JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:41d0:303:1456::1

2001:41d0:303:1456::1 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 58%: ?

58%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:41d0:303:1456::1

Whois 2001:41d0:303:1456::1

IP Abuse Reports for 2001:41d0:303:1456::1:

This IP address has been reported a total of 110 times from 35 distinct sources. 2001:41d0:303:1456::1 was first reported on January 9th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 claude CALVET	2026-08-01 19:23:17 (2 hours ago)	gee-11 : Blocage de caractères illégaux=>/index%0D%0A%20.php?option=com_jem&amp%5C;view=event&am ... show more gee-11 : Blocage de caractères illégaux=>/index%0D%0A%20.php?option=com_jem&amp%5C;view=event&amp%5C;id=74:animation-astronomie-cine-d%0D%0A%20ebat-pollution-nocturne( ) show less	Hacking
🇳🇱 Site.eu	2026-08-01 18:17:54 (4 hours ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 www.winos.me	2026-07-29 07:29:56 (3 days ago)	Malicious bot scraper	Port Scan Bad Web Bot
🇳🇱 Roderic	2026-07-28 19:32:10 (4 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
Anonymous	2026-07-26 04:30:02 (6 days ago)	CrowdSec decision: crowdsecurity/http-bad-user-agent (origin: crowdsec)	Port Scan
🇺🇸 TPI-Abuse	2026-07-25 03:14:57 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:1456::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:1456::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 23:14:50.128436 2026] [security2:error] [pid 814269:tid 814269] [client 2001:41d0:303:1456::1:53840] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bahamascruisersguide.com\|F\|2"] [data ". capesantamaria.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bahamascruisersguide.com"] [uri "/Cruising-Info/Cruising Info/www. capesantamaria.com"] [unique_id "amQqKitPsw1TeU-AuPP3NgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 10:15:41 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:1456::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:1456::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:15:35.306534 2026] [security2:error] [pid 65184:tid 65184] [client 2001:41d0:303:1456::1:43662] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hansen II/Hansen II/Pampa Rouge/originals/Thumbs.db"] [unique_id "amM7R2UAznApdFhqYsR_swAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-23 07:10:00 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇬🇧 Mendip_Defender	2026-07-21 05:53:15 (1 week ago)	2001:41d0:303:1456::1 - - [21/Jul/2026:06:53:16 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ... show more 2001:41d0:303:1456::1 - - [21/Jul/2026:06:53:16 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇬🇧 Mendip_Defender	2026-07-17 20:06:36 (2 weeks ago)	2001:41d0:303:1456::1 - - [17/Jul/2026:21:06:22 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ... show more 2001:41d0:303:1456::1 - - [17/Jul/2026:21:06:22 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-14 16:35:17 (2 weeks ago)	(mod_security) mod_security (id:217291) triggered by 2001:41d0:303:1456::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:217291) triggered by 2001:41d0:303:1456::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 12:35:11.569898 2026] [security2:error] [pid 20820:tid 20820] [client 2001:41d0:303:1456::1:41114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|killeramps.com\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "killeramps.com"] [uri "/g12contact.php"] [unique_id "alZlP55Xtt7CCgSlynpXfAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-14 08:39:47 (2 weeks ago)	Automated report (2026-07-14T04:39:47-04:00). Misbehaving bot detected.	Bad Web Bot Open Proxy
🇬🇧 Mendip_Defender	2026-07-09 12:46:58 (3 weeks ago)	2001:41d0:303:1456::1 - - [09/Jul/2026:13:46:49 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ... show more 2001:41d0:303:1456::1 - - [09/Jul/2026:13:46:49 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇺🇸 nodepile	2026-07-06 18:41:24 (3 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/chevrolet-corvette-c7-14-19 ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/chevrolet-corvette-c7-14-19-xb-led-tail-lights-2.html ua='Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)') show less	Web App Attack Exploited Host
🇩🇪 4server	2026-07-02 17:33:05 (4 weeks ago)	[ThuJul0219:33:01.8505122026][security2:error][pid3262637:tid3262733][client2001:41d0:303:1456::1:0] ... show more [ThuJul0219:33:01.8505122026][security2:error][pid3262637:tid3262733][client2001:41d0:303:1456::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"MJ12bot\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"324\"][id\"333515\"][rev\"4\"][msg\"Atomicorp.comWAFRules:MJ12Distributedbotdetected\(Disablethisruleifyouwanttoallowthisbot\)\"][severity\"WARNING\"][tag\"no_ar\"][hostname\"respiratrentino.it\"][uri\"/robots.txt\"][unique_id\"akagzcl1rb-SSWBWgymF0wAAAQI\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.228.203.3

🇨🇳 171.108.182.240

🇺🇸 165.227.85.199

🇺🇸 146.190.119.189

🇮🇳 103.204.167.40

🇩🇪 94.16.17.141

🇩🇪 51.195.40.26

🇳🇱 45.153.34.231

🇳🇱 195.178.110.232

🇨🇳 120.52.19.71

🇨🇳 115.190.181.18

🇳🇱 45.148.10.147

🇨🇳 14.18.122.240

🇳🇱 213.176.26.85

🇳🇱 213.176.26.58

🇧🇪 198.235.24.222

🇩🇪 185.242.3.195

🇩🇪 152.53.181.248

🇸🇬 145.223.131.201

🇺🇸 137.184.50.152