 117.139.73.225

🇺🇸 107.175.145.81

🇮🇳 103.153.105.63

🇮🇳 103.153.104.112

🇮🇳 103.59.133.47

🇮🇹 94.33.139.59

🇺🇸 91.230.168.250

🇧🇬 91.191.209.46

🇹🇷 88.230.138.203

🇳🇱 81.206.227.162

🇳🇱 64.205.72.109

🇧🇷 45.171.192.25

🇭🇰 20.24.194.29

🇸🇬 8.219.8.65

🇨🇭 213.55.171.188