JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:41d0:303:6eef::1

2001:41d0:303:6eef::1 was found in our database!

This IP was reported 98 times. Confidence of Abuse is 95%: ?

95%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Lille, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:41d0:303:6eef::1

Whois 2001:41d0:303:6eef::1

IP Abuse Reports for 2001:41d0:303:6eef::1:

This IP address has been reported a total of 98 times from 34 distinct sources. 2001:41d0:303:6eef::1 was first reported on June 14th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jbcrn	2026-09-23 18:50:19 (19 hours ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercia ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercial-scrapers. Requested honeypot path: /robots.txt. User-Agent: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-23 10:52:03 (1 day ago)	This address crawls our sites under a User-Agent that belongs to a known abusive scraper, or under a ... show more This address crawls our sites under a User-Agent that belongs to a known abusive scraper, or under a placeholder identity no legitimate software uses. Such crawlers load servers with automated requests nobody asked for and often harvest content or e-mail addresses; blocked. Please check what runs on this address. \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots.txt \| 2026-09-23 10:52 UTC show less	Bad Web Bot
🇩🇪 palzer.IT	2026-09-22 21:57:01 (1 day ago)	Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:6eef::1 - - [22/Sep/2026:23:56:39 + ... show more Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:6eef::1 - - [22/Sep/2026:23:56:39 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 6485 - Mozilla/5.0 (compatible; MJ12bot/v1.4.8; [DOMAIN_REMOVED] show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-22 20:22:59 (1 day ago)	(mod_security) mod_security (id:217291) triggered by 2001:41d0:303:6eef::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:217291) triggered by 2001:41d0:303:6eef::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:22:55.254948 2026] [security2:error] [pid 3424:tid 3424] [client 2001:41d0:303:6eef::1:53964] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|furballrecords.com\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "furballrecords.com"] [uri "/g12terms.php"] [unique_id "arLjn6Xbf0Sg80-gO1t1kQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2026-09-22 16:10:04 (1 day ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇰🇷 doll.gl	2026-09-22 06:53:29 (2 days ago)	CrowdSec: Ip 2001:41d0:303:6eef::1 performed 'crowdsecurity/http-bad-user-agent' (2 events over 8.74 ... show more CrowdSec: Ip 2001:41d0:303:6eef::1 performed 'crowdsecurity/http-bad-user-agent' (2 events over 8.746621443s) at 2026-09-22 06:53:28.082582172 +0000 UTC (scenario: crowdsecurity/http-bad-user-agent) show less	Bad Web Bot
🇺🇸 factor1	2026-09-22 01:11:17 (2 days ago)	CrowdSec at apollo Reports Abuse	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-20 20:38:52 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇫🇷 ingroscart.it	2026-09-20 18:54:54 (3 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:6eef:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:6eef::1 (Unknown) show less	Bad Web Bot
Anonymous	2026-09-20 04:18:54 (4 days ago)	2001:41d0:303:6eef::1 - - [20/Sep/2026:12:17:21 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A5%C2%92%C2%8C%C3 ... show more 2001:41d0:303:6eef::1 - - [20/Sep/2026:12:17:21 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A5%C2%92%C2%8C%C3%A5%C2%AA%C2%BD%C3%A5%C2%AA%C2%BD%C3%A4%C2%B8%C2%AD%C3%A5%C2%9C%C2%8B%C3%A6%C2%BC%C2%AB%C3%A9%C2%81%C2%8A%C3%A3%C2%80%C2%8B-%C3%A4%C2%B8%C2%8A%C3%A6%C2%B5%C2%B72015/ HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2001:41d0:303:6eef::1 - - [20/Sep/2026:12:17:31 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A5%C2%92%C2%8C%C3%A5%C2%AA%C2%BD%C3%A5%C2%AA%C2%BD%C3%A4%C2%B8%C2%AD%C3%A5%C2%9C%C2%8B%C3%A6%C2%BC%C2%AB%C3%A9%C2%81%C2%8A%C3%A3%C2%80%C2%8B-%C3%A4%C2%B8%C2%AD%C3%A5%C2%B1%C2%B12014/ HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2001:41d0:303:6eef::1 - - [20/Sep/2026:12:17:48 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A5%C2%92%C2%8C%C3%A5%C2%AA%C2%BD%C3%A5%C2%AA%C2%BD%C3%A4%C2%B8%C2%AD%C3%A5%C2%9C%C2%8B%C3%A6%C2%BC%C2%AB%C3%A9%C2%81%C2%8A%C3%A3%C2%80%C2%8B-%C3%A6%C2%96%C2%B0%C3%A5%C2%8A%C2%A0%C3%A5%C2%9D%C2%A12016/ HTTP/1.1 ... show less	Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-09-20 03:20:51 (4 days ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercia ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercial-scrapers. Requested honeypot path: /robots.txt. User-Agent: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) show less	Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-09-18 12:52:00 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇺🇸 www.winos.me	2026-09-18 10:00:18 (6 days ago)	Malicious bot scraper	Port Scan Bad Web Bot
🇩🇪 palzer.IT	2026-09-18 06:30:16 (6 days ago)	Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:6eef::1 - - [18/Sep/2026:08:29:55 + ... show more Fail2ban automatic report for plesk-apache-badbot: 2001:41d0:303:6eef::1 - - [18/Sep/2026:08:29:55 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 6485 - Mozilla/5.0 (compatible; MJ12bot/v1.4.8; [DOMAIN_REMOVED] show less	Bad Web Bot
🇨🇦 Mediashaker	2026-09-17 22:56:35 (6 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:6eef:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:6eef::1 (FR/France/-) show less	Bad Web Bot

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 45.194.27.150

🇰🇷 219.250.188.143

🇳🇱 195.178.110.30

🇧🇷 177.220.170.28

🇺🇸 172.241.237.52

🇹🇳 154.111.96.199

🇹🇭 147.50.227.79

🇨🇳 120.48.165.75

🇳🇱 109.160.32.100

🇸🇪 81.237.155.113

🇺🇸 50.114.236.21

🇺🇸 34.53.60.66

🇲🇽 187.212.43.1

🇨🇿 178.209.131.185

🇧🇷 152.32.200.213

🇺🇸 98.94.61.21

🇨🇦 85.217.149.74

🇳🇱 45.148.10.247

🇳🇱 45.142.193.21

🇧🇪 34.22.156.148