JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:41d0:303:3b93::1

2001:41d0:303:3b93::1 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 38%: ?

38%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkerque, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:41d0:303:3b93::1

Whois 2001:41d0:303:3b93::1

IP Abuse Reports for 2001:41d0:303:3b93::1:

This IP address has been reported a total of 102 times from 25 distinct sources. 2001:41d0:303:3b93::1 was first reported on October 1st 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-06-04 15:07:00 (2 days ago)	(modsecurity) srv101 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Port ... show more (modsecurity) srv101 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 16:52:28 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:3b93::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:3b93::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:52:25.397262 2026] [security2:error] [pid 6886:tid 6886] [client 2001:41d0:303:3b93::1:38946] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Ashton II Recliner/Havana Brown/Thumbs.db"] [unique_id "aiBbye1bPfn7XAfIIL8SpQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-06-02 14:04:59 (4 days ago)	(modsecurity) srv103 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Port ... show more (modsecurity) srv103 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-01 02:01:58 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:3b93::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:3b93::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:01:53.328497 2026] [security2:error] [pid 27847:tid 27847] [client 2001:41d0:303:3b93::1:50888] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pages4you.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pages4you.com"] [uri "/Hope and Dalton pages4you,com/Hope/pics/Thumbs.db"] [unique_id "ahzoESG7hoN9_Bv1v546LwAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2026-05-31 10:20:55 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇳🇱 Mangelot Hosting	2026-05-22 22:43:31 (2 weeks ago)	(modsecurity) srv102 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Port ... show more (modsecurity) srv102 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇫🇷 claude CALVET	2026-05-19 20:08:25 (2 weeks ago)	gew-Joomla User : try to access forms...	Hacking
🇫🇷 bazter.pro	2026-05-17 23:22:40 (2 weeks ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇩🇪 Jarda_H	2026-05-13 12:53:51 (3 weeks ago)	http-bad-user-agent	Web App Attack
🇳🇱 Roderic	2026-05-12 18:01:56 (3 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-08 21:20:32 (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:3b93::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:3b93::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 17:20:23.952349 2026] [security2:error] [pid 9343:tid 9343] [client 2001:41d0:303:3b93::1:34060] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|miranda-race-walks.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "miranda-race-walks.com"] [uri "/Pages/mail to:[email protected]"] [unique_id "af5Tl15cAF2Cnz02yKUa7gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-05-07 04:17:41 (1 month ago)	(modsecurity) srv103 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Port ... show more (modsecurity) srv103 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 Roderic	2026-05-06 17:55:17 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇳🇱 Mangelot Hosting	2026-05-03 10:27:37 (1 month ago)	(modsecurity) srv101 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Port ... show more (modsecurity) srv101 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 Mangelot Hosting	2026-05-02 06:56:24 (1 month ago)	(modsecurity) srv101 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Port ... show more (modsecurity) srv101 ModSecurity 2001:41d0:303:3b93::1 (FR/France/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 44.215.210.112

🇨🇳 221.229.106.252

🇺🇸 216.25.89.144

🇩🇪 213.209.159.225

🇬🇧 212.227.125.15

🇰🇷 211.253.9.49

🇧🇷 209.14.88.118

🇪🇹 196.188.187.45

🇺🇦 193.176.251.229

🇺🇸 192.142.2.40

🇹🇷 185.226.93.242

🇧🇷 177.10.213.54

🇹🇼 175.182.39.145

🇺🇸 162.216.150.233

🇺🇸 138.68.61.2

🇨🇳 118.145.111.55

🇨🇳 113.44.131.190

🇨🇳 112.47.128.74

🇭🇰 103.215.80.68

🇮🇩 103.190.214.241