JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:41d0:303:4954::1

2001:41d0:303:4954::1 was found in our database!

This IP was reported 185 times. Confidence of Abuse is 70%: ?

70%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Lille, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:41d0:303:4954::1

Whois 2001:41d0:303:4954::1

IP Abuse Reports for 2001:41d0:303:4954::1:

This IP address has been reported a total of 185 times from 45 distinct sources. 2001:41d0:303:4954::1 was first reported on November 27th 2025, and the most recent report was 59 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ingroscart.it	2026-09-20 20:47:00 (59 minutes ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:4954:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:4954::1 (Unknown) show less	Bad Web Bot
🇩🇪 palzer.IT	2026-09-20 14:19:00 (7 hours ago)	Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:4954::1 - - [20/Sep/2026:16:18:39 + ... show more Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:4954::1 - - [20/Sep/2026:16:18:39 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 836 - Mozilla/5.0 (compatible; MJ12bot/v1.4.8; [DOMAIN_REMOVED] show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-19 15:09:21 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 13:17:43 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:4954::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:4954::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:17:36.145285 2026] [security2:error] [pid 6066:tid 6066] [client 2001:41d0:303:4954::1:39306] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nrvoutdoors.com\|F\|2"] [data ".gunauction.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nrvoutdoors.com"] [uri "/TAMBOUR SAFETY/www.gunauction.com"] [unique_id "aqvocN9niRXNeifIItRxwgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ingroscart.it	2026-09-17 09:10:44 (3 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:4954:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:4954::1 (Unknown) show less	Bad Web Bot
🇩🇪 palzer.IT	2026-09-16 18:05:28 (4 days ago)	Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:4954::1 - - [16/Sep/2026:20:05:07 + ... show more Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:4954::1 - - [16/Sep/2026:20:05:07 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5765 - Mozilla/5.0 (compatible; MJ12bot/v1.4.8; [DOMAIN_REMOVED] show less	Bad Web Bot
🇨🇦 Mediashaker	2026-09-16 03:45:24 (4 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:4954:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:4954::1 (FR/France/-) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-15 15:31:11 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:4954::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:4954::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 11:31:07.494678 2026] [security2:error] [pid 6934:tid 6960] [client 2001:41d0:303:4954::1:57386] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dasperformance.com\|F\|2"] [data ".das performance.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dasperformance.com"] [uri "/blog/page/2/W WW.DAS performance.com"] [unique_id "aqlku6kqeDDCl2GMw66YfQAAAYY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-09-14 09:50:26 (6 days ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercia ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercial-scrapers. Requested honeypot path: /robots.txt. User-Agent: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-14 00:53:44 (6 days ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /robots.txt \| ua: Mozilla/5.0 ( ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /robots.txt \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| 2026-09-14 00:53 UTC show less	Port Scan Web App Attack
🇺🇸 www.winos.me	2026-09-14 00:24:09 (6 days ago)	Malicious bot scraper	Port Scan Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-13 20:25:00 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-09-11 16:45:41 (1 week ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots.txt \| 2026-09-11 16:45 UTC show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-11 14:16:27 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-09-11 09:13:20 (1 week ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots.txt \| 2026-09-11 09:13 UTC show less	Bad Web Bot

Showing 1 to 15 of 185 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.30.36.15

🇨🇳 153.37.227.72

🇫🇷 104.165.146.228

🇩🇪 212.30.36.11

🇧🇷 147.15.110.51

🇨🇳 139.9.138.108

🇻🇳 113.161.79.218

🇫🇷 85.217.140.50

🇻🇳 58.186.20.143

🇬🇧 57.129.132.147

🇸🇬 35.187.228.243

🇳🇱 34.6.191.118

🇩🇪 2001:41d0:701:1100::29ea

🇩🇪 212.30.36.10

🇫🇷 193.70.64.67

🇨🇳 117.50.46.117

🇸🇬 47.236.197.228

🇦🇺 45.133.5.112

🇩🇿 41.111.227.78

🇧🇷 35.198.50.83