172.71.12.161
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.
172.71.12.161 is on our whitelist as Cloudflare Reverse Proxy via the subnet 172.64.0.0/13.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14789
- Domain Name
- cloudflare.com
- Country
- 🇦🇿 Azerbaijan
- City
- Astara, Astara
No reports in the last 60 days
172.71.12.161 has been reported 58 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 2053. Automated tiered (T-Pot+DShield).
|
Port Scan Hacking | |
| 🇩🇪 acadeova |
🚨 Recon detected (nft drop)
SRC=172.71.12.161
Observed=TCP dpt=80 in=enp0s6 ttl=58
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/443 (10 or more attempts)
|
Port Scan | |
| 🇩🇪 alive |
Confirmed malicious activity observed via T-Pot honeypot Observed 29 events on port 443 (unknown) from 2025-12-30T23:05:09+00:00 to 2025-12-30T23:06:18.902000+00:00. Sample: {"src_port": 24083, "src_ip": "172.71.12.161", "dest_port": 443}
|
Port Scan | |
| 🇮🇹 IRT@Unisi |
anomaly:tcp_dst_session,1001>threshold1000,repeats7timessincelastlog
|
DDoS Attack | |
| 🇦🇺 oncord |
Form spam
|
Web Spam | |
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH | |
| 🇳🇱 Study Bitcoin 🤗 |
Port probe to tcp/80 (http)
[srv125]
|
Port Scan Bad Web Bot Web App Attack | |
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH | |
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH | |
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH | |
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH | |
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH | |
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH | |
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown