JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.71.134.202

172.71.134.202 was found in our database!

This IP was reported 274 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 172.71.134.202 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.71.134.202

Whois 172.71.134.202

IP Abuse Reports for 172.71.134.202:

This IP address has been reported a total of 274 times from 24 distinct sources. 172.71.134.202 was first reported on November 22nd 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-18 22:01:41 (1 day ago)	Auto-ban: >3000 req/min op 2026-09-18	Web App Attack SSH Hacking
🇧🇪 madeit	2026-09-16 16:43:47 (4 days ago)		Web App Attack
🇧🇷 paradoxnetworks	2026-09-15 20:45:50 (4 days ago)	2026-09-15T20:45:46.896885+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[674526]: Invalid user ub ... show more 2026-09-15T20:45:46.896885+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[674526]: Invalid user ubuntu from 172.71.134.202 port 61428 2026-09-15T20:45:47.066595+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[674526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.71.134.202 2026-09-15T20:45:49.399212+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[674526]: Failed password for invalid user ubuntu from 172.71.134.202 port 61428 ssh2 ... show less	Brute-Force SSH
🇧🇷 paradoxnetworks	2026-09-15 08:48:58 (5 days ago)	2026-09-15T08:48:55.633517+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[582492]: Invalid user te ... show more 2026-09-15T08:48:55.633517+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[582492]: Invalid user test2 from 172.71.134.202 port 54995 2026-09-15T08:48:56.418201+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[582492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.71.134.202 2026-09-15T08:48:58.303293+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[582492]: Failed password for invalid user test2 from 172.71.134.202 port 54995 ssh2 ... show less	Brute-Force SSH
🇩🇪 www.mammazone.it	2026-09-10 09:11:47 (1 week ago)	[Thu Sep 10 11:06:37.130010 2026] [access_compat:error] [pid 1353223] [client 172.71.134.202:13333] ... show more [Thu Sep 10 11:06:37.130010 2026] [access_compat:error] [pid 1353223] [client 172.71.134.202:13333] AH01797: client denied by server configuration: /var/www/fabiodirauso.it/celery.config.swp [Thu Sep 10 11:11:46.572248 2026] [access_compat:error] [pid 1352988] [client 172.71.134.202:13333] AH01797: client denied by server configuration: /var/www/fabiodirauso.it/postcss.config.js.bak ... show less	Hacking
🇧🇪 madeit	2026-09-02 09:18:46 (2 weeks ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 14:19:38 (2 weeks ago)	(mod_security) mod_security (id:949110) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:949110) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 10:19:33.831571 2026] [security2:error] [pid 6084:tid 6084] [client 172.71.134.202:12340] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "toxicnation.org"] [uri "/.git/config"] [unique_id "apbe9VVx74F-w8MnelNv2wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 10:45:53 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 06:45:48.884164 2026] [security2:error] [pid 27726:tid 27726] [client 172.71.134.202:10903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kelleysbridge.com"] [uri "/.git/config"] [unique_id "apK4XPmJqCjQwS1qnLJLxAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 08:06:43 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 04:06:35.471379 2026] [security2:error] [pid 13184:tid 13242] [client 172.71.134.202:13048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spiritualchristian.com"] [uri "/.git/config"] [unique_id "apKTC5BFJFmExQZvJeCO5gAAAlg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 03:35:33 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 23:35:27.483608 2026] [security2:error] [pid 27128:tid 27128] [client 172.71.134.202:9273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.10bestsongs.com"] [uri "/.git/HEAD"] [unique_id "ao5e_0zVYIMAz_FRc5IRFQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 21:24:49 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 17:24:44.415791 2026] [security2:error] [pid 2510:tid 2541] [client 172.71.134.202:10297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vanessa.santos.name"] [uri "/.git/config"] [unique_id "aoy2nOUpn4TAj3gMfcvLEQAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 15:24:21 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 11:24:17.396582 2026] [security2:error] [pid 22285:tid 22285] [client 172.71.134.202:13473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gesegurospma.com"] [uri "/.git/config"] [unique_id "aosQoS9nFjusNKrnC0MsXQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 06:00:41 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:00:35.202859 2026] [security2:error] [pid 13042:tid 13042] [client 172.71.134.202:11408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ggaccounting.services"] [uri "/.git/config"] [unique_id "aok7AwCeJZ5yuJkM-JVPewAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 15:22:24 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.71.134.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 11:22:15.926795 2026] [security2:error] [pid 20147:tid 20147] [client 172.71.134.202:12863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.dc406.net"] [uri "/.git/config"] [unique_id "aohtJ0Am-DBV5d15N3tlCgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-21 02:40:38 (4 weeks ago)	2026-08-21T04:40:35.252962+02:00 nimbus sshd[429858]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-08-21T04:40:35.252962+02:00 nimbus sshd[429858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.71.134.202 user=root 2026-08-21T04:40:37.586650+02:00 nimbus sshd[429858]: Failed password for root from 172.71.134.202 port 63411 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 274 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.69.149.44

🇫🇷 2a13:f40:b93f:9f0d:1df6:d100:bac7:97a

🇺🇸 204.1.240.84

🇱🇹 185.36.81.23

🇬🇧 176.248.232.35

🇷🇺 176.212.127.89

🇳🇱 176.65.149.30

🇧🇷 164.163.206.119

🇺🇸 157.230.238.238

🇳🇱 109.160.32.119

🇺🇸 104.237.150.123

🇮🇩 103.154.77.48

🇺🇸 2604:a880:400:d1:0:5:2c8:6001

🇧🇷 201.79.55.251

🇩🇪 194.88.98.102

🇧🇴 190.109.227.122

🇧🇷 177.137.66.15

🇨🇳 122.114.113.177

🇺🇸 81.161.239.10

🇺🇸 34.123.253.247