JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:41d0:303:a4e6::1

2001:41d0:303:a4e6::1 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 46%: ?

46%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:41d0:303:a4e6::1

Whois 2001:41d0:303:a4e6::1

IP Abuse Reports for 2001:41d0:303:a4e6::1:

This IP address has been reported a total of 192 times from 48 distinct sources. 2001:41d0:303:a4e6::1 was first reported on October 2nd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ingroscart.it	2026-10-14 06:08:20 (2 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:a4e6:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:a4e6::1 (Unknown) show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-10-12 10:21:50 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-10-02 09:29:17 (2 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /robots.txt \| ua: Mozilla/5.0 (c ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /robots.txt \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| 2026-10-02 09:29 UTC show less	Bad Web Bot
🇩🇪 jbcrn	2026-09-28 12:33:54 (2 weeks ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercia ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercial-scrapers. Requested honeypot path: /robots.txt. User-Agent: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) show less	Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-26 16:26:48 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-24 19:34:02 (3 weeks ago)	(mod_security) mod_security (id:217291) triggered by 2001:41d0:303:a4e6::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:217291) triggered by 2001:41d0:303:a4e6::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 15:33:59.622386 2026] [security2:error] [pid 19436:tid 19436] [client 2001:41d0:303:a4e6::1:38372] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|furballrecords.com\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "furballrecords.com"] [uri "/g12software.php"] [unique_id "arV7J2Iqe80GNXqwuWx6dAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-21 00:39:23 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇳🇱 middelkoopcc	2026-09-20 02:24:01 (3 weeks ago)	2026-09-20 04:18:47 AH10411: Rewritten query string contains control characters or spaces && 2026-09 ... show more 2026-09-20 04:18:47 AH10411: Rewritten query string contains control characters or spaces && 2026-09-20 04:18:52 AH10411: Rewritten query string contains control characters or spaces && 2026-09-20 04:18:58 AH10411: Rewritten query string contains control characters or spaces && 82 more within 20 minutes show less	Web App Attack
🇨🇦 Mediashaker	2026-09-18 19:17:47 (3 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:a4e6:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:a4e6::1 (FR/France/-) show less	Bad Web Bot
Anonymous	2026-09-16 23:09:46 (4 weeks ago)	[ssd5.kdns.gr] httpd-storefront-action-flood: sites=www.e-anastasiadis.gr; samples=per_ip_flood=true ... show more [ssd5.kdns.gr] httpd-storefront-action-flood: sites=www.e-anastasiadis.gr; samples=per_ip_flood=true \| window=10m \| auth=0 writes=73 total=73 show less	Hacking Web App Attack
🇨🇦 Mediashaker	2026-09-15 02:33:37 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:a4e6:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:303:a4e6::1 (FR/France/-) show less	Bad Web Bot
🇩🇪 jbcrn	2026-09-14 22:42:37 (1 month ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercia ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercial-scrapers. Requested honeypot path: /robots.txt. User-Agent: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) show less	Bad Web Bot Web App Attack
🇹🇭 thaizone.com	2026-09-12 14:37:36 (1 month ago)	Brute Force Attack on a Web Resources (repeated 404) #1	DDoS Attack Web Spam Brute-Force Web App Attack
🇩🇪 LRob	2026-09-11 06:42:22 (1 month ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots.txt \| 2026-09-11 06:42 UTC show less	Bad Web Bot
🇪🇸 gnom4ik	2026-09-07 08:56:48 (1 month ago)	ban-reviewer auto report; ip=2001:41d0:303:a4e6::1; scenario=http:scan; verdict=valid_ban; confidenc ... show more ban-reviewer auto report; ip=2001:41d0:303:a4e6::1; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=15; active_decisions=3; lookback_decisions=3; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high; ip_active_decision_count_high show less	Hacking

Showing 1 to 15 of 192 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 222.126.105.187

🇩🇪 185.220.101.161

🇺🇸 136.0.39.68

🇳🇱 109.160.32.165

🇷🇺 46.191.141.152

🇸🇬 43.159.39.203

🇨🇴 190.60.242.28

🇺🇸 173.255.223.62

🇸🇪 157.22.73.49

🇬🇧 86.38.187.239

🇳🇴 79.127.150.143

🇮🇳 14.96.106.175

🇺🇸 5.253.38.54

🇺🇸 205.210.31.14

🇩🇪 185.220.101.1

🇺🇸 129.121.142.19

🇵🇱 109.125.223.2

🇮🇩 103.113.170.231

🇮🇩 43.230.5.42

🇺🇸 35.229.62.175