Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
This IP address has been reported a total of
230
times from
68 distinct
sources.
172.71.148.105 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 6
reports;
Germany
with 3
reports;
Australia
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
14
times;
Bad Web Bot
7
times;
Brute-Force
3
times;
Hacking
3
times;
Web Spam
2
times;
Other
7
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Malicious HTTP GET request for '/.env?raw??' (HTTP 404) from 172.71.148.105. Threat: Web Gรผvenlik Aรง ...
show moreMalicious HTTP GET request for '/.env?raw??' (HTTP 404) from 172.71.148.105. Threat: Web Gรผvenlik Aรงฤฑฤฤฑ Taramasฤฑ (.env/bot). Blocked by WardenGuard Web Shield.
show less
[TueSep2917:02:20.9498182026][security2:error][pid964522:tid964639][client172.71.148.105:0]ModSecuri ...
show more[TueSep2917:02:20.9498182026][security2:error][pid964522:tid964639][client172.71.148.105:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"swiss-domain-name.aidconsultancy.ch\"][uri\"/.env.dist\"][unique_id\"arvS_CxP1NqTOAZRA4_IOwAAAVA\"]
show less
Hacking
Web App Attack
Anonymous
[Tue Sep 29 10:14:03.795648 2026] [authz_core:error] [pid 2306] [client 172.71.148.105:13408] AH0163 ...
show more[Tue Sep 29 10:14:03.795648 2026] [authz_core:error] [pid 2306] [client 172.71.148.105:13408] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 29 10:14:04.130026 2026] [authz_core:error] [pid 2306] [client 172.71.148.105:13408] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 29 10:14:04.327264 2026] [authz_core:error] [pid 2306] [client 172.71.148.105:13408] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
{"level":"info","ts":1789219087.5808437,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1789219087.5808437,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"172.71.148.105","remote_port":"16512","client_ip":"172.71.148.105","proto":"HTTP/1.1","method":"GET","host":"status.ip2location.io","uri":"/","headers":{"Cf-Visitor":["{\"scheme\":\"http\"}"],"Connection":["Keep-Alive"],"Cf-Ray":["a39f3240a8f6fc85-FRA"],"Cf-Connecting-Ip":["216.9.204.22"],"Accept-Encoding":["gzip"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Ipcountry":["US"],"X-Forwarded-Proto":["http"],"X-Forwarded-For":["216.9.204.22"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.96 Safari/537.36"],"Accept":["*/*"]}},"bytes_read":0,"user_id":"","duration":0.000065104,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.ip2location.io/"],"Content-Type":[]}}
...
show less
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. ...
show moreAutomated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
show less
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. ...
show moreAutomated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
show less
