JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:41d0:701:1100::c8d1

2001:41d0:701:1100::c8d1

Neutral Activity IPv6 SLAAC Note

146 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

OVH GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16276

Hostname(s)

vps-c62b74c1.vps.ovh.net

Domain Name

ovh.net

Country

🇩🇪 Germany

City

Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2001:41d0:701:1100::c8d1 has been reported 146 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2001:41d0:701:1100::c8d1:

This IP address has been reported a total of 146 times from 39 distinct sources. 2001:41d0:701:1100::c8d1 was first reported on February 5th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-26 16:22:17 (2 months ago)	(mod_security) mod_security (id:217291) triggered by 2001:41d0:701:1100::c8d1 (vps-684a1994.vps.ovh. ... show more (mod_security) mod_security (id:217291) triggered by 2001:41d0:701:1100::c8d1 (vps-684a1994.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 12:22:10.220483 2026] [security2:error] [pid 11043:tid 11043] [client 2001:41d0:701:1100::c8d1:53540] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|desertedge.band\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "desertedge.band"] [uri "/g12privacy.php"] [unique_id "aj6nMuecQz8qzE0TKGDKQAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-06-25 23:56:59 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇫🇷 bazter.pro	2026-06-24 01:10:15 (2 months ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-22 10:58:05 (2 months ago)	[MonJun2212:57:58.6368282026][security2:error][pid1827428:tid1827518][client2001:41d0:701:1100::c8d1 ... show more [MonJun2212:57:58.6368282026][security2:error][pid1827428:tid1827518][client2001:41d0:701:1100::c8d1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"MJ12bot\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"324\"][id\"333515\"][rev\"4\"][msg\"Atomicorp.comWAFRules:MJ12Distributedbotdetected\(Disablethisruleifyouwanttoallowthisbot\)\"][severity\"WARNING\"][tag\"no_ar\"][hostname\"osteriabreno.ch\"][uri\"/robots.txt\"][unique_id\"ajkVNmaBXNy9K58Gn-WjGwAAAIQ\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-06-22 00:54:39 (2 months ago)	2001:41d0:701:1100::c8d1 - - [22/Jun/2026:08:52:35 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A5%C2%86%C2%8D ... show more 2001:41d0:701:1100::c8d1 - - [22/Jun/2026:08:52:35 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A5%C2%86%C2%8D%C3%A9%C2%81%C2%87%C3%AF%C2%BC%C2%8E%C3%A7%C2%91%C2%AA%C3%A9%C2%BA%C2%97%C3%A7%C2%9A%C2%87%C3%A5%C2%90%C2%8E%C3%A3%C2%80%C2%8B%C3%A7%C2%B6%C2%B2%C3%A4%C2%B8%C2%8A%C3%A6%C2%94%C2%BE%C3%A6%C2%98%C2%A0/ HTTP/1.1" 404 39515 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2001:41d0:701:1100::c8d1 - - [22/Jun/2026:08:52:57 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A6%C2%83%C2%85%C3%A4%C2%BF%C2%A1%C3%A3%C2%80%C2%8B%C3%A6%C2%96%C2%B0%C3%A5%C2%8A%C2%A0%C3%A5%C2%9D%C2%A1/ HTTP/1.1" 404 39515 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2001:41d0:701:1100::c8d1 - - [22/Jun/2026:08:53:42 +0800] "GET /2013%C3%A5%C2%B9%C2%B4%C3%A6%C2%96%C2%B0%C3%A8%C2%A3%C2%BD%C3%A4%C2%BD%C2%9C%C3%A6%C2%83%C2%A1%C3%A7%C2%AB%C2%A5%C3%A6%C2%97%C2%A5%C3%A8%C2%A8%C2%98%C3%A7%C2%AC%C2%AC%C3%A4%C2%BA%C2%8C%C3%A9%C2%83%C2%A8%C3%A6%C2%9B%C2%B2%C3%A3%C2%80%C2%8A%C3%A4%C2%BA%C2%8C%C3%A4%C2%BA ... show less	Bad Web Bot Web App Attack
🇳🇱 Roderic	2026-06-20 23:18:39 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇳🇱 Site.eu	2026-06-20 02:33:03 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 claude CALVET	2026-06-19 16:39:40 (2 months ago)	gew-Joomla User : try to access forms...	Hacking
Anonymous	2026-06-19 07:45:46 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:701:1100:: ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:701:1100::c8d1 (DE/Germany/vps-684a1994.vps.ovh.net) show less	Bad Web Bot
🇫🇷 bazter.pro	2026-06-19 01:40:02 (2 months ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-06-19 01:26:04 (2 months ago)	2001:41d0:701:1100::c8d1 - - [19/Jun/2026:02:25:58 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mo ... show more 2001:41d0:701:1100::c8d1 - - [19/Jun/2026:02:25:58 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇳🇱 Site.eu	2026-06-16 06:54:04 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Roderic	2026-06-15 23:19:08 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇳🇱 Site.eu	2026-06-15 02:13:53 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇰🇷 doll.gl	2026-06-14 02:11:51 (3 months ago)	CrowdSec: Ip 2001:41d0:701:1100::c8d1 performed 'crowdsecurity/http-bad-user-agent' (2 events over 4 ... show more CrowdSec: Ip 2001:41d0:701:1100::c8d1 performed 'crowdsecurity/http-bad-user-agent' (2 events over 4.494300732s) at 2026-06-14 02:11:49.837829433 +0000 UTC (scenario: crowdsecurity/http-bad-user-agent) show less	Bad Web Bot

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.196.207.57

🇮🇳 103.207.9.246

🇬🇧 101.36.97.205

🇺🇸 91.230.168.123

🇺🇦 91.201.168.112

🇭🇰 45.207.209.16

🇳🇱 45.148.10.151

🇶🇦 34.153.64.222

🇷🇴 2.57.121.112

🇬🇧 2a00:1450:4009:c0f::12d

🇪🇹 196.190.122.250

🇬🇧 193.163.125.162

🇧🇷 191.37.77.239

🇷🇺 188.43.28.193

🇷🇺 178.49.14.104

🇲🇾 175.145.39.192

🇸🇬 129.150.36.209

🇨🇳 119.86.198.146

🇳🇱 77.239.124.210

🇺🇸 69.55.55.230