JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a03:2880:f806:41::

2a03:2880:f806:41::

Neutral Activity Whitelisted Subnet IPv6 SLAAC Note

263 reports found in our database

0% Low Risk

Abuse confidence score ?

2a03:2880:f806:41:: is an IP address from within our whitelist belonging to the subnet 2a03:2880:f806::/48, which we identify as "Facebook".

ISP

Meta Platforms Ireland Limited

Usage Type

Commercial

ASN

AS32934

Domain Name

facebook.com

Country

🇺🇸 United States of America

City

Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a03:2880:f806:41:::

This IP address has been reported a total of 263 times from 32 distinct sources. 2a03:2880:f806:41:: was first reported on September 16th 2025, and the most recent report was 7 hours ago. In the last 60 days, the top reporter locations were: Poland with 13 reports; Germany with 12 reports; United States of America with 6 reports. The most common categories in these recent reports were: Bad Web Bot 35 times; Web App Attack 24 times; Hacking 3 times; Brute-Force 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 myagent.site	2026-03-11 01:47:09 (5 months ago)	Blocking for trying to access an exploit file: /SiteMap.aspx	Hacking
🇺🇸 TPI-Abuse	2026-03-07 23:11:44 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 18:11:38.402726 2026] [security2:error] [pid 3885:tid 3885] [client 2a03:2880:f806:41:::56427] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|noscentpro.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "noscentpro.com"] [uri "/noscentpro.com"] [unique_id "aaywqn8qsbaFd5A_vJbhcgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-01 02:05:20 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 21:05:13.471204 2026] [security2:error] [pid 14415:tid 14415] [client 2a03:2880:f806:41:::23277] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|earlyfordv8crrg10.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "earlyfordv8crrg10.com"] [uri "/earlyfordv8crrg10.com"] [unique_id "aaOe2Ysi1s0mgOH2V1wxmQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-27 05:17:30 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 00:17:23.558356 2026] [security2:error] [pid 29939:tid 29939] [client 2a03:2880:f806:41:::64125] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|owenmail.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "owenmail.com"] [uri "/owenmail.com"] [unique_id "aaEo48quhojJpUIcNO5ZjwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-26 02:26:35 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 21:26:30.910017 2026] [security2:error] [pid 23967:tid 23967] [client 2a03:2880:f806:41:::63377] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|phtaudio.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phtaudio.com"] [uri "/phtaudio.com"] [unique_id "aZ-vVtK9yeaUPz4y7rmvAwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-26 01:09:44 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 20:09:36.137623 2026] [security2:error] [pid 29955:tid 29955] [client 2a03:2880:f806:41:::37835] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jennlaurenphotography.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jennlaurenphotography.com"] [uri "/jennlaurenphotography.com"] [unique_id "aZ-dUBs3EEaTb65MYugr2AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 05:12:25 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 00:12:19.906271 2026] [security2:error] [pid 14364:tid 14364] [client 2a03:2880:f806:41:::44733] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jnpmarinesolutions.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jnpmarinesolutions.com"] [uri "/jnpmarinesolutions.com"] [unique_id "aZvhs_q8eRvzziaoC8RJoAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 09:53:00 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 04:52:56.878418 2026] [security2:error] [pid 24175:tid 24175] [client 2a03:2880:f806:41:::58117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|scoretopicturenetwork.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scoretopicturenetwork.com"] [uri "/scoretopicturenetwork.com"] [unique_id "aZrR-MxFZCLUYMs5OsUf4wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-21 19:03:18 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 14:03:15.222818 2026] [security2:error] [pid 2314:tid 2314] [client 2a03:2880:f806:41:::26431] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nesetsv.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nesetsv.com"] [uri "/nesetsv.com"] [unique_id "aZoBc0lSacs4BK2nFq33LQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-21 08:21:59 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 03:21:53.830812 2026] [security2:error] [pid 14209:tid 14209] [client 2a03:2880:f806:41:::63249] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|caddydad.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "caddydad.com"] [uri "/caddydad.com"] [unique_id "aZlrIckKDH7LC0BuTZfZywAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 12:31:49 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 07:31:45.169685 2026] [security2:error] [pid 32069:tid 32069] [client 2a03:2880:f806:41:::59785] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|swindon-itf.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "swindon-itf.com"] [uri "/swindon-itf.com"] [unique_id "aZhUMeZD7SgSzgarsj7bVQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 03:46:34 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:46:31.447452 2026] [security2:error] [pid 18211:tid 18211] [client 2a03:2880:f806:41:::65207] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.shorelineshowerdoor.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.shorelineshowerdoor.com"] [uri "/shorelineshowerdoor.com"] [unique_id "aZaHl6T_Ok5qI93pD680TgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 22:06:04 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:41:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 17:05:59.772904 2025] [security2:error] [pid 9702:tid 9702] [client 2a03:2880:f806:41:::56696] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.edgebiopharma.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.edgebiopharma.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aTC0R7MNJ87X_PhEm1fJjwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2025-12-03 18:38:33 (8 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
Anonymous	2025-12-03 12:51:08 (8 months ago)	[Wed Dec 03 13:40:38.108880 2025] [authz_core:error] [pid 2471345:tid 2471346] [remote 2a03:2880:f80 ... show more [Wed Dec 03 13:40:38.108880 2025] [authz_core:error] [pid 2471345:tid 2471346] [remote 2a03:2880:f806:41:::55908] AH01630: client denied by server configuration: /var/www/10137/exklusive-fincas-mallorca.de/suche.html [Wed Dec 03 13:43:43.820732 2025] [authz_core:error] [pid 2471489:tid 2471501] [remote 2a03:2880:f806:41:::53948] AH01630: client denied by server configuration: /var/www/10137/exklusive-fincas-mallorca.de/suche.html [Wed Dec 03 13:51:08.077856 2025] [authz_core:error] [pid 2471489:tid 2471492] [remote 2a03:2880:f806:41:::38772] AH01630: client denied by server configuration: /var/www/10137/exklusive-fincas-mallorca.de/suche.html show less	Web Spam Blog Spam Brute-Force Web App Attack

Showing 226 to 240 of 263 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 203.55.131.5

🇧🇪 198.235.24.133

🇦🇷 190.14.157.87

🇨🇳 101.68.51.99

🇹🇷 94.154.43.64

🇧🇬 79.124.60.218

🇺🇸 64.23.161.101

🇫🇮 62.238.16.176

🇬🇧 195.96.139.156

🇺🇸 162.216.149.229

🇺🇸 147.185.132.132

🇨🇦 138.197.164.175

🇯🇵 107.155.15.8

🇫🇷 91.196.152.94

🇫🇷 91.196.152.4

🇺🇸 198.211.99.18

🇺🇸 146.190.223.31

🇺🇸 143.198.225.197

🇸🇬 114.119.157.84

🇰🇷 61.72.135.38