AbuseIPDB » 172.71.99.120

172.71.99.120 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 0%: ?

ISP	CloudFlare Inc
Usage Type	Content Delivery Network
Domain Name	cloudflare.com
Country	Netherlands
City	Amsterdam, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Important Note: 172.71.99.120 is an IP address from within our whitelist. Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

According to our records, this IP belongs to the subnet 172.64.0.0/13, identified as: "Cloudflare Reverse Proxy"

Report 172.71.99.120

Whois 172.71.99.120

IP Abuse Reports for 172.71.99.120:

This IP address has been reported a total of 36 times from 10 distinct sources. 172.71.99.120 was first reported on October 28th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2024-09-08 00:24:31 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 172.71.99.120 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 172.71.99.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 07 20:24:24.937471 2024] [security2:error] [pid 26748:tid 26748] [client 172.71.99.120:14130] [client 172.71.99.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gibit.me"] [uri "/.env"] [unique_id "ZtzuuHCmvsALVraJ9_TpggAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-21 15:58:50 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.71.99.120 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 172.71.99.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 21 11:58:42.167140 2024] [security2:error] [pid 10053:tid 10053] [client 172.71.99.120:62046] [client 172.71.99.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "samosbet.com"] [uri "/.git/config"] [unique_id "ZsYOsmup3VXPCDrS5CFpygAAAAo"], referer: http://samosbet.com:80/.git/config show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-20 07:05:06 (2 weeks ago)	\| SQL injection attempt.	Hacking SQL Injection Web App Attack
Anonymous	2024-08-18 01:17:18 (3 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-08-10 12:48:52 (4 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-08-07 06:50:53 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-07-31 02:51:45 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
TPI-Abuse	2024-07-30 21:59:21 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.71.99.120 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 172.71.99.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 30 17:59:14.537049 2024] [security2:error] [pid 2632:tid 2632] [client 172.71.99.120:41886] [client 172.71.99.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gibitdigital.com"] [uri "/web.config"] [unique_id "ZqliMkMPg0otZ7AyZcYFDQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
ParaBug	2024-07-26 18:42:02 (1 month ago)	172.71.99.120 - - [26/Jul/2024:20:42:02 +0200] "GET /index.html HTTP/1.1" 410 477 "https://www.lanay ... show more172.71.99.120 - - [26/Jul/2024:20:42:02 +0200] "GET /index.html HTTP/1.1" 410 477 "https://www.lanaymateo.shop/index.html" "Mozilla/5.0 (Linux; Android 11; vivo 1906; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/87.0.4280.141 Mobile Safari/537.36 VivoBrowser/8.9.0.0 uni-app Html5Plus/1.0" ... show less	Phishing Brute-Force Web App Attack
Anonymous	2024-07-26 03:25:14 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-07-19 03:11:35 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Yepngo	2024-07-12 08:13:48 (1 month ago)	172.71.99.120 - - [12/Jul/2024:10:13:46 +0200] "POST //xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 ... show more172.71.99.120 - - [12/Jul/2024:10:13:46 +0200] "POST //xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.99.120 - - [12/Jul/2024:10:13:48 +0200] "POST //xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Brute-Force Web App Attack
Anonymous	2024-07-02 05:03:21 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-30 07:02:31 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
ParaBug	2024-06-28 11:42:08 (2 months ago)	172.71.99.120 - - [28/Jun/2024:13:42:07 +0200] "GET /?un=4018ad324090360fa572284d71f548fc HTTP/1.1" ... show more172.71.99.120 - - [28/Jun/2024:13:42:07 +0200] "GET /?un=4018ad324090360fa572284d71f548fc HTTP/1.1" 403 400 "https://www.chiropractorbakersfield.com/ORIGANO-Olio-essenziale-naturale-3764490.html" "Mozilla/5.0 (Linux; Android 9; SM-A105FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.136 Mobile Safari/537.36" ... show less	Phishing Brute-Force Web App Attack