JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

141.101.95.74

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

85 reports

24 reporters · latest 5 hours ago

141.101.95.74 is on our whitelist as Cloudflare Reverse Proxy via the subnet 141.101.64.0/18.

ISP: CloudFlare CDN network
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇫🇷 France
City: Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

85 from 24 distinct reporters

First reported

April 4th 2024

Most recent report

5 hours ago

Last 60 days

Top reporter locations 🇧🇪 Belgium 3 🇩🇪 Germany 2 🇧🇬 Bulgaria 1

Most common categories Web App Attack 8 Brute-Force 1 Port Scan 1 Bad Web Bot 1 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 madeit	2026-11-14 12:13:26 UTC · (5 hours ago)		Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-11-05 20:34:47 UTC · (1 week ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇧🇬 Stoyko Stoykov	2026-10-23 01:45:27 UTC · (3 weeks ago)	141.101.95.74 - - [23/Oct/2026:04:45:26 +0300] "GET /core/.env HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ...	Hacking Web App Attack
🇧🇪 madeit	2026-10-12 16:18:16 UTC · (1 month ago)		Web App Attack
Anonymous	2026-10-10 14:31:50 UTC · (1 month ago)	141.101.95.74 - - [10/Oct/2026:16:31:49 +0200] "GET /.env.backup HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.95.74 - - [10/Oct/2026:16:31:49 +0200] "GET /.env.bak HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Wi ... show more 141.101.95.74 - - [10/Oct/2026:16:31:49 +0200] "GET /.env.backup HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.95.74 - - [10/Oct/2026:16:31:49 +0200] "GET /.env.bak HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.95.74 - - [10/Oct/2026:16:31:49 +0200] "GET /.env.production HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.95.74 - - [10/Oct/2026:16:31:49 +0200] "GET /.env~ HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.95.74 - - [10/Oct/2026:16:31:49 +0200] "GET /.git/config HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.95.74 - - [10/Oct/2026:16:31:49 +0200] "GET /api/.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.95.74 - - [10/Oct/2026:16:31:49 +0200] "GET /api/phpinfo.php HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Win ... show less	Bad Web Bot Web App Attack
🇩🇪 robotstxt	2026-10-05 09:18:55 UTC · (1 month ago)	141.101.95.74 - - [05/Oct/2026:09:15:33 +0000] "GET /.circleci/config.yml HTTP/2.0" 403 95933 "-" "curl/8.7.1" "127.0.0.1,185.177.72.66" edge="141.101.95.74" 141.101.95.74 - - [05/Oct/2026:09:15:34 +0000] "GET /.composer-auth.json HTTP/2.0" 403 95746 ... show more 141.101.95.74 - - [05/Oct/2026:09:15:33 +0000] "GET /.circleci/config.yml HTTP/2.0" 403 95933 "-" "curl/8.7.1" "127.0.0.1,185.177.72.66" edge="141.101.95.74" 141.101.95.74 - - [05/Oct/2026:09:15:34 +0000] "GET /.composer-auth.json HTTP/2.0" 403 95746 "-" "curl/8.7.1" "127.0.0.1,185.177.72.66" edge="141.101.95.74" 141.101.95.74 - - [05/Oct/2026:09:15:34 +0000] "GET /.composer-auth.json HTTP/2.0" 403 95746 "-" "curl/8.7.1" "127.0.0.1,185.177.72.66" edge="141.101.95.74" 141.101.95.74 - - [05/Oct/2026:09:17:47 +0000] "GET /.github/workflows/tests.yml HTTP/2.0" 403 95661 "-" "curl/8.7.1" "127.0.0.1,185.177.72.66" edge="141.101.95.74" 141.101.95.74 - - [05/Oct/2026:09:18:31 +0000] "GET /.idea/modules.xml HTTP/2.0" 403 0 "-" "curl/8.7.1" "127.0.0.1,185.177.72.66" edge="141.101.95.74" ... show less	Web App Attack
🇩🇪 robotstxt	2026-10-04 11:54:33 UTC · (1 month ago)	141.101.95.74 - - [04/Oct/2026:11:49:52 +0000] "GET /admin/.env HTTP/2.0" 403 2 "-" "curl/8.7.1" "127.0.0.1,185.177.72.67" edge="141.101.95.74" 141.101.95.74 - - [04/Oct/2026:11:49:55 +0000] "GET /main/.env HTTP/2.0" 403 2 "-" "curl/8.7.1" "127.0.0.1 ... show more 141.101.95.74 - - [04/Oct/2026:11:49:52 +0000] "GET /admin/.env HTTP/2.0" 403 2 "-" "curl/8.7.1" "127.0.0.1,185.177.72.67" edge="141.101.95.74" 141.101.95.74 - - [04/Oct/2026:11:49:55 +0000] "GET /main/.env HTTP/2.0" 403 2 "-" "curl/8.7.1" "127.0.0.1,185.177.72.67" edge="141.101.95.74" 141.101.95.74 - - [04/Oct/2026:11:50:13 +0000] "GET /docker/app/.env HTTP/2.0" 403 95660 "-" "curl/8.7.1" "127.0.0.1,185.177.72.67" edge="141.101.95.74" 141.101.95.74 - - [04/Oct/2026:11:51:48 +0000] "GET /.env.example HTTP/2.0" 403 95779 "-" "curl/8.7.1" "127.0.0.1,185.177.72.67" edge="141.101.95.74" 141.101.95.74 - - [04/Oct/2026:11:54:28 +0000] "GET /demo/.env HTTP/2.0" 403 2 "-" "curl/8.7.1" "127.0.0.1,185.177.72.67" edge="141.101.95.74" ... show less	Web App Attack
🇧🇪 madeit	2026-09-27 01:38:23 UTC · (1 month ago)		Web App Attack
Anonymous	2026-09-17 14:46:00 UTC · (1 month ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇧🇪 madeit	2026-09-11 18:54:18 UTC · (2 months ago)		Web App Attack
Anonymous	2026-08-08 02:24:44 UTC · (3 months ago)	2026-08-08T04:24:41.962541+02:00 nimbus sshd[30241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.95.74 user=root 2026-08-08T04:24:43.866461+02:00 nimbus sshd[30241]: Failed password for root from 1 ... show more 2026-08-08T04:24:41.962541+02:00 nimbus sshd[30241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.95.74 user=root 2026-08-08T04:24:43.866461+02:00 nimbus sshd[30241]: Failed password for root from 141.101.95.74 port 53048 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-08-07 04:26:51 UTC · (3 months ago)	2026-08-07T06:26:49.397038+02:00 nimbus sshd[384577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.95.74 user=root 2026-08-07T06:26:51.090105+02:00 nimbus sshd[384577]: Failed password for root from ... show more 2026-08-07T06:26:49.397038+02:00 nimbus sshd[384577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.95.74 user=root 2026-08-07T06:26:51.090105+02:00 nimbus sshd[384577]: Failed password for root from 141.101.95.74 port 55016 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-08-07 03:14:48 UTC · (3 months ago)	2026-08-07T05:14:48.356521+02:00 nimbus sshd[382829]: Invalid user liujia from 141.101.95.74 port 51350 ...	Brute-Force SSH
Anonymous	2026-08-07 02:36:56 UTC · (3 months ago)	2026-08-07T04:36:54.049569+02:00 nimbus sshd[381591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.95.74 user=root 2026-08-07T04:36:55.561492+02:00 nimbus sshd[381591]: Failed password for root from ... show more 2026-08-07T04:36:54.049569+02:00 nimbus sshd[381591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.95.74 user=root 2026-08-07T04:36:55.561492+02:00 nimbus sshd[381591]: Failed password for root from 141.101.95.74 port 51896 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-08-07 01:21:06 UTC · (3 months ago)	2026-08-07T03:21:03.794311+02:00 nimbus sshd[379220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.95.74 user=root 2026-08-07T03:21:06.004159+02:00 nimbus sshd[379220]: Failed password for root from ... show more 2026-08-07T03:21:03.794311+02:00 nimbus sshd[379220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.95.74 user=root 2026-08-07T03:21:06.004159+02:00 nimbus sshd[379220]: Failed password for root from 141.101.95.74 port 55586 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 103.36.9.247

🇷🇴 92.118.39.181

🇻🇳 27.79.41.230

🇹🇼 221.120.2.35

🇺🇸 162.216.150.177

🇩🇪 151.243.11.147

🇺🇸 146.190.116.24

🇺🇦 94.231.189.101

🇨🇳 36.140.151.122

🇧🇷 187.106.48.173

🇺🇸 147.78.182.206

🇻🇳 116.99.173.68

🇬🇧 81.19.219.235

🇳🇱 77.67.26.210

🇸🇪 217.211.91.162

🇧🇷 179.48.110.3

🇹🇭 171.97.64.45

🇴🇲 161.8.111.49

🇩🇪 151.243.11.230

🇻🇳 116.110.158.190