AbuseIPDB » 172.71.99.45

172.71.99.45 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 0%: ?

ISP	CloudFlare Inc
Usage Type	Content Delivery Network
Domain Name	cloudflare.com
Country	Netherlands
City	Amsterdam, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Important Note: 172.71.99.45 is an IP address from within our whitelist. Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

According to our records, this IP belongs to the subnet 172.64.0.0/13, identified as: "Cloudflare Reverse Proxy"

Report 172.71.99.45

Whois 172.71.99.45

IP Abuse Reports for 172.71.99.45:

This IP address has been reported a total of 55 times from 12 distinct sources. 172.71.99.45 was first reported on October 11th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-08-18 20:17:19 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
TPI-Abuse	2024-08-14 16:23:20 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.71.99.45 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 172.71.99.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 14 12:23:14.401677 2024] [security2:error] [pid 29686:tid 29686] [client 172.71.99.45:42368] [client 172.71.99.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ard.global"] [uri "/.git/config"] [unique_id "ZrzZ8ufZwPKbN0d3vwcl7QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-04 17:05:22 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.71.99.45 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 172.71.99.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 04 13:05:15.281843 2024] [security2:error] [pid 16619:tid 16619] [client 172.71.99.45:30212] [client 172.71.99.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sportsbookcommission.com"] [uri "/.git/config"] [unique_id "Zq-0yzefoAGu5HUt09a9RwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
mawan	2024-08-02 13:45:34 (1 month ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
TPI-Abuse	2024-07-30 10:36:48 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.71.99.45 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 172.71.99.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 30 06:36:44.918376 2024] [security2:error] [pid 3083993:tid 3083993] [client 172.71.99.45:11424] [client 172.71.99.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ruralcommunitycare.org"] [uri "/.env"] [unique_id "ZqjCPKWsMbhKZ9HKwz3aYwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
mawan	2024-07-26 17:01:16 (1 month ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
ParaBug	2024-07-24 12:30:12 (1 month ago)	172.71.99.45 - - [24/Jul/2024:14:30:11 +0200] "GET /japanese-c-658_1681_1682_4288.htm HTTP/1.1" 410 ... show more172.71.99.45 - - [24/Jul/2024:14:30:11 +0200] "GET /japanese-c-658_1681_1682_4288.htm HTTP/1.1" 410 478 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" ... show less	Phishing Brute-Force Web App Attack
TPI-Abuse	2024-07-05 07:59:52 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.71.99.45 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 172.71.99.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 05 03:59:46.315098 2024] [security2:error] [pid 26610] [client 172.71.99.45:9764] [client 172.71.99.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.365soft.top"] [uri "/application/.env"] [unique_id "Zoen8mONIb-bKQDgvfzZsQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
URAN Publishing Service	2024-07-01 20:10:04 (2 months ago)	172.71.99.45 - - [01/Jul/2024:23:06:58 +0300] "GET /wp-content/plugins/email-posts-to-subscribers/re ... show more172.71.99.45 - - [01/Jul/2024:23:06:58 +0300] "GET /wp-content/plugins/email-posts-to-subscribers/readme.txt HTTP/1.1" 404 282 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/125.0.6422.33 Mobile/15E148 Safari/604.1" 172.71.99.45 - - [01/Jul/2024:23:10:03 +0300] "GET /wp-content/plugins/ait-csv-import-export/changelog.txt HTTP/1.1" 404 282 "-" "Mozilla/5.0 (Linux; Android 11; Lenovo YT-J706X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.54 Safari/537.36" ... show less	Web App Attack
ParaBug	2024-06-26 06:30:51 (2 months ago)	172.71.99.45 - - [26/Jun/2024:08:30:50 +0200] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 40 ... show more172.71.99.45 - - [26/Jun/2024:08:30:50 +0200] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Phishing Brute-Force Web App Attack
Anonymous	2024-06-23 02:35:02 (2 months ago)	\| Suspicious URL access.	Hacking Hacking SQL Injection SQL Injection Web App Attack Web App Attack
Anonymous	2024-06-19 07:28:15 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force Brute-Force SSH SSH
URAN Publishing Service	2024-06-13 10:00:40 (2 months ago)	172.71.99.45 - - [13/Jun/2024:13:00:25 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 404 282 "-" "Moz ... show more172.71.99.45 - - [13/Jun/2024:13:00:25 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 404 282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.99.45 - - [13/Jun/2024:13:00:39 +0300] "GET /wp-content/plugins/ccx/ HTTP/1.1" 404 282 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" ... show less	Web App Attack
ParaBug	2024-06-11 15:33:37 (2 months ago)	172.71.99.45 - - [11/Jun/2024:17:33:37 +0200] "GET /arte-c-7_37118.htm HTTP/1.1" 410 478 "-" "Mozill ... show more172.71.99.45 - - [11/Jun/2024:17:33:37 +0200] "GET /arte-c-7_37118.htm HTTP/1.1" 410 478 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.168 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Phishing Brute-Force Web App Attack
Xuan Can	2024-06-10 08:15:44 (2 months ago)	(mod_security) mod_security (id:20000222) triggered by 172.71.99.45 (NL/The Netherlands/-): 1 in the ... show more(mod_security) mod_security (id:20000222) triggered by 172.71.99.45 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 10 15:15:39.031886 2024] [security2:error] [pid 10565:tid 47525552727808] [client 172.71.99.45:0] [client 172.71.99.45] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-admin" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "47"] [id "20000222"] [severity "CRITICAL"] [hostname "www.bacsonghongland.vn"] [uri "/wp-admin/setup-config.php"] [unique_id "Zma2K1FBaJAg1YZpFZDYfQAAARI"] show less	Brute-Force SSH