JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a03:2880:f806:3a::

2a03:2880:f806:3a::

Neutral Activity Whitelisted Subnet IPv6 SLAAC Note

142 reports found in our database

0% Low Risk

Abuse confidence score ?

2a03:2880:f806:3a:: is an IP address from within our whitelist belonging to the subnet 2a03:2880:f806::/48, which we identify as "Facebook".

ISP

Meta Platforms Ireland Limited

Usage Type

Commercial

ASN

AS32934

Domain Name

facebook.com

Country

🇺🇸 United States of America

City

Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a03:2880:f806:3a:::

This IP address has been reported a total of 142 times from 27 distinct sources. 2a03:2880:f806:3a:: was first reported on September 3rd 2025, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: Poland with 18 reports; Germany with 17 reports; France with 5 reports. The most common categories in these recent reports were: Bad Web Bot 43 times; Web App Attack 36 times; Brute-Force 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-03-07 12:34:16 (6 months ago)	(mod_security) mod_security (id:211190) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:211190) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 07:34:08.695670 2026] [security2:error] [pid 32055:tid 32055] [client 2a03:2880:f806:3a:::50951] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|mail.computerian.net\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /detail.php?shop/etc/necessaries23657261252.html"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.computerian.net"] [uri "/detail.php"] [unique_id "aawbQN_ZQ-EPrn20n5KmDgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-06 09:39:53 (6 months ago)	(resource-exhaustion) Server-wide Bot Block Heavy URL: filter_ 2a03:2880:f806:3a:: (US/United States ... show more (resource-exhaustion) Server-wide Bot Block Heavy URL: filter_ 2a03:2880:f806:3a:: (US/United States/-) show less	Hacking
🇺🇸 TPI-Abuse	2026-03-05 05:45:45 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 00:45:38.521209 2026] [security2:error] [pid 24260:tid 24260] [client 2a03:2880:f806:3a:::47053] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.theledman.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.theledman.com"] [uri "/file:/shield.sitelock.com/shield/theledman.com"] [unique_id "aakYgrvKIm53uzgE-uMLMAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-28 04:33:12 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 23:33:04.624290 2026] [security2:error] [pid 29506:tid 29506] [client 2a03:2880:f806:3a:::22639] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|3-6trucking.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3-6trucking.com"] [uri "/3-6trucking.com"] [unique_id "aaJwAPaC3eQolf9TAbYzOAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-27 06:50:57 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 01:50:53.121901 2026] [security2:error] [pid 22139:tid 22139] [client 2a03:2880:f806:3a:::56151] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bjfrancislaw.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bjfrancislaw.com"] [uri "/bjfrancislaw.com"] [unique_id "aaE-zaWf4AkUXdfJFBC1gQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 02:09:18 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 21:09:10.714336 2026] [security2:error] [pid 6551:tid 6551] [client 2a03:2880:f806:3a:::55467] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.cpking.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cpking.com"] [uri "/cpking.com"] [unique_id "aZplRqTZ7pf1Wg2RFjbjYQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 13:48:30 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 08:48:25.351735 2026] [security2:error] [pid 15498:tid 15498] [client 2a03:2880:f806:3a:::44899] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mitchellart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mitchellart.com"] [uri "/mitchellart.com"] [unique_id "aZhmKfFPmC61jGFKflRScgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 16:10:18 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 11:10:13.282528 2026] [security2:error] [pid 32615:tid 32615] [client 2a03:2880:f806:3a:::48025] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|darkalleyproductions.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "darkalleyproductions.com"] [uri "/darkalleyproductions.com"] [unique_id "aZXkZT_8AR3yQtzkK76LfAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2025-12-04 00:37:19 (9 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
Anonymous	2025-12-03 12:47:22 (9 months ago)	[Wed Dec 03 13:40:42.132647 2025] [authz_core:error] [pid 2471345:tid 2471360] [remote 2a03:2880:f80 ... show more [Wed Dec 03 13:40:42.132647 2025] [authz_core:error] [pid 2471345:tid 2471360] [remote 2a03:2880:f806:3a:::51588] AH01630: client denied by server configuration: /var/www/10137/exklusive-fincas-mallorca.de/suche.html [Wed Dec 03 13:42:59.413580 2025] [authz_core:error] [pid 2471489:tid 2471512] [remote 2a03:2880:f806:3a:::60594] AH01630: client denied by server configuration: /var/www/10137/exklusive-fincas-mallorca.de/suche.html [Wed Dec 03 13:47:22.458604 2025] [authz_core:error] [pid 2471345:tid 2471351] [remote 2a03:2880:f806:3a:::54360] AH01630: client denied by server configuration: /var/www/10137/exklusive-fincas-mallorca.de/suche.html show less	Web Spam Blog Spam Brute-Force Web App Attack
Anonymous	2025-12-03 06:31:20 (9 months ago)	[Wed Dec 03 07:20:31.272873 2025] [authz_core:error] [pid 2471489:tid 2471505] [remote 2a03:2880:f80 ... show more [Wed Dec 03 07:20:31.272873 2025] [authz_core:error] [pid 2471489:tid 2471505] [remote 2a03:2880:f806:3a:::60756] AH01630: client denied by server configuration: /var/www/10137/exklusive-fincas-mallorca.de/suche.html [Wed Dec 03 07:23:13.947340 2025] [authz_core:error] [pid 2471489:tid 2471498] [remote 2a03:2880:f806:3a:::60642] AH01630: client denied by server configuration: /var/www/10137/exklusive-fincas-mallorca.de/suche.html [Wed Dec 03 07:31:20.148664 2025] [authz_core:error] [pid 2471489:tid 2471491] [remote 2a03:2880:f806:3a:::58352] AH01630: client denied by server configuration: /var/www/10137/exklusive-fincas-mallorca.de/suche.html show less	Web Spam Blog Spam Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 00:53:53 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 19:53:48.026064 2025] [security2:error] [pid 727:tid 727] [client 2a03:2880:f806:3a:::57920] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|independentmusicconference.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "independentmusicconference.com"] [uri "/independentmusicconference.com"] [unique_id "aS-KHKIVmpW4o3wLEnPjJAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 20:44:57 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 15:44:54.837374 2025] [security2:error] [pid 26554:tid 26554] [client 2a03:2880:f806:3a:::58578] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|robertgregorybrowne.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "robertgregorybrowne.com"] [uri "/robertgregorybrowne.com"] [unique_id "aStbRifRDc9LGJj_fvMFgAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2025-11-29 20:28:29 (9 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-29 20:10:52 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 15:10:46.140368 2025] [security2:error] [pid 7116:tid 7116] [client 2a03:2880:f806:3a:::55918] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|opticasprisma.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "opticasprisma.com"] [uri "/opticasprisma.com"] [unique_id "aStTRgYAkDb59ibjNSKy7gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 106 to 120 of 142 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.189.119

🇺🇸 204.8.98.45

🇩🇪 178.16.55.109

🇸🇬 172.104.37.78

🇨🇳 106.13.182.13

🇺🇸 98.41.64.246

🇺🇸 66.132.172.128

🇹🇭 203.154.158.195

🇺🇸 147.185.132.22

🇹🇭 147.50.231.135

🇫🇷 144.91.121.61

🇹🇭 124.156.243.224

🇭🇰 104.208.108.166

🇧🇬 82.147.142.205

🇮🇳 74.225.169.109

🇳🇱 45.148.10.152

🇧🇾 37.212.6.108

🇲🇽 189.129.201.161

🇮🇶 169.224.88.173

🇮🇳 116.72.9.151