JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2001:41d0:303:2b8a::1

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

80% Critical

316 reports

65 reporters · latest 11 hours ago

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Lille, Hauts-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2001:41d0:303:2b8a::1

This IP address has been reported a total of 316 times from 65 distinct sources. 2001:41d0:303:2b8a::1 was first reported on July 7th 2025, and the most recent report was 11 hours ago. In the last 60 days, the top reporter locations were: Germany with 19 reports; Turkey with 16 reports; Netherlands with 14 reports. The most common categories in these recent reports were: Bad Web Bot 42 times; Web App Attack 38 times; Hacking 18 times; Brute-Force 5 times; Port Scan 3 times; Other 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 WeCloudit-Anti-Abuse	2026-09-24 12:53:08 (11 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 palzer.IT	2026-09-24 07:02:55 (17 hours ago)	Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:2b8a::1 - - [24/Sep/2026:09:02:33 + ... show more Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:2b8a::1 - - [24/Sep/2026:09:02:33 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 6399 - Mozilla/5.0 (compatible; MJ12bot/v1.4.8; [DOMAIN_REMOVED] show less	Bad Web Bot
🇩🇪 LRob	2026-09-23 20:12:42 (1 day ago)	This address swept through a list of pages that do not exist on our site within seconds — a scanner ... show more This address swept through a list of pages that do not exist on our site within seconds — a scanner working through its wordlist of exploitable paths. Blocked; please check the machine behind it for a scanner or malware. \| method: GET \| path: /articles/172574-inscription-match-pr-rimfire \| 2026-09-23 20:12 UTC show less	Port Scan Web App Attack
🇳🇱 Roderic	2026-09-23 16:27:19 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇳🇱 Site.eu	2026-09-23 13:34:00 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇨🇦 Mediashaker	2026-09-23 10:03:20 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2b8a:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2b8a::1 (FR/France/-) show less	Bad Web Bot
🇩🇪 PTScreens	2026-09-22 22:23:42 (2 days ago)	CrowdSec: http-bad-user-agent - 2 event(s).	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-19 11:34:07 (5 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-19 06:34:05 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:2b8a::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:2b8a::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 02:34:00.881073 2026] [security2:error] [pid 2572:tid 2632] [client 2001:41d0:303:2b8a::1:44572] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dasperformance.com\|F\|2"] [data ".das performance.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dasperformance.com"] [uri "/blog/page/2/W WW.DAS performance.com"] [unique_id "aq4s2CgxDWHMYy4AliHgGAAAAUY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-19 03:27:49 (5 days ago)	2001:41d0:303:2b8a::1 - - [19/Sep/2026:11:25:58 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A6%C2%83%C2%85%C3 ... show more 2001:41d0:303:2b8a::1 - - [19/Sep/2026:11:25:58 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A6%C2%83%C2%85%C3%A4%C2%BF%C2%A1%C3%A3%C2%80%C2%8B%C3%A6%C2%96%C2%B0%C3%A5%C2%8A%C2%A0%C3%A5%C2%9D%C2%A1/ HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2001:41d0:303:2b8a::1 - - [19/Sep/2026:11:26:15 +0800] "GET /2013%C3%A5%C2%B9%C2%B4%C3%A6%C2%96%C2%B0%C3%A8%C2%A3%C2%BD%C3%A4%C2%BD%C2%9C%C3%A6%C2%83%C2%A1%C3%A7%C2%AB%C2%A5%C3%A6%C2%97%C2%A5%C3%A8%C2%A8%C2%98%C3%A7%C2%AC%C2%AC%C3%A4%C2%BA%C2%8C%C3%A9%C2%83%C2%A8%C3%A6%C2%9B%C2%B2%C3%A3%C2%80%C2%8A%C3%A4%C2%BA%C2%8C%C3%A4%C2%BA%C2%BA%C3%A8%C2%AD%C2%89%C3%A6%C2%93%C2%9A%C3%A3%C2%80%C2%8B%C3%A9%C2%96%C2%8B%C3%A5%C2%A7%C2%8B%C3%A9%C2%A0%C2%90/ HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2001:41d0:303:2b8a::1 - - [19/Sep/2026:11:26:24 +0800] "GET /2015%C3%A7%C2%A4%C2%BE%C3%A5%C2%8D%C2%80%C3%A6%C2%96%C2%87%C3%A5%C2%8C%C2%96%C3%A5%C2%A4%C2%A7%C3%A4%C2%BD%C2%BF-%C3%A3%C2%80%C2% ... show less	Bad Web Bot Web App Attack
🇨🇿 antihack.anarchista.xyz	2026-09-17 02:52:25 (1 week ago)	404 burst: 30 hits in 10 min, URI /na-%E2%98%95%EF%B8%8F-s-vojtechem-02-12-2025-www-doktorvajicko-co ... show more 404 burst: 30 hits in 10 min, URI /na-%E2%98%95%EF%B8%8F-s-vojtechem-02-12-2025-www-doktorvajicko-com/, Ref , UA Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) show less	Brute-Force Web App Attack Bad Web Bot
🇩🇪 palzer.IT	2026-09-16 17:06:17 (1 week ago)	Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:2b8a::1 - - [09/Sep/2026:08:22:35 + ... show more Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:2b8a::1 - - [09/Sep/2026:08:22:35 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 6430 - Mozilla/5.0 (compatible; MJ12bot/v1.4.8; [DOMAIN_REMOVED] show less	Bad Web Bot
🇫🇷 ingroscart.it	2026-09-16 01:15:52 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2b8a:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2b8a::1 (Unknown) show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-15 11:35:41 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇨🇦 Mediashaker	2026-09-14 20:56:09 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2b8a:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2b8a::1 (FR/France/-) show less	Bad Web Bot

Showing 1 to 15 of 316 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:c84::258

🇨🇳 223.85.102.138

🇺🇸 206.189.233.36

🇸🇦 188.53.52.21

🇨🇳 119.188.182.154

🇨🇳 116.147.40.93

🇹🇼 111.70.3.122

🇯🇴 86.108.43.93

🇺🇸 51.8.102.123

🇨🇦 50.98.19.66

🇲🇾 47.250.139.239

🇳🇱 45.148.10.120

🇬🇧 45.82.76.118

🇧🇪 34.140.234.80

🇩🇪 207.154.250.192

🇷🇺 178.207.211.215

🇧🇷 177.85.111.7

🇮🇩 163.7.15.54

🇨🇳 112.194.142.167

🇸🇬 85.203.21.22