JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:41d0:303:2c2f::1

2001:41d0:303:2c2f::1 was found in our database!

This IP was reported 281 times. Confidence of Abuse is 71%: ?

71%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:41d0:303:2c2f::1

Whois 2001:41d0:303:2c2f::1

IP Abuse Reports for 2001:41d0:303:2c2f::1:

This IP address has been reported a total of 281 times from 68 distinct sources. 2001:41d0:303:2c2f::1 was first reported on April 2nd 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 palzer.IT	2026-09-16 17:06:18 (1 hour ago)	Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:2c2f::1 - - [14/Sep/2026:05:05:56 + ... show more Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:2c2f::1 - - [14/Sep/2026:05:05:56 +0200] GET /robots.txt [DOMAIN_REMOVED] 302 5754 - Mozilla/5.0 (compatible; MJ12bot/v1.4.8; [DOMAIN_REMOVED] show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-16 12:48:40 (5 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇨🇦 Mediashaker	2026-09-16 12:23:21 (5 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2c2f:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2c2f::1 (FR/France/-) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-15 06:04:14 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:2c2f::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:2c2f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 02:04:05.331088 2026] [security2:error] [pid 8918:tid 8918] [client 2001:41d0:303:2c2f::1:42288] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.homebuilt.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.homebuilt.org"] [uri "/vendors/p&e/[email protected]"] [unique_id "aqjf1QNQ9ck1sU-VRwF0AQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-09-15 05:38:31 (1 day ago)	2001:41d0:303:2c2f::1 - - [15/Sep/2026:06:38:46 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ... show more 2001:41d0:303:2c2f::1 - - [15/Sep/2026:06:38:46 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇩🇪 palzer.IT	2026-09-14 03:06:14 (2 days ago)	Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:2c2f::1 - - [14/Sep/2026:05:05:56 + ... show more Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:2c2f::1 - - [14/Sep/2026:05:05:56 +0200] GET /robots.txt [DOMAIN_REMOVED] 302 5754 - Mozilla/5.0 (compatible; MJ12bot/v1.4.8; [DOMAIN_REMOVED] show less	Bad Web Bot
🇩🇪 LRob	2026-09-13 11:10:47 (3 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /robots.txt \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| 2026-09-13 11:10 UTC show less	Bad Web Bot
🇩🇪 rh24	2026-09-12 12:52:52 (4 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2c2f:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2c2f::1 (Unknown) show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-12 01:56:10 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇺🇸 Starburst SysOp Team	2026-09-11 09:13:51 (5 days ago)	BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked. Matched phrase "MJ12bot" at REQUEST_HEADE ... show more BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. (1100000-stl2-14) show less	Bad Web Bot
🇨🇦 Mediashaker	2026-09-10 23:04:03 (5 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2c2f:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:2c2f::1 (FR/France/-) show less	Bad Web Bot
🇩🇪 LRob	2026-09-09 07:17:40 (1 week ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots.txt \| 2026-09-09 07:17 UTC show less	Bad Web Bot
🇩🇪 palzer.IT	2026-09-08 23:50:56 (1 week ago)	Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:2c2f::1 - - [09/Sep/2026:01:50:39 + ... show more Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:2c2f::1 - - [09/Sep/2026:01:50:39 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5790 - Mozilla/5.0 (compatible; MJ12bot/v1.4.8; [DOMAIN_REMOVED] show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-08 08:27:54 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇪🇸 gnom4ik	2026-09-07 07:01:13 (1 week ago)	ban-reviewer auto report; ip=2001:41d0:303:2c2f::1; scenario=http:scan; verdict=valid_ban; confidenc ... show more ban-reviewer auto report; ip=2001:41d0:303:2c2f::1; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=15; active_decisions=4; lookback_decisions=4; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high; ip_active_decision_count_high show less	Hacking

Showing 1 to 15 of 281 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.145.19

🇨🇳 139.227.100.179

🇺🇸 40.67.179.199

🇺🇸 162.216.150.3

🇺🇸 157.230.134.132

🇺🇸 147.185.132.183

🇨🇳 112.5.41.97

🇰🇪 105.163.157.156

🇧🇫 102.214.41.163

🇳🇱 77.239.124.208

🇺🇸 45.79.109.4

🇳🇱 2a00:1450:4013:c22::12c

🇲🇽 187.216.224.85

🇳🇱 185.242.226.18

🇫🇷 185.144.27.10

🇸🇬 167.99.69.132

🇰🇪 154.159.255.106

🇹🇼 128.14.236.30

🇿🇦 121.91.156.70

🇮🇱 79.177.147.89