IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
Important Note: 172.71.148.20 is an IP address from within
our whitelist belonging to the subnet
172.64.0.0/13,
which we identify as: "Cloudflare Reverse Proxy".
Whitelisted netblocks are typically owned by trusted entities, such as Google
or Microsoft who may use them for search engine spiders. However, these same entities
sometimes also provide cloud servers and mail services which are easily abused. Pay special
attention when trusting or distrusting these IPs.
This IP address has been reported a total of
224
times from
52 distinct
sources.
172.71.148.20 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
[Fri Jun 26 21:18:42.547198 2026] [authz_core:error] [pid 14365] [client 172.71.148.20:11254] AH0163 ...
show more[Fri Jun 26 21:18:42.547198 2026] [authz_core:error] [pid 14365] [client 172.71.148.20:11254] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jun 26 21:18:42.620630 2026] [authz_core:error] [pid 14365] [client 172.71.148.20:11254] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jun 26 21:18:42.710145 2026] [authz_core:error] [pid 14365] [client 172.71.148.20:11254] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
[Fri Jun 26 17:35:10.431746 2026] [authz_core:error] [pid 14365] [client 172.71.148.20:12654] AH0163 ...
show more[Fri Jun 26 17:35:10.431746 2026] [authz_core:error] [pid 14365] [client 172.71.148.20:12654] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jun 26 17:35:10.550883 2026] [authz_core:error] [pid 14365] [client 172.71.148.20:12654] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jun 26 17:35:10.695387 2026] [authz_core:error] [pid 14365] [client 172.71.148.20:12654] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
Web App Attack
Brute-Force
Exploited Host
Web App Attack
Anonymous
[Mon Jun 22 02:49:49.948729 2026] [authz_core:error] [pid 23006] [client 172.71.148.20:10589] AH0163 ...
show more[Mon Jun 22 02:49:49.948729 2026] [authz_core:error] [pid 23006] [client 172.71.148.20:10589] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Jun 22 02:49:50.274948 2026] [authz_core:error] [pid 23006] [client 172.71.148.20:10589] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Jun 22 02:49:50.309928 2026] [authz_core:error] [pid 23006] [client 172.71.148.20:10589] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
[Sun Jun 21 01:58:08.695321 2026] [authz_core:error] [pid 30415] [client 172.71.148.20:10307] AH0163 ...
show more[Sun Jun 21 01:58:08.695321 2026] [authz_core:error] [pid 30415] [client 172.71.148.20:10307] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.binance.com
[Sun Jun 21 01:58:08.911926 2026] [authz_core:error] [pid 30415] [client 172.71.148.20:10307] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.binance.com
[Sun Jun 21 01:58:09.337619 2026] [authz_core:error] [pid 30415] [client 172.71.148.20:10307] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.binance.com
...
show less
Web App Attack
Anonymous
[Sat Jun 20 21:36:21.490114 2026] [authz_core:error] [pid 28677] [client 172.71.148.20:12186] AH0163 ...
show more[Sat Jun 20 21:36:21.490114 2026] [authz_core:error] [pid 28677] [client 172.71.148.20:12186] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Jun 20 21:36:21.636305 2026] [authz_core:error] [pid 28677] [client 172.71.148.20:12186] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Jun 20 21:36:21.791546 2026] [authz_core:error] [pid 28677] [client 172.71.148.20:12186] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
[Fri Jun 19 13:47:21.779215 2026] [authz_core:error] [pid 1681] [client 172.71.148.20:10516] AH01630 ...
show more[Fri Jun 19 13:47:21.779215 2026] [authz_core:error] [pid 1681] [client 172.71.148.20:10516] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jun 19 13:47:21.813069 2026] [authz_core:error] [pid 1681] [client 172.71.148.20:10516] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jun 19 13:47:21.887994 2026] [authz_core:error] [pid 1681] [client 172.71.148.20:10516] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
[Fri Jun 19 00:15:26.837681 2026] [authz_core:error] [pid 11901] [client 172.71.148.20:11602] AH0163 ...
show more[Fri Jun 19 00:15:26.837681 2026] [authz_core:error] [pid 11901] [client 172.71.148.20:11602] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jun 19 00:15:26.990923 2026] [authz_core:error] [pid 11901] [client 172.71.148.20:11602] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jun 19 00:15:27.143694 2026] [authz_core:error] [pid 11901] [client 172.71.148.20:11602] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show moreTriggered Cloudflare WAF (firewallManaged) from DE.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /.vscode/sftp.json
UA: Mozilla/5.0 (l9scan/2.0.8393e26323e28313e2430313; +https://leakix.net)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less