JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a03:2880:f806:d::

2a03:2880:f806:d::

Neutral Activity Whitelisted Subnet IPv6 SLAAC Note

382 reports found in our database

0% Low Risk

Abuse confidence score ?

2a03:2880:f806:d:: is an IP address from within our whitelist belonging to the subnet 2a03:2880:f806::/48, which we identify as "Facebook".

ISP

Meta Platforms Ireland Limited

Usage Type

Commercial

ASN

AS32934

Domain Name

facebook.com

Country

🇺🇸 United States of America

City

Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a03:2880:f806:d:::

This IP address has been reported a total of 382 times from 42 distinct sources. 2a03:2880:f806:d:: was first reported on July 10th 2024, and the most recent report was 5 hours ago. In the last 60 days, the top reporter locations were: Poland with 26 reports; Germany with 16 reports; France with 4 reports. The most common categories in these recent reports were: Bad Web Bot 50 times; Web App Attack 42 times; Brute-Force 4 times; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-09-03 10:31:00 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 06:30:56.873611 2024] [security2:error] [pid 19796:tid 19796] [client 2a03:2880:f806:d:::44074] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.hazardvillefire.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hazardvillefire.org"] [uri "/publicsafetyedu.com"] [unique_id "ZtblYG6CWmcWKIaP_1Dq9wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-31 10:16:10 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 06:16:05.847250 2024] [security2:error] [pid 4749:tid 4749] [client 2a03:2880:f806:d:::45988] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pointandshootfilm.com\|F\|2"] [data ".facebook.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pointandshootfilm.com"] [uri "/www.facebook.com"] [unique_id "ZtLtZeXGQc6je8E-r_YAYwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2024-08-30 22:12:04 (2 years ago)	2a03:2880:f806:d:: - - [30/Aug/2024:23:12:06 +0100] "GET /picture.php/MC_12-10-2014_0289/tags/491-so ... show more 2a03:2880:f806:d:: - - [30/Aug/2024:23:12:06 +0100] "GET /picture.php/MC_12-10-2014_0289/tags/491-south_west_land_rover_club?action=rate HTTP/1.0" 302 1160 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-08-22 02:21:10 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 21 22:21:04.508350 2024] [security2:error] [pid 31662:tid 31694] [client 2a03:2880:f806:d:::52414] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tomithai.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tomithai.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZsagkI8UtGEqtwtudYu4fgAAAZg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-19 15:53:52 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 19 11:53:44.262294 2024] [security2:error] [pid 1620:tid 1620] [client 2a03:2880:f806:d:::52762] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|williamfitzsimmons.com\|F\|2"] [data ".harlows.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/news/0328-william-adds-chattanooga-date-uscan-tour/www.harlows.com"] [unique_id "ZsNqiIh5nDYBOe8q-xn4TgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-16 16:23:07 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 16 12:23:00.883519 2024] [security2:error] [pid 2402256:tid 2402256] [client 2a03:2880:f806:d:::43594] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.maycockfamily.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.maycockfamily.com"] [uri "/blog/wp-json/wp/v2/users/1"] [unique_id "Zr985FZ1mGSwZMWj0HxZiAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-16 05:30:31 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 16 01:30:26.313356 2024] [security2:error] [pid 22160:tid 22160] [client 2a03:2880:f806:d:::58134] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.clcmillvale.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.clcmillvale.com"] [uri "/wp-json/wp/v2/users/2"] [unique_id "Zr7j8khUmufSrKqKM_KqZQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-16 04:28:41 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 16 00:28:38.217530 2024] [security2:error] [pid 7583:tid 7583] [client 2a03:2880:f806:d:::35278] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.artbytracyjane.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.artbytracyjane.com"] [uri "/wp-json/wp/v2/users/2"] [unique_id "Zr7VdghSWK3E2AEsDL7vmQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-15 19:52:11 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 15 15:52:05.550125 2024] [security2:error] [pid 23446:tid 23446] [client 2a03:2880:f806:d:::38336] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|richardpetersbooks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "richardpetersbooks.com"] [uri "/blog/wp-json/wp/v2/users/1"] [unique_id "Zr5cZfHzXqR-GiGxwhQWmAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-15 09:46:29 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 15 05:46:22.478957 2024] [security2:error] [pid 8109:tid 8109] [client 2a03:2880:f806:d:::42700] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.artsy-style.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.artsy-style.com"] [uri "/ART/GLITZ/Thumbs.db"] [unique_id "Zr3ObqRbTWFhPdOkGgG_PQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-14 21:49:50 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 14 17:49:42.705171 2024] [security2:error] [pid 11892:tid 11892] [client 2a03:2880:f806:d:::48124] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pixelsbeach.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixelsbeach.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Zr0mdlgimGoRd18YIGqDoQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-13 14:42:34 (2 years ago)	(mod_security) mod_security (id:211180) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:211180) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 13 10:42:30.147776 2024] [security2:error] [pid 29855:tid 29855] [client 2a03:2880:f806:d:::43614] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "50"] [id "211180"] [rev "3"] [msg "COMODO WAF: Session Fixation: SessionID Parameter Name with No Referer\|\|depthsofsatan.com\|F\|2"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "depthsofsatan.com"] [uri "/forum/"] [unique_id "Zrtw1uLrTTqHxOGr4Zb46AAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-13 13:44:27 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 13 09:44:20.184302 2024] [security2:error] [pid 23229:tid 23229] [client 2a03:2880:f806:d:::41430] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|realdoctorstories.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "realdoctorstories.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZrtjNAM1C3d4SU8PQOFnPwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-13 09:11:21 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 13 05:11:12.962920 2024] [security2:error] [pid 16302:tid 16302] [client 2a03:2880:f806:d:::55448] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.lzbvi.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lzbvi.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZrsjMPsT1-AaObARIbfQ_wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-12 11:55:49 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 07:55:42.297613 2024] [security2:error] [pid 14171:tid 14171] [client 2a03:2880:f806:d:::45938] [client 2a03:2880:f806:d::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.webflexdesign.co.uk\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.webflexdesign.co.uk"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Zrn4Pk_QzQAgWfYbj9LZawAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 361 to 375 of 382 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 94.233.127.194

🇺🇸 91.230.168.148

🇫🇷 54.36.99.29

🇺🇸 2607:f8b0:400c:c15::122

🇲🇩 194.102.104.178

🇺🇸 181.214.83.153

🇺🇸 172.217.106.217

🇮🇶 169.224.7.238

🇺🇸 159.223.139.72

🇨🇲 102.220.19.175

🇦🇪 94.203.113.111

🇦🇪 94.200.95.18

🇪🇸 84.236.153.81

🇺🇸 66.132.224.16

🇺🇸 66.132.186.231

🇮🇶 65.20.134.110

🇲🇾 49.125.201.89

🇮🇳 45.248.163.54

🇩🇿 41.111.198.172

🇹🇷 213.14.61.157