This IP was reported 24 times. Confidence of
Abuse
is 30%: ?
30%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
24
times from
11 distinct
sources.
2001:41d0:80a:3a00:: was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SunAug3002:54:24.3270432026][security2:error][pid604697:tid604794][client2001:41d0:80a:3a00:::0]Mod ...
show more[SunAug3002:54:24.3270432026][security2:error][pid604697:tid604794][client2001:41d0:80a:3a00:::0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"autoconfig.ppinvestment.ch\"][uri\"/\"][unique_id\"apN_QAOS0J8ZtJSgdMgmKAAAAMc\"]
show less
[MonAug2403:26:48.1302672026][security2:error][pid376227:tid376353][client2001:41d0:80a:3a00:::0]Mod ...
show more[MonAug2403:26:48.1302672026][security2:error][pid376227:tid376353][client2001:41d0:80a:3a00:::0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"admin-services.ch\"][uri\"/\"][unique_id\"aoud2CRDNMYG7D6ylW7SPAAAAQ8\"]
show less
[SatAug2213:44:55.2043232026][security2:error][pid2415304:tid2415434][client2001:41d0:80a:3a00:::0]M ...
show more[SatAug2213:44:55.2043232026][security2:error][pid2415304:tid2415434][client2001:41d0:80a:3a00:::0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"ipv6.titancapital.ch\"][uri\"/\"][unique_id\"aomLt05WRi4hImwIlghiHQAAARM\"]
show less
[FriAug2104:02:51.6699632026][security2:error][pid441305:tid441403][client2001:41d0:80a:3a00:::0]Mod ...
show more[FriAug2104:02:51.6699632026][security2:error][pid441305:tid441403][client2001:41d0:80a:3a00:::0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"autoconfig.ppinvestment.ch\"][uri\"/\"][unique_id\"aoexy7WLxw69QJGdFnPUFwAAAAM\"]
show less
[WedAug1916:20:31.1074822026][security2:error][pid2550544:tid2550642][client2001:41d0:80a:3a00:::0]M ...
show more[WedAug1916:20:31.1074822026][security2:error][pid2550544:tid2550642][client2001:41d0:80a:3a00:::0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"ipv6.titancapital.ch\"][uri\"/\"][unique_id\"aoW7r8w9CGEwrU5hwgF3ZAAAAMw\"]
show less
[WedAug1206:47:53.7844072026][security2:error][pid2963704:tid2963719][client2001:41d0:80a:3a00:::0]M ...
show more[WedAug1206:47:53.7844072026][security2:error][pid2963704:tid2963719][client2001:41d0:80a:3a00:::0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"autoconfig.ppinvestment.ch\"][uri\"/\"][unique_id\"anv6-dSPa9e3dpa1Ax3T8wAAAEs\"]
show less
[FriAug0711:09:07.8959732026][security2:error][pid954825:tid954840][client2001:41d0:80a:3a00:::0]Mod ...
show more[FriAug0711:09:07.8959732026][security2:error][pid954825:tid954840][client2001:41d0:80a:3a00:::0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"ipv6.titancapital.ch\"][uri\"/\"][unique_id\"anWgs7G03u0c8E8oDkbKWgAAAAQ\"]
show less
[ThuAug0603:51:50.7027892026][security2:error][pid3405544:tid3405555][client2001:41d0:80a:3a00:::0]M ...
show more[ThuAug0603:51:50.7027892026][security2:error][pid3405544:tid3405555][client2001:41d0:80a:3a00:::0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"admin-services.ch\"][uri\"/\"][unique_id\"anPotpDQ4wRUyUA-Bh4H5wAAAEA\"]
show less
Port Scan
Brute-Force
Web App Attack
Anonymous
2001:41d0:80a:3a00:: - - [03/Aug/2026:07:50:20 +0200] "GET / HTTP/1.1" 402 5938 "-" "python-httpx/0. ...
show more2001:41d0:80a:3a00:: - - [03/Aug/2026:07:50:20 +0200] "GET / HTTP/1.1" 402 5938 "-" "python-httpx/0.27.2" ...
show less
Web App Attack
Showing 1 to
15
of 24 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩