JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a03:2880:f806:22::

2a03:2880:f806:22:: was found in our database!

This IP was reported 318 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Meta Platforms Ireland Limited
Usage Type	Commercial
ASN	AS32934
Domain Name	facebook.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 2a03:2880:f806:22:: is an IP address from within our whitelist belonging to the subnet 2a03:2880:f806::/48, which we identify as: "Facebook".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 2a03:2880:f806:22::

Whois 2a03:2880:f806:22::

IP Abuse Reports for 2a03:2880:f806:22:::

This IP address has been reported a total of 318 times from 40 distinct sources. 2a03:2880:f806:22:: was first reported on September 2nd 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-03-15 02:27:51 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 22:27:46.083982 2026] [security2:error] [pid 32523:tid 32523] [client 2a03:2880:f806:22:::46629] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|protexiasecure.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "protexiasecure.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "abYZIjb08Tc7krLPLbTIAgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-03-15 00:51:29 (6 months ago)	Blocking for trying to access an exploit file: /SiteMap.aspx	Hacking
🇺🇸 TPI-Abuse	2026-03-14 20:09:28 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 16:09:22.816008 2026] [security2:error] [pid 20392:tid 20392] [client 2a03:2880:f806:22:::63739] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|rockwaychiropractic.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rockwaychiropractic.com"] [uri "/rockwaychiropractic.com"] [unique_id "abXAclA2PpFzjachvWUu-QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-12 22:37:40 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 18:37:35.969480 2026] [security2:error] [pid 2737:tid 2737] [client 2a03:2880:f806:22:::62959] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kiinlog.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kiinlog.com"] [uri "/kiinlog.com"] [unique_id "abNAL2o6RF4P4NH95KVlFQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-12 13:23:52 (6 months ago)	Automated honeypot detection on bbd.fan: probed /admin \| UA: meta-webindexer/1.1 (+https://developer ... show more Automated honeypot detection on bbd.fan: probed /admin \| UA: meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-03-10 23:05:32 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 19:05:26.161830 2026] [security2:error] [pid 570:tid 570] [client 2a03:2880:f806:22:::24297] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|raynernet.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "raynernet.com"] [uri "/raynernet.com"] [unique_id "abCjtrFP5oaPq8Jk0B8zxQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-09 18:25:24 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 14:25:19.240569 2026] [security2:error] [pid 8542:tid 8542] [client 2a03:2880:f806:22:::53723] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|credenda.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "credenda.com"] [uri "/credenda.com"] [unique_id "aa8Qj1Ai0ysVcMux0ZbUwgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-03-08 22:58:55 (6 months ago)	Blocking for trying to access an exploit file: /SiteMap.aspx	Hacking
🇫🇷 mrcrassi	2026-03-08 20:37:00 (6 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /produto/dz-niid/ UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-07 20:58:05 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 15:57:57.319714 2026] [security2:error] [pid 26610:tid 26610] [client 2a03:2880:f806:22:::42533] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|major33.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "major33.com"] [uri "/major33.com"] [unique_id "aayRVY__UeQ4JiXqkot7CAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-06 01:46:51 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 20:46:48.071188 2026] [security2:error] [pid 4181:tid 4181] [client 2a03:2880:f806:22:::54869] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|wallawallafirearmstraining.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wallawallafirearmstraining.com"] [uri "/wallawallafirearmstraining.com"] [unique_id "aaoyCL-CHX6eG7qtMhB5hwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-02 02:59:53 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 21:59:48.791406 2026] [security2:error] [pid 14873:tid 14873] [client 2a03:2880:f806:22:::44957] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|owenmail.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "owenmail.com"] [uri "/owenmail.com"] [unique_id "aaT9JMOWemvalbQQipMTSAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-26 01:17:41 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 20:17:33.792588 2026] [security2:error] [pid 5501:tid 5501] [client 2a03:2880:f806:22:::52167] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.cpking.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cpking.com"] [uri "/cpking.com"] [unique_id "aZ-fLXXSds7praX79EfL3AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 03:00:57 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 22:00:50.692308 2026] [security2:error] [pid 25321:tid 25321] [client 2a03:2880:f806:22:::47675] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|computerservicesofflorida.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "computerservicesofflorida.com"] [uri "/computerservicesofflorida.com"] [unique_id "aZvC4o8hLsBIp8Vw-vCNHAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 05:42:23 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:42:19.792499 2026] [security2:error] [pid 16914:tid 16914] [client 2a03:2880:f806:22:::34931] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nancyscafeandcatering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/dailymaturelove.com"] [unique_id "aZaiu_7gG3-VeNOg8jzpIwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 241 to 255 of 318 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.46.151.213

🇮🇩 180.247.63.199

🇺🇿 144.124.196.72

🇧🇩 103.13.193.31

🇺🇸 20.15.167.80

🇫🇮 185.225.203.84

🇭🇰 168.76.254.26

🇻🇳 163.223.8.141

🇺🇸 162.216.149.136

🇺🇸 146.190.128.6

🇳🇱 45.148.10.151

🇸🇬 43.156.33.17

🇯🇵 34.97.170.27

🇺🇸 24.199.106.129

🇬🇧 167.99.207.12

🇻🇳 103.163.118.115

🇧🇩 103.140.63.179

🇺🇦 46.98.61.242

🇵🇰 39.55.128.72

🇫🇷 2001:41d0:303:5883::1