JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2001:41d0:303:96d4::1

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

53% Elevated

184 reports

48 reporters · latest 1 day ago

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2001:41d0:303:96d4::1

Export CSV

This IP address has been reported a total of 184 times from 48 distinct sources. 2001:41d0:303:96d4::1 was first reported on September 26th 2025, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Netherlands with 9 reports; Germany with 8 reports; Canada with 4 reports. The most common categories in these recent reports were: Bad Web Bot 26 times; Web App Attack 10 times; Brute-Force 4 times; Port Scan 1 time; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-14 15:47:12 (1 day ago)	IP matched detection query Detection of too many failed responses.	Brute-Force Bad Web Bot Hacking
🇩🇪 LRob	2026-10-12 15:04:48 (3 days ago)	Abusive crawler \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots. ... show more Abusive crawler \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots.txt \| 2026-10-12 15:04 UTC show less	Bad Web Bot
🇩🇪 PTScreens	2026-10-12 07:04:00 (3 days ago)	CrowdSec: http-bad-user-agent - 2 event(s).	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-10-08 02:50:10 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇨🇦 Mediashaker	2026-10-02 10:02:17 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:96d4:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:96d4::1 (FR/France/-) show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-10-01 09:50:46 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-09-29 16:50:25 (2 weeks ago)	Abusive crawler \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots. ... show more Abusive crawler \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots.txt \| 2026-09-29 16:50 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-29 11:53:46 (2 weeks ago)	(mod_security) mod_security (id:217291) triggered by 2001:41d0:303:96d4::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:217291) triggered by 2001:41d0:303:96d4::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 07:53:41.304216 2026] [security2:error] [pid 22452:tid 22452] [client 2001:41d0:303:96d4::1:42942] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|groupof12.com\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "groupof12.com"] [uri "/g12terms.php"] [unique_id "arumxfWArcVo86B8_RM9hAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-28 11:30:35 (2 weeks ago)	Excessive 404/403 errors	Brute-Force
🇨🇦 Mediashaker	2026-09-22 12:32:26 (3 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:96d4:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:96d4::1 (FR/France/-) show less	Bad Web Bot
🇺🇸 www.winos.me	2026-09-16 09:35:08 (4 weeks ago)	Malicious bot scraper	Port Scan Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-16 06:48:23 (4 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇫🇷 ingroscart.it	2026-09-16 02:46:05 (4 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:96d4:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:96d4::1 (Unknown) show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-13 22:55:08 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-09-12 11:20:56 (1 month ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots.txt \| 2026-09-12 11:20 UTC show less	Bad Web Bot

Showing 1 to 15 of 184 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.109

🇺🇸 208.109.242.255

🇺🇸 207.231.108.211

🇫🇮 80.66.83.83

🇩🇪 69.5.169.137

🇺🇸 67.205.173.25

🇹🇼 36.224.71.31

🇮🇱 34.165.1.86

🇧🇷 187.16.96.250

🇸🇬 129.212.230.253

🇺🇸 97.211.171.80

🇫🇷 91.231.89.193

🇫🇷 91.231.89.54

🇺🇸 75.110.217.195

🇺🇸 66.132.224.85

🇺🇸 20.163.58.0

🇩🇪 209.38.246.210

🇺🇸 198.145.105.253

🇳🇱 195.178.110.30

🇳🇱 195.178.110.26