JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:41d0:303:1f21::1

2001:41d0:303:1f21::1 was found in our database!

This IP was reported 156 times. Confidence of Abuse is 66%: ?

66%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:41d0:303:1f21::1

Whois 2001:41d0:303:1f21::1

IP Abuse Reports for 2001:41d0:303:1f21::1:

This IP address has been reported a total of 156 times from 41 distinct sources. 2001:41d0:303:1f21::1 was first reported on October 22nd 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-07-30 13:06:18 (18 hours ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 Hazzard	2026-07-30 10:26:50 (20 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇫🇷 bazter.pro	2026-07-28 11:16:33 (2 days ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-07-27 22:09:46 (3 days ago)	2001:41d0:303:1f21::1 - - [27/Jul/2026:23:09:48 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ... show more 2001:41d0:303:1f21::1 - - [27/Jul/2026:23:09:48 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇺🇸 Starburst SysOp Team	2026-07-27 06:15:54 (4 days ago)	BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked. Matched phrase "MJ12bot" at REQUEST_HEADE ... show more BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. (1100000-stl2-14) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-26 06:08:45 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:1f21::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:1f21::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 02:08:41.099329 2026] [security2:error] [pid 1935605:tid 1935605] [client 2001:41d0:303:1f21::1:44046] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|homebuilt.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homebuilt.org"] [uri "/vendors/powerplants/[email protected]"] [unique_id "amWkabAls48RbLCxvaBcUwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2026-07-25 05:05:48 (6 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
Anonymous	2026-07-23 20:08:02 (1 week ago)	2001:41d0:303:1f21::1 - - [24/Jul/2026:04:06:22 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A5%C2%86%C2%8D%C3 ... show more 2001:41d0:303:1f21::1 - - [24/Jul/2026:04:06:22 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A5%C2%86%C2%8D%C3%A9%C2%81%C2%87%C3%AF%C2%BC%C2%8E%C3%A7%C2%91%C2%AA%C3%A9%C2%BA%C2%97%C3%A7%C2%9A%C2%87%C3%A5%C2%90%C2%8E%C3%A3%C2%80%C2%8B%C3%A7%C2%B6%C2%B2%C3%A4%C2%B8%C2%8A%C3%A6%C2%94%C2%BE%C3%A6%C2%98%C2%A0/ HTTP/1.1" 404 39515 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2001:41d0:303:1f21::1 - - [24/Jul/2026:04:06:40 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A6%C2%83%C2%85%C3%A4%C2%BF%C2%A1%C3%A3%C2%80%C2%8B%C3%A6%C2%96%C2%B0%C3%A5%C2%8A%C2%A0%C3%A5%C2%9D%C2%A1/ HTTP/1.1" 404 39515 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2001:41d0:303:1f21::1 - - [24/Jul/2026:04:07:16 +0800] "GET /2013%C3%A5%C2%B9%C2%B4%C3%A6%C2%96%C2%B0%C3%A8%C2%A3%C2%BD%C3%A4%C2%BD%C2%9C%C3%A6%C2%83%C2%A1%C3%A7%C2%AB%C2%A5%C3%A6%C2%97%C2%A5%C3%A8%C2%A8%C2%98%C3%A7%C2%AC%C2%AC%C3%A4%C2%BA%C2%8C%C3%A9%C2%83%C2%A8%C3%A6%C2%9B%C2%B2%C3%A3%C2%80%C2%8A%C3%A4%C2%BA%C2%8C%C3%A4%C2%BA%C2%BA%C3 ... show less	Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-07-20 06:29:34 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇨🇿 antihack.anarchista.xyz	2026-07-19 16:41:30 (1 week ago)	404 burst: 30 hits in 10 min, URI /tohle-dokaze-ai-jsme-cooked-%F0%9F%91%A8%F0%9F%8F%BB%F0%9F%8D%B3/ ... show more 404 burst: 30 hits in 10 min, URI /tohle-dokaze-ai-jsme-cooked-%F0%9F%91%A8%F0%9F%8F%BB%F0%9F%8D%B3/, Ref , UA Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) show less	Brute-Force Web App Attack Bad Web Bot
🇦🇺 MAGIC	2026-07-17 05:05:11 (2 weeks ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 Roderic	2026-07-14 13:33:01 (2 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
Anonymous	2026-07-12 08:05:59 (2 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:1f21:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:1f21::1 (FR/France/-) show less	Bad Web Bot
🇬🇧 Mendip_Defender	2026-07-11 02:48:30 (2 weeks ago)	2001:41d0:303:1f21::1 - - [11/Jul/2026:03:48:21 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ... show more 2001:41d0:303:1f21::1 - - [11/Jul/2026:03:48:21 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇩🇪 Hazzard	2026-07-08 10:15:00 (3 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot

Showing 1 to 15 of 156 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.127

🇺🇸 195.184.76.79

🇦🇴 193.163.125.179

🇻🇪 190.202.149.18

🇺🇸 161.115.235.213

🇺🇸 104.168.53.118

🇭🇰 101.36.121.72

🇩🇪 94.16.17.140

🇺🇸 52.238.192.78

🇫🇷 37.66.50.97

🇨🇦 20.220.203.117

🇳🇱 213.176.26.94

🇺🇸 162.216.149.67

🇫🇮 147.185.133.14

🇻🇳 103.195.240.46

🇳🇴 85.19.195.12

🇰🇷 61.76.112.4

🇳🇱 45.148.10.204

🇨🇳 36.141.93.74

🇬🇧 35.203.211.123