AbuseIPDB » 172.71.130.80

172.71.130.80 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Important Note: 172.71.130.80 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.71.130.80

Whois 172.71.130.80

IP Abuse Reports for 172.71.130.80:

This IP address has been reported a total of 79 times from 15 distinct sources. 172.71.130.80 was first reported on August 23rd 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-01-02 05:06:23 (1 year ago)	Jan 2 06:06:21 syscgn kernel: [1695417.025033] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e ... show moreJan 2 06:06:21 syscgn kernel: [1695417.025033] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e:7e:26:f1:c0:08:00 SRC=172.71.130.80 DST=185.194.141.106 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=48183 DF PROTO=TCP SPT=14086 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking
TPI-Abuse	2023-12-10 08:15:21 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 172.71.130.80 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 172.71.130.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 10 03:15:17.614329 2023] [security2:error] [pid 3667678] [client 172.71.130.80:35694] [client 172.71.130.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.stufman.shop"] [uri "/database/.env"] [unique_id "ZXVzlYSw8ocI8rqC-Ebt6gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
mawan	2023-11-28 19:47:35 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
TPI-Abuse	2023-11-16 04:31:29 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 172.71.130.80 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 172.71.130.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 15 23:31:27.233216 2023] [security2:error] [pid 31328] [client 172.71.130.80:45012] [client 172.71.130.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.elizabethlacey.com"] [uri "/test/bedesk1.1/.env"] [unique_id "ZVWbH6aJCWTcaC2pFA1jzgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-10-06 17:29:07 (1 year ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
vhnmn	2023-08-19 18:29:11 (1 year ago)	xmlrpc attack blocked attempt from fail2ban ...	Web App Attack
Anonymous	2023-07-06 21:03:57 (1 year ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2023-06-16 19:26:03 (1 year ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
ThreatBook.io	2023-02-11 21:35:09 (1 year ago)	2023-02-11 09:30:14 /robots.txt	Web App Attack
ThreatBook.io	2023-01-22 21:32:51 (2 years ago)	2023-01-22 11:59:40 /docs/elapi/index.html	Web App Attack
ThreatBook.io	2023-01-09 21:25:15 (2 years ago)	2023-01-09 17:47:50 /%E5%8F%B3%E8%B2%B8%E3%81%99%E6%A0%B9%E7%B5%B6%E3%81%99%E3%82%8B/%E3%83%90%E3%83 ... show more2023-01-09 17:47:50 /%E5%8F%B3%E8%B2%B8%E3%81%99%E6%A0%B9%E7%B5%B6%E3%81%99%E3%82%8B/%E3%83%90%E3%83%A9%E8%89%B2%E4%BD%93%E7%8F%BE%E3%81%99%E3%82%8B%E4%BA%88%E5%A0%B1.html show less	Web App Attack
ThreatBook.io	2023-01-03 16:24:04 (2 years ago)	2023-01-03 16:19:13 /docs/windows-service-howto.html 2023-01-03 16:19:32 /docs/config/cluster- ... show more2023-01-03 16:19:13 /docs/windows-service-howto.html 2023-01-03 16:19:32 /docs/config/cluster-listener.html show less	Web App Attack
ThreatBook.io	2022-12-30 16:25:09 (2 years ago)	2022-12-30 17:00:23 /tomcat.svg	Web App Attack
EIC	2022-12-08 03:50:42 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 172.71.130.80 (FR/Fr ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 172.71.130.80 (FR/France/-) show less	Bad Web Bot
ThreatBook.io	2022-12-02 16:26:40 (2 years ago)	2022-12-02 00:33:43 / 2022-12-02 05:24:22 /tomcat.svg	Web App Attack