JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a03:2880:f806:1::

Neutral Activity Whitelisted Subnet IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

362 reports

38 reporters · latest 2 days ago

2a03:2880:f806:1:: is an IP address from within our whitelist belonging to the subnet 2a03:2880:f806::/48, which we identify as "Facebook".

ISP	Meta Platforms Ireland Limited
Usage Type	Commercial
ASN	AS32934
Domain Name	facebook.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a03:2880:f806:1::

This IP address has been reported a total of 362 times from 38 distinct sources. 2a03:2880:f806:1:: was first reported on July 11th 2024, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: Germany with 26 reports; Poland with 19 reports; United States of America with 9 reports. The most common categories in these recent reports were: Bad Web Bot 57 times; Web App Attack 51 times; Brute-Force 11 times; Hacking 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 mrcrassi	2026-03-11 00:30:10 (6 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /produto/pivo-duo-tsi-dupla/ UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-10 23:23:16 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 19:23:08.677962 2026] [security2:error] [pid 21291:tid 21414] [client 2a03:2880:f806:1:::41255] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.stone-doyle.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stone-doyle.com"] [uri "/stone-doyle.com"] [unique_id "abCn3Pb4jeWldJUGT3AkEAAAAQE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-03-10 22:26:26 (6 months ago)	Blocking for trying to access an exploit file: /SiteMap.aspx	Hacking
🇺🇸 myagent.site	2026-03-09 17:05:21 (6 months ago)	Blocking for trying to access an exploit file: /SiteMap.aspx	Hacking
🇺🇸 myagent.site	2026-03-05 23:31:10 (6 months ago)	Blocking for trying to access an exploit file: /SiteMap.aspx	Hacking
🇺🇸 TPI-Abuse	2026-02-28 23:41:26 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 18:41:21.164571 2026] [security2:error] [pid 2892:tid 2892] [client 2a03:2880:f806:1:::34399] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|go-901.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "go-901.com"] [uri "/go-901.com"] [unique_id "aaN9IU-AaMF_mJZE_a__OwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 12:04:51 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 07:04:43.910193 2026] [security2:error] [pid 12574:tid 12574] [client 2a03:2880:f806:1:::35778] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|rockwaychiropractic.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rockwaychiropractic.com"] [uri "/rockwaychiropractic.com"] [unique_id "aZxCW4GQslbJJocOWbiaDwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 15:15:22 (7 months ago)	(mod_security) mod_security (id:240950) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:240950) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 10:15:16.040172 2026] [security2:error] [pid 25516:tid 25516] [client 2a03:2880:f806:1:::37200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|www.nancyscafeandcatering.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/nav.php"] [unique_id "aZsdhPi0gBPZ_95BVvchiAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-21 00:37:42 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 19:37:39.273620 2026] [security2:error] [pid 7716:tid 7716] [client 2a03:2880:f806:1:::49562] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pascalroy.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pascalroy.com"] [uri "/pascalroy.com"] [unique_id "aZj-UyggpBQr2ezZU4f5mwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 15:42:18 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 10:42:11.918631 2026] [security2:error] [pid 14059:tid 14059] [client 2a03:2880:f806:1:::34004] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|independentmusicconference.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "independentmusicconference.com"] [uri "/independentmusicconference.com"] [unique_id "aZiA07DMRGvK53OLKnSsigAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 22:38:44 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 17:38:40.238060 2026] [security2:error] [pid 22898:tid 22898] [client 2a03:2880:f806:1:::57282] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|danged.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "danged.com"] [uri "/danged.com"] [unique_id "aZeQ8LEgVcZSV-8NZy4E5QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-17 19:29:53 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 14:29:49.219091 2026] [security2:error] [pid 30989:tid 30989] [client 2a03:2880:f806:1:::38202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mitchellart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mitchellart.com"] [uri "/mitchellart.com"] [unique_id "aZTBrfn-HBKv1lpgjn0dpgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-16 04:29:19 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 23:29:13.437554 2026] [security2:error] [pid 10360:tid 10360] [client 2a03:2880:f806:1:::56990] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.baliaccommodationpadangpadang.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.baliaccommodationpadangpadang.com"] [uri "/portfolio/surrounding-area/[email protected]"] [unique_id "aZKdGf8TNvpJlGGF1GVfjwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 08:02:37 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 03:02:31.347204 2026] [security2:error] [pid 27278:tid 27278] [client 2a03:2880:f806:1:::51914] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.shorelineshowerdoor.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.shorelineshowerdoor.com"] [uri "/shorelineshowerdoor.com"] [unique_id "aYmUlz_SfpOWvn9W1ATNHwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 09:35:18 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 04:35:11.682446 2026] [security2:error] [pid 25266:tid 25266] [client 2a03:2880:f806:1:::59948] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kiinlog.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kiinlog.com"] [uri "/kiinlog.com"] [unique_id "aWtXz8vfglmojpk4PFTnfAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 241 to 255 of 362 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.175.199.114

🇨🇳 221.6.164.162

🇯🇵 160.16.111.191

🇺🇸 157.230.216.63

🇨🇳 112.124.28.215

🇺🇸 91.230.168.79

🇺🇸 24.144.98.151

🇰🇷 220.80.221.188

🇳🇱 195.178.110.227

🇨🇱 190.12.169.18

🇨🇳 182.50.14.206

🇨🇴 181.63.26.52

🇳🇱 178.128.251.47

🇺🇸 136.114.82.25

🇲🇽 131.196.246.235

🇵🇱 109.205.211.27

🇺🇸 91.230.168.168

🇬🇧 81.19.219.229

🇳🇱 77.239.124.130

🇺🇸 64.225.57.170