JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a03:2880:f806:14::

Neutral Activity Whitelisted Subnet IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

405 reports

47 reporters · latest 2 days ago

2a03:2880:f806:14:: is an IP address from within our whitelist belonging to the subnet 2a03:2880:f806::/48, which we identify as "Facebook".

ISP	Meta Platforms Ireland Limited
Usage Type	Commercial
ASN	AS32934
Domain Name	facebook.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a03:2880:f806:14::

Export CSV

This IP address has been reported a total of 405 times from 47 distinct sources. 2a03:2880:f806:14:: was first reported on July 24th 2024, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: Poland with 27 reports; Germany with 26 reports; United States of America with 18 reports. The most common categories in these recent reports were: Bad Web Bot 81 times; Web App Attack 70 times; Brute-Force 25 times; Hacking 10 times; Email Spam 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-05-16 19:18:16 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 16 15:18:11.992481 2025] [security2:error] [pid 818750:tid 818750] [client 2a03:2880:f806:14:::57122] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bfpsamoa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bfpsamoa.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aCePc5w7zwBAiIjzXUVtMQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-16 13:55:06 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 16 09:55:00.562118 2025] [security2:error] [pid 3584846:tid 3584846] [client 2a03:2880:f806:14:::51790] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|save1vet.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "save1vet.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aCdDtIOhwthaF2H9IVF7NgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-14 19:53:12 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 14 15:53:06.610253 2025] [security2:error] [pid 3296728:tid 3296728] [client 2a03:2880:f806:14:::41806] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|williamfitzsimmons.com\|F\|2"] [data ".exitin.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/news/0328-william-adds-chattanooga-date-uscan-tour/www.exitin.com"] [unique_id "aCT0ouvmDg2ObI9aD2GruAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-11 12:32:17 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 11 08:32:12.173186 2025] [security2:error] [pid 119925:tid 119925] [client 2a03:2880:f806:14:::58646] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.byles.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.byles.net"] [uri "/AllchinBuildersGroup/wp-json/wp/v2/users/1"] [unique_id "aCCYzIoaUd0Lnye2VcKd9QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-30 23:05:00 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 30 19:04:55.135641 2025] [security2:error] [pid 4903:tid 4947] [client 2a03:2880:f806:14:::48414] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.digital4z.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.digital4z.com"] [uri "/wp-content/plugins/app-your-wordpress-uppsite/admin/js/WS_FTP.LOG"] [unique_id "aBKslwi3eDVCMW81aDHE9AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-21 19:33:16 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 15:33:13.392142 2025] [security2:error] [pid 8465:tid 8489] [client 2a03:2880:f806:14:::35210] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.munatseng.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.munatseng.org"] [uri "/stories/tsengkwongchi.com"] [unique_id "aAadeYBvR178omz1lT5rgAAAARM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-19 03:10:35 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 23:10:26.829641 2025] [security2:error] [pid 13310:tid 13310] [client 2a03:2880:f806:14:::50316] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gilesvolvocarselpaso.com.acadianahero.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gilesvolvocarselpaso.com.acadianahero.com"] [uri "/instagram.com"] [unique_id "aAMUIkp-LoPljKCn4hDziQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-18 06:43:29 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 02:43:22.591495 2025] [security2:error] [pid 9032:tid 9032] [client 2a03:2880:f806:14:::48422] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.hsoftwaresystems.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hsoftwaresystems.net"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aAH0ip7_T1kt3QQuqkEQrAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-16 16:02:16 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 16 12:02:12.589288 2025] [security2:error] [pid 1783:tid 1783] [client 2a03:2880:f806:14:::55590] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/hats/WS_FTP.LOG"] [unique_id "Z__UhHp0AgXZn-w4M8rXSQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-11 05:21:36 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 11 01:21:31.171240 2025] [security2:error] [pid 20192:tid 20192] [client 2a03:2880:f806:14:::35880] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.citystreetsalon.com\|F\|2"] [data ".fionnardesign.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.citystreetsalon.com"] [uri "/www.fionnardesign.com"] [unique_id "Z_im23T9VRQDRqIBo5BosgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-27 17:20:38 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 27 13:20:34.312594 2025] [security2:error] [pid 1440584:tid 1440584] [client 2a03:2880:f806:14:::48674] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vangentholding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/298935"] [unique_id "Z-WI4txE6Wz91nh1KcpL8QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-27 01:26:23 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 26 21:26:15.332562 2025] [security2:error] [pid 1540101:tid 1540101] [client 2a03:2880:f806:14:::52232] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.silalaw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.silalaw.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z-SpN8YkTcv2TUgoUFQgxQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-21 16:47:31 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 21 12:47:24.084266 2025] [security2:error] [pid 12179:tid 12179] [client 2a03:2880:f806:14:::45570] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|blacktvnow.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "blacktvnow.com"] [uri "/products/elite-tv/[email protected]"] [unique_id "Z92YHKH8CB52E6AOsfelhQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-24 21:14:36 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 24 16:14:28.732464 2025] [security2:error] [pid 9864:tid 9864] [client 2a03:2880:f806:14:::55904] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.aandbnaturalfoods.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.aandbnaturalfoods.com"] [uri "/naturally/wp-json/wp/v2/users/1"] [unique_id "Z7zhNCF4Vta5VKtL9ZBMYgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-19 02:08:31 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 21:08:27.800715 2025] [security2:error] [pid 30876:tid 30876] [client 2a03:2880:f806:14:::54530] [client 2a03:2880:f806:14::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.raintechgutters.com\|F\|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/how-much-are-gutter-installation/www.raintechgutters.com"] [unique_id "Z7U9Gy64akc9zczBCw1BagAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 346 to 360 of 405 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 203.198.173.145

🇲🇽 189.190.168.131

🇺🇸 185.198.240.119

🇧🇷 177.91.119.59

🇺🇸 164.92.114.247

🇮🇳 134.209.147.61

🇹🇷 103.83.87.185

🇷🇴 92.118.39.77

🇧🇬 78.128.114.174

🇱🇹 62.60.130.253

🇳🇱 45.148.10.141

🇳🇱 34.7.195.223

🇬🇧 31.14.254.62

🇺🇸 207.211.162.170

🇧🇷 186.225.74.168

🇦🇷 186.108.207.27

🇨🇴 186.98.66.110

🇳🇱 161.35.152.131

🇺🇸 157.245.172.155

🇨🇳 106.43.91.27