JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:41d0:2005:100::143c

2001:41d0:2005:100::143c was found in our database!

This IP was reported 4 times. Confidence of Abuse is 14%: ?

14%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	OVH Srl
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-605208bb.vps.ovh.net
Domain Name	ovh.net
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:41d0:2005:100::143c

Whois 2001:41d0:2005:100::143c

IP Abuse Reports for 2001:41d0:2005:100::143c:

This IP address has been reported a total of 4 times from 2 distinct sources. 2001:41d0:2005:100::143c was first reported on June 15th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-06-19 18:51:58 (3 days ago)	[FriJun1920:51:52.6281722026][security2:error][pid2406918:tid2407003][client2001:41d0:2005:100::143c ... show more [FriJun1920:51:52.6281722026][security2:error][pid2406918:tid2407003][client2001:41d0:2005:100::143c:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".db\"][severity\"ERROR\"][hostname\"mail.wildpferde.ch\"][uri\"/.hermes/state.db\"][unique_id\"ajWPyI5-1gPvLRbirtDzewAAAJg\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 01:04:24 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:2005:100::143c (vps-605208bb.vps.ovh. ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:2005:100::143c (vps-605208bb.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 21:04:20.351128 2026] [security2:error] [pid 9184:tid 9184] [client 2001:41d0:2005:100::143c:37702] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.construction.bonefrog.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.construction.bonefrog.com"] [uri "/telegram_messages.db"] [unique_id "ajChFOvqeytrunKpLNm3OQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 17:43:50 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2001:41d0:2005:100::143c (vps-605208bb.vps.ovh. ... show more (mod_security) mod_security (id:210492) triggered by 2001:41d0:2005:100::143c (vps-605208bb.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 13:43:45.118949 2026] [security2:error] [pid 23289:tid 23299] [client 2001:41d0:2005:100::143c:56328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "richardleeweatherman.com"] [uri "/.env.save"] [unique_id "ajA50SUhuiPsUjylIaAvJgAAAEM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 16:24:41 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2001:41d0:2005:100::143c (vps-605208bb.vps.ovh. ... show more (mod_security) mod_security (id:210492) triggered by 2001:41d0:2005:100::143c (vps-605208bb.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 12:24:35.960564 2026] [security2:error] [pid 22128:tid 22181] [client 2001:41d0:2005:100::143c:50048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradomohs.aafm.us"] [uri "/.hermes/.env"] [unique_id "ajAnQ9O1f0LFAhtn4ute0wAAAJI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.5.207.64

🇫🇷 91.231.89.74

🇱🇻 81.30.98.49

🇨🇳 61.184.128.210

🇳🇱 45.148.10.152

🇸🇬 43.128.113.103

🇸🇪 31.59.160.12

🇺🇸 195.184.76.223

🇺🇸 143.55.230.175

🇨🇳 120.48.90.166

🇸🇬 103.250.11.80

🇫🇷 91.231.89.213

🇳🇱 91.92.40.29

🇳🇱 91.92.40.11

🇲🇦 81.192.46.36

🇩🇪 69.5.169.147

🇳🇱 45.148.10.147

🇩🇪 45.8.68.66

🇸🇬 43.160.200.19

🇮🇳 2401:4900:30d6:93b5:689f:36d8:fa9a:ffe4