This IP was reported 213 times. Confidence of
Abuse
is 50%: ?
50%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
213
times from
56 distinct
sources.
2001:41d0:303:2c2f::1 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
[ssd5.kdns.gr] httpd-noisy-crawler: sites=bamhairsalon.gr; logs=/var/log/httpd/domains/bamhairsalon. ...
show more[ssd5.kdns.gr] httpd-noisy-crawler: sites=bamhairsalon.gr; logs=/var/log/httpd/domains/bamhairsalon.gr.log; samples=mj12bot:/robots.txt | mj12bot:/%CF%80%CF%89%CF%82-%CE%BD%CE%B1-%CE%B4%CE%B9%CE%B1%CF%87%CE%B5%CE%B9%CF%81%CE%B9%CF%83%CF%84%CE%B5%CE%AF%CF%82-%CF%84%CE%BF-%CF%83%CF%80%CE%AC%CF%83%CE%B9%CE%BC%CE%BF-%CF%84%CF%89%CE%BD-%CE%BC%CE%B1/ | mj12bot:/pos-na-diacheiristeis-to-spasimo-ton-ma/
show less
404 burst: 30 hits in 10 min, URI /na-%E2%98%95%EF%B8%8F-s-vojtechem-28-11-2025-www-doktorvajicko-co ...
show more404 burst: 30 hits in 10 min, URI /na-%E2%98%95%EF%B8%8F-s-vojtechem-28-11-2025-www-doktorvajicko-com/, Ref , UA Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)
show less
(modsecurity) srv101 ModSecurity 2001:41d0:303:2c2f::1 (FR/France/-): 10 in the last 3600 secs; Port ...
show more(modsecurity) srv101 ModSecurity 2001:41d0:303:2c2f::1 (FR/France/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
(modsecurity) srv103 ModSecurity 2001:41d0:303:2c2f::1 (FR/France/-): 10 in the last 3600 secs; Port ...
show more(modsecurity) srv103 ModSecurity 2001:41d0:303:2c2f::1 (FR/France/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
Anonymous
[ssd5.kdns.gr] httpd-noisy-crawler: sites=e-anastasiadis.gr; logs=/var/log/httpd/domains/e-anastasia ...
show more[ssd5.kdns.gr] httpd-noisy-crawler: sites=e-anastasiadis.gr; logs=/var/log/httpd/domains/e-anastasiadis.gr.log; samples=mj12bot:/%CE%BA%CE%B1%CE%BB%CE%AC%CE%B8%CE%B9/?remove_item=24f2f931f12a4d9149876a5bef93e96a&_wpnonce=1a77f3c233 | mj12bot:/%CE%BA%CE%B1%CE%BB%CE%AC%CE%B8%CE%B9/?remove_item=24f2f931f12a4d9149876a5bef93e96a&_wpnonce=c786343d8e | mj12bot:/%CE%BA%CE%B1%CE%BB%CE%AC%CE%B8%CE%B9/?remove_item=2cc73b24083105c3d488cc61b606d4f0&_wpnonce=8b85ccdb42
show less
[TueMay2614:55:54.6843642026][security2:error][pid1507015:tid1507112][client2001:41d0:303:2c2f::1:0] ...
show more[TueMay2614:55:54.6843642026][security2:error][pid1507015:tid1507112][client2001:41d0:303:2c2f::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"MJ12bot\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"324\"][id\"333515\"][rev\"4\"][msg\"Atomicorp.comWAFRules:MJ12Distributedbotdetected\(Disablethisruleifyouwanttoallowthisbot\)\"][severity\"WARNING\"][tag\"no_ar\"][hostname\"www.mgevents.ch\"][uri\"/robots.txt\"][unique_id\"ahWYWk092UUqn2--lqjfCgAAAMQ\"]
show less
(modsecurity) srv104 ModSecurity 2001:41d0:303:2c2f::1 (FR/France/-): 10 in the last 3600 secs; Port ...
show more(modsecurity) srv104 ModSecurity 2001:41d0:303:2c2f::1 (FR/France/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
(modsecurity) srv101 ModSecurity 2001:41d0:303:2c2f::1 (FR/-/-): 10 in the last 3600 secs; Ports: *; ...
show more(modsecurity) srv101 ModSecurity 2001:41d0:303:2c2f::1 (FR/-/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
404 burst: 30 hits in 10 min, URI /v-parlamente-sa-deje-len-to-co-chce-predseda-vlady-%E2%81%A0%E2%8 ...
show more404 burst: 30 hits in 10 min, URI /v-parlamente-sa-deje-len-to-co-chce-predseda-vlady-%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0%E2%81%A0/, Ref , UA Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)
show less
(modsecurity) srv103 ModSecurity 2001:41d0:303:2c2f::1 (FR/France/-): 10 in the last 3600 secs; Port ...
show more(modsecurity) srv103 ModSecurity 2001:41d0:303:2c2f::1 (FR/France/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
[SunMay0322:03:56.0464402026][security2:error][pid3473780:tid3473871][client2001:41d0:303:2c2f::1:0] ...
show more[SunMay0322:03:56.0464402026][security2:error][pid3473780:tid3473871][client2001:41d0:303:2c2f::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"MJ12bot\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"324\"][id\"333515\"][rev\"4\"][msg\"Atomicorp.comWAFRules:MJ12Distributedbotdetected\(Disablethisruleifyouwanttoallowthisbot\)\"][severity\"WARNING\"][tag\"no_ar\"][hostname\"autoeuro.lv\"][uri\"/robots.txt\"][unique_id\"afeqLK1tSCgs2swWsciE7wAAAMQ\"]
show less
Port Scan
Brute-Force
Web App Attack
Showing 1 to
15
of 213 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩