JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a03:2880:f806:39::

Neutral Activity Whitelisted Subnet IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

314 reports

42 reporters · latest 1 day ago

2a03:2880:f806:39:: is on our whitelist as Facebook via the subnet 2a03:2880:f806::/48.

ISP: Meta Platforms Ireland Limited
Usage Type: Commercial
ASN: AS32934
Domain Name: facebook.com
Country: 🇺🇸 United States of America
City: Atlanta, Georgia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

314 from 42 distinct reporters

First reported

September 20th 2025

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇵🇱 Poland 17 🇺🇸 United States of America 15 🇩🇪 Germany 13

Most common categories Bad Web Bot 46 Web App Attack 40 Brute-Force 19 Hacking 4 DDoS Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Facebook. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-02 02:06:39 UTC · (6 months ago)	(resource-exhaustion) Server-wide Bot Block Heavy URL: filter_ 2a03:2880:f806:39:: (US/United States/-)	Hacking
🇺🇸 鬼影233	2026-05-02 00:10:10 UTC · (6 months ago)	meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)	Bad Web Bot
🇵🇱 sefinek.net	2026-05-01 05:13:20 UTC · (6 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /booru/artist/%E8%90%8C%E3%83%8E%E3%81%86%E3%81%AB \| UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /booru/artist/%E8%90%8C%E3%83%8E%E3%81%86%E3%81%AB \| UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-01 03:17:08 UTC · (6 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a03:2880:f806:39:: 172.71.30.195 - - [29/Apr/2026:16:14:34 -0300] "GET /meta.json HTTP/1.1" 404 414	Bad Web Bot
Anonymous	2026-05-01 03:14:58 UTC · (6 months ago)	(resource-exhaustion) Server-wide Bot Block Heavy URL: add-to-cart 2a03:2880:f806:39:: (US/United States/-)	Hacking
Anonymous	2026-05-01 00:46:31 UTC · (6 months ago)	(resource-exhaustion) Server-wide Bot Block Heavy URL: filter_ 2a03:2880:f806:39:: (US/United States/-)	Hacking
🇺🇸 TPI-Abuse	2026-04-30 23:42:23 UTC · (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 19:42:16.642864 2026] [security2:error] [pid 13979:tid 13979] [client 2a03:2880: ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 19:42:16.642864 2026] [security2:error] [pid 13979:tid 13979] [client 2a03:2880:f806:39:::28720] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|automationmp.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "automationmp.com"] [uri "/automationmp.com"] [unique_id "afPo2EjJmHWYjYMlaO16tQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-04-30 02:12:27 UTC · (6 months ago)	meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)	Bad Web Bot
🇧🇷 Peregrine	2026-04-29 19:14:38 UTC · (6 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a03:2880:f806:39:: 172.71.30.195 - - [29/Apr/2026:16:14:34 -0300] "GET /meta.json HTTP/1.1" 404 414	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-29 10:29:35 UTC · (6 months ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 06:29:32.267882 2026] [security2:error] [pid 21906:tid 21906] [client 2a03:2880: ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 06:29:32.267882 2026] [security2:error] [pid 21906:tid 21906] [client 2a03:2880:f806:39:::34774] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.tomartsmedia.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tomartsmedia.org"] [uri "/wp-json/wp/v2/users/2"] [unique_id "afHdjNeL6pDKTstaQTMEgQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-29 06:44:04 UTC · (6 months ago)	(resource-exhaustion) Server-wide Bot Block Heavy URL: wc-ajax 2a03:2880:f806:39:: (US/United States/-)	Hacking
🇺🇸 鬼影233	2026-04-29 00:07:06 UTC · (6 months ago)	meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)	Bad Web Bot
Anonymous	2026-04-28 20:25:56 UTC · (6 months ago)	(resource-exhaustion) Server-wide Bot Block Heavy URL: filter_ 2a03:2880:f806:39:: (US/United States/-)	Hacking
🇺🇸 鬼影233	2026-04-28 00:05:28 UTC · (6 months ago)	meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-27 21:42:31 UTC · (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 17:42:26.153179 2026] [security2:error] [pid 11706:tid 11706] [client 2a03:2880: ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 17:42:26.153179 2026] [security2:error] [pid 11706:tid 11706] [client 2a03:2880:f806:39:::39026] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bjfrancislaw.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bjfrancislaw.com"] [uri "/bjfrancislaw.com"] [unique_id "ae_YQqJZqd9LrXscmLcwOAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 196 to 210 of 314 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 222.175.173.186

🇺🇸 217.177.128.229

🇻🇳 210.245.30.140

🇵🇦 194.165.16.166

🇬🇧 172.70.85.169

🇸🇪 154.14.144.90

🇳🇬 102.90.124.210

🇫🇷 90.47.183.90

🇺🇸 76.186.177.166

🇺🇸 70.167.233.134

🇺🇸 68.225.62.17

🇳🇱 45.148.10.42

🇮🇶 45.146.15.151

🇧🇪 35.210.236.56

🇧🇪 35.210.99.213

🇨🇦 20.200.64.201

🇺🇸 3.86.112.238

🇦🇷 181.232.239.35

🇦🇷 179.38.194.255

🇺🇦 178.74.219.63