JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.70.134.146

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

808 reports

25 reporters · latest 2 months ago

172.70.134.146 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.70.134.146 has been reported 808 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

808 from 25 distinct reporters

First reported

August 25th 2021

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-17 23:48:40 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 19:48:32.723682 2026] [security2:error] [pid 2640:tid 2655] [client 172.70.134.146:10115] M ... show more (mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 19:48:32.723682 2026] [security2:error] [pid 2640:tid 2655] [client 172.70.134.146:10115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.htpsocal.com.ceol.us"] [uri "/.git/HEAD"] [unique_id "aoOd0FDZQXyqr822h5IeTAAAAQQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 11:33:40 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:33:35.106239 2026] [security2:error] [pid 28913:tid 28913] [client 172.70.134.146:10814] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:33:35.106239 2026] [security2:error] [pid 28913:tid 28913] [client 172.70.134.146:10814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bonesband.com"] [uri "/.git/HEAD"] [unique_id "aoLxj5_nUFGqHOpIaP96wwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-16 22:01:05 (2 months ago)	Auto-ban: >3000 req/min op 2026-08-16	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-12 22:02:28 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 18:02:24.514645 2026] [security2:error] [pid 2459419:tid 2459558] [client 172.70.134.146:95 ... show more (mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 18:02:24.514645 2026] [security2:error] [pid 2459419:tid 2459558] [client 172.70.134.146:9579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.payment.oconnorpest.biz"] [uri "/.git/config"] [unique_id "anztcOooKN_PC0ycE0LG3QAAARc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-11 10:26:18 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 06:26:11.439916 2026] [security2:error] [pid 25923:tid 25923] [client 172.70.134.146:9451] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 06:26:11.439916 2026] [security2:error] [pid 25923:tid 25923] [client 172.70.134.146:9451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sumilondon.com"] [uri "/.git/config"] [unique_id "anr4w20lr_MFoLDfr-v37gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-08-11 08:54:19 (2 months ago)		Web App Attack
🇳🇱 COMPLEX	2026-07-30 00:37:27 (2 months ago)	Unsolicited TCP traffic \| Action: DROP \| Port 8443	Brute-Force
🇺🇸 slay3r9903	2026-05-20 10:11:48 (5 months ago)	Web app scanning	Brute-Force Port Scan
🇳🇱 homeshowdomain.nl	2026-05-14 22:06:26 (5 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-13.	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-03-31 01:06:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 21:06:07.704885 2026] [security2:error] [pid 21813:tid 21813] [client 172.70.134.146:11031] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 21:06:07.704885 2026] [security2:error] [pid 21813:tid 21813] [client 172.70.134.146:11031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.efavorboxes.com"] [uri "/.git/refs/heads/main"] [unique_id "acsd_0mitMEQS7X3QbPmLgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-30 08:25:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 04:25:04.409177 2026] [security2:error] [pid 25070:tid 25070] [client 172.70.134.146:10723] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 04:25:04.409177 2026] [security2:error] [pid 25070:tid 25070] [client 172.70.134.146:10723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.markgebhard.net"] [uri "/.env.example"] [unique_id "acozYIAABMv4fXnaIaLPwwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-30 03:43:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 23:43:39.948690 2026] [security2:error] [pid 6758:tid 6758] [client 172.70.134.146:10461] M ... show more (mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 23:43:39.948690 2026] [security2:error] [pid 6758:tid 6758] [client 172.70.134.146:10461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trispeccorp.com"] [uri "/.env.json"] [unique_id "acnxa-UQIa8LsuVZnN2zgwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-30 02:27:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 22:26:55.787260 2026] [security2:error] [pid 20022:tid 20022] [client 172.70.134.146:10492] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 22:26:55.787260 2026] [security2:error] [pid 20022:tid 20022] [client 172.70.134.146:10492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.superlamb.com"] [uri "/server/.env"] [unique_id "acnfbzXY53wOgxeqqP-kewAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-30 01:57:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 21:57:04.671052 2026] [security2:error] [pid 27995:tid 27995] [client 172.70.134.146:10082] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 21:57:04.671052 2026] [security2:error] [pid 27995:tid 27995] [client 172.70.134.146:10082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.iiiip.org"] [uri "/.env"] [unique_id "acnYcEoPTMKbKhGPYR2AAQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-29 23:45:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 19:45:08.893663 2026] [security2:error] [pid 18160:tid 18160] [client 172.70.134.146:11360] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.134.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 19:45:08.893663 2026] [security2:error] [pid 18160:tid 18160] [client 172.70.134.146:11360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.carl-fink.cafink.name"] [uri "/.env2"] [unique_id "acm5hB_JgEpiMJEJS8rUjQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 808 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 112.37.143.60

🇷🇴 193.32.162.148

🇯🇵 180.30.166.172

🇮🇳 121.242.232.147

🇰🇷 121.133.167.123

🇨🇳 117.185.178.24

🇺🇸 68.10.53.111

🇱🇹 62.60.130.91

🇳🇱 45.74.28.203

🇮🇩 36.75.0.144

🇺🇸 216.25.89.92

🇧🇷 200.80.101.239

🇺🇸 172.174.5.146

🇺🇸 159.223.97.218

🇨🇦 142.44.233.103

🇰🇷 122.45.23.206

🇵🇰 103.140.31.19

🇫🇷 85.217.140.28

🇵🇱 45.138.12.22

🇬🇧 35.203.210.113