Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 172.71.130.6
This IP address has been reported a total of
121
times from
31 distinct
sources.
172.71.130.6 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Belgium
with 2
reports;
Australia
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
2
times;
Hacking
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:210492) triggered by 172.71.130.6 (-): 1 in the last 300 secs; Ports ...
show more(mod_security) mod_security (id:210492) triggered by 172.71.130.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 22:04:12.573859 2026] [security2:error] [pid 28771:tid 28771] [client 172.71.130.6:11957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.azbrooks.com"] [uri "/.env.development"] [unique_id "agKKnBtOpLaJNae4Hh7u9wAAAAA"], referer: https://www.google.com/search?q=www.azbrooks.com
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Aggressive web scan
Web App Attack
Anonymous
Aggressive web scan
Web App Attack
Anonymous
2026-03-22T14:50:29.536159+01:00 nimbus sshd[8927]: Invalid user kodiak from 172.71.130.6 port 27532 ...
show more2026-03-22T14:50:29.536159+01:00 nimbus sshd[8927]: Invalid user kodiak from 172.71.130.6 port 27532
...
show less
Brute-Force
SSH
Anonymous
2026-03-22T04:16:34.361052+01:00 nimbus sshd[183401]: Invalid user mysql from 172.71.130.6 port 3577 ...
show more2026-03-22T04:16:34.361052+01:00 nimbus sshd[183401]: Invalid user mysql from 172.71.130.6 port 35776
2026-03-22T04:16:34.424553+01:00 nimbus sshd[183401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.71.130.6
2026-03-22T04:16:36.444798+01:00 nimbus sshd[183401]: Failed password for invalid user mysql from 172.71.130.6 port 35776 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-03-21T23:25:39.847429+01:00 nimbus sshd[181333]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-03-21T23:25:39.847429+01:00 nimbus sshd[181333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.71.130.6
2026-03-21T23:25:41.599064+01:00 nimbus sshd[181333]: Failed password for invalid user simeon from 172.71.130.6 port 11466 ssh2
2026-03-21T23:35:24.694003+01:00 nimbus sshd[181469]: Invalid user luis from 172.71.130.6 port 46320
...
show less
Repeated malicious activity detected by Fail2Ban jail 'plesk-modsecurity'. TCP connection completed. ...
show moreRepeated malicious activity detected by Fail2Ban jail 'plesk-modsecurity'. TCP connection completed. IP banned.
show less
[Thu Jan 29 22:16:50.962724 2026] [php:error] [pid 2675719] [client 172.71.130.6:11467] script '/var ...
show more[Thu Jan 29 22:16:50.962724 2026] [php:error] [pid 2675719] [client 172.71.130.6:11467] script '/var/www/html/fffff.php' not found or unable to stat
[Thu Jan 29 22:16:51.255119 2026] [php:error] [pid 2675719] [client 172.71.130.6:11467] script '/var/www/html/gm.php' not found or unable to stat
[Thu Jan 29 22:16:51.720049 2026] [php:error] [pid 2675719] [client 172.71.130.6:11467] script '/var/www/html/a2.php' not found or unable to stat
[Thu Jan 29 22:16:52.174679 2026] [php:error] [pid 2675719] [client 172.71.130.6:11467] script '/var/www/html/class-t.api.php' not found or unable to stat
[Thu Jan 29 22:16:52.559416 2026] [php:error] [pid 2675719] [client 172.71.130.6:11467] script '/var/www/html/about3.php' not found or unable to stat
...
show less
Brute-Force
Web App Attack
Anonymous
2026-01-23T09:10:18.114564+01:00 nimbus sshd[37156]: Failed password for root from 172.71.130.6 port ...
show more2026-01-23T09:10:18.114564+01:00 nimbus sshd[37156]: Failed password for root from 172.71.130.6 port 11668 ssh2
2026-01-23T09:10:20.359982+01:00 nimbus sshd[37156]: Failed password for root from 172.71.130.6 port 11668 ssh2
2026-01-23T09:10:23.878617+01:00 nimbus sshd[37156]: Failed password for root from 172.71.130.6 port 11668 ssh2
...
show less
