JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.71.144.42

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

268 reports

69 reporters · latest 2 days ago

172.71.144.42 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

268 from 69 distinct reporters

First reported

October 6th 2024

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 12 🇩🇪 Germany 6 🇨🇭 Switzerland 3

Most common categories Web App Attack 30 Bad Web Bot 17 Brute-Force 14 Hacking 4 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-10-26 13:13:35 (2 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 altenglaner	2026-10-25 04:32:51 (3 days ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-10-24 21:57:01 (3 days ago)	[25/Oct/2026:00:57:00 +0300] -- 172.71.144.42 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1	Bad Web Bot Web App Attack
🇨🇭 TheCoon	2026-10-24 16:19:01 (4 days ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇬🇧 Steve	2026-10-23 14:59:31 (5 days ago)	Abuse of XMLRPC	Brute-Force Web App Attack
🇮🇹 Inartis	2026-10-23 12:09:00 (5 days ago)	172.71.144.42 - - [23/Oct/2026:14:08:56 +0200] "GET /administrator/ HTTP/1.1" 301 416 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 172.71.144.42 - - [23/Oct/2026:14:08:58 ... show more 172.71.144.42 - - [23/Oct/2026:14:08:56 +0200] "GET /administrator/ HTTP/1.1" 301 416 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 172.71.144.42 - - [23/Oct/2026:14:08:58 +0200] "GET /xmlrpc.php HTTP/1.1" 302 502 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" ... show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 TheCoon	2026-10-23 06:24:27 (5 days ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇨🇭 TheCoon	2026-10-21 06:46:22 (1 week ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇫🇷 dynamix	2026-10-20 13:28:23 (1 week ago)	Multiple WAF Violations	Web App Attack
🇩🇪 raph	2026-10-18 14:24:44 (1 week ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-18 13:58:06 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 172.71.144.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:57:59.255018 2026] [security2:error] [pid 28875:tid 28875] [client 172.71.144.42:10708] M ... show more (mod_security) mod_security (id:210730) triggered by 172.71.144.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:57:59.255018 2026] [security2:error] [pid 28875:tid 28875] [client 172.71.144.42:10708] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|solidthought.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "solidthought.com"] [uri "/db.sql"] [unique_id "atTQZ91KEt1xEn5_uDrB_AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-18 13:39:34 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 172.71.144.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:39:25.481955 2026] [security2:error] [pid 7144:tid 7144] [client 172.71.144.42:12686] Mod ... show more (mod_security) mod_security (id:210730) triggered by 172.71.144.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:39:25.481955 2026] [security2:error] [pid 7144:tid 7144] [client 172.71.144.42:12686] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lightbender.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lightbender.net"] [uri "/db.sql"] [unique_id "atTMDVVpar4xeUHKAW3xjwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-18 11:30:08 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 172.71.144.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 07:30:00.355783 2026] [security2:error] [pid 27954:tid 27954] [client 172.71.144.42:12772] M ... show more (mod_security) mod_security (id:210730) triggered by 172.71.144.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 07:30:00.355783 2026] [security2:error] [pid 27954:tid 27954] [client 172.71.144.42:12772] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|carpascarpe.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "carpascarpe.com"] [uri "/dump.sql"] [unique_id "atStuPo1upILksSLRmxkoQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-18 09:16:31 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 172.71.144.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:16:22.738879 2026] [security2:error] [pid 12018:tid 12018] [client 172.71.144.42:14203] M ... show more (mod_security) mod_security (id:210730) triggered by 172.71.144.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:16:22.738879 2026] [security2:error] [pid 12018:tid 12018] [client 172.71.144.42:14203] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|j3pr.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "j3pr.com"] [uri "/database.sql"] [unique_id "atSOZoQ1CBDNPrsfYzsgpwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-18 08:56:15 (1 week ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack

Showing 1 to 15 of 268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 182.10.99.127

🇦🇷 177.23.130.7

🇺🇸 45.45.237.39

🇷🇼 197.243.14.52

🇳🇱 195.178.110.232

🇬🇧 188.240.59.53

🇰🇿 178.89.39.210

🇺🇸 145.63.136.36

🇺🇸 136.37.138.151

🇺🇸 134.33.65.117

🇧🇪 34.53.170.45

🇬🇧 31.171.130.16

🇺🇸 216.180.246.127

🇳🇱 195.178.110.227

🇩🇪 185.168.30.230

🇻🇳 171.254.93.44

🇵🇰 153.117.52.34

🇺🇸 129.121.124.39

🇵🇰 103.150.238.136

🇻🇳 103.20.96.133