JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:41d0:303:83cd::1

2001:41d0:303:83cd::1 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 44%: ?

44%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:41d0:303:83cd::1

Whois 2001:41d0:303:83cd::1

IP Abuse Reports for 2001:41d0:303:83cd::1:

This IP address has been reported a total of 192 times from 47 distinct sources. 2001:41d0:303:83cd::1 was first reported on May 10th 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-07-31 19:06:19 (14 hours ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇬🇧 Mendip_Defender	2026-07-31 09:26:27 (23 hours ago)	2001:41d0:303:83cd::1 - - [31/Jul/2026:10:26:30 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ... show more 2001:41d0:303:83cd::1 - - [31/Jul/2026:10:26:30 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇹🇷 neron	2026-07-30 13:06:18 (1 day ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-29 02:19:38 (3 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-28 02:19:38 (4 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇨🇿 antihack.anarchista.xyz	2026-07-28 01:48:55 (4 days ago)	404 burst: 30 hits in 10 min, URI /slovensky-premier-fico-priletel-do-moskvy-chce-se-setkat-s-putine ... show more 404 burst: 30 hits in 10 min, URI /slovensky-premier-fico-priletel-do-moskvy-chce-se-setkat-s-putinem/, Ref , UA Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) show less	Brute-Force Web App Attack Bad Web Bot
🇹🇷 neron	2026-07-26 19:50:51 (5 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-24 15:30:03 (1 week ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-23 14:42:24 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-22 19:03:03 (1 week ago)	(mod_security) mod_security (id:217291) triggered by 2001:41d0:303:83cd::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:217291) triggered by 2001:41d0:303:83cd::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 15:02:56.110140 2026] [security2:error] [pid 1211204:tid 1211204] [client 2001:41d0:303:83cd::1:57762] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|entertainmentcapitol.com\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "entertainmentcapitol.com"] [uri "/g12aboutsite.php"] [unique_id "amET4Oy3rzE3DOVbxTLy8AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-07-15 08:18:38 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/umnitzaadmin/This product i ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/umnitzaadmin/This product incorporates the brightest Light Emitting Diode technology currently available today. The LED is used in a variety of applications due to it's longevity, durability, and cold weather instant operability characteristics. ua='Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)') show less	Web App Attack Exploited Host
🇺🇸 TPI-Abuse	2026-07-15 03:27:01 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:83cd::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2001:41d0:303:83cd::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 23:26:57.481205 2026] [security2:error] [pid 30237:tid 30237] [client 2001:41d0:303:83cd::1:36672] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hudson II/Vermont Bark/Loveseat/originals/Thumbs.db"] [unique_id "alb-ARmWwpyYYDuVHxZQxQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-07-14 20:44:39 (2 weeks ago)	2001:41d0:303:83cd::1 - - [14/Jul/2026:21:44:29 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ... show more 2001:41d0:303:83cd::1 - - [14/Jul/2026:21:44:29 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-07-14 10:07:04 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-13 17:15:03 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2001:41d0:303:83cd::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2001:41d0:303:83cd::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 13:14:56.179832 2026] [security2:error] [pid 7132:tid 7132] [client 2001:41d0:303:83cd::1:38656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stygianpassage.com.greighhouse.com"] [uri "/web.config"] [unique_id "alUdEKcTKol4kYdx3mgEMwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 192 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 218.255.29.194

🇲🇦 197.153.57.103

🇳🇱 185.224.128.16

🇺🇸 162.216.150.141

🇦🇷 143.105.135.66

🇺🇸 107.150.106.213

🇺🇸 64.62.156.213

🇸🇬 43.134.163.229

🇧🇾 37.215.33.167

🇺🇸 35.91.12.48

🇺🇸 34.58.124.191

🇧🇬 185.253.160.18

🇺🇸 162.216.150.67

🇸🇬 114.119.159.20

🇧🇬 79.124.56.242

🇨🇳 58.254.182.115

🇧🇷 45.162.6.101

🇭🇰 2602:80d:1003::26

🇧🇩 210.79.183.13

🇧🇷 205.210.31.244