JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.70.174.31

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

41 reports

14 reporters · latest 11 months ago

172.70.174.31 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.70.174.31 has been reported 41 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

41 from 14 distinct reporters

First reported

October 31st 2021

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oncord	2025-11-28 10:53:38 (11 months ago)	Form spam	Web Spam
🇬🇧 pinguin	2025-11-18 16:57:31 (11 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Apple M3; macOS 13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.8900.41 Safari/537.36 This report w ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Apple M3; macOS 13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.8900.41 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 oncord	2025-08-03 11:08:48 (1 year ago)	Form spam	Web Spam
🇩🇪 Séfora Srl	2025-06-27 11:02:15 (1 year ago)	Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail	Bad Web Bot
🇺🇸 TPI-Abuse	2025-04-23 06:27:04 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 172.70.174.31 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 02:26:59.681496 2025] [security2:error] [pid 27824:tid 27824] [client 172.70.174.31:27574] [ ... show more (mod_security) mod_security (id:210492) triggered by 172.70.174.31 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 02:26:59.681496 2025] [security2:error] [pid 27824:tid 27824] [client 172.70.174.31:27574] [client 172.70.174.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaitanyaconsult.in"] [uri "/secrets/prod/.env"] [unique_id "aAiIM2MQRDtO1vRcxxk3vgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-13 18:51:31 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.70.174.31 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 13 14:51:25.725342 2025] [security2:error] [pid 1737:tid 1737] [client 172.70.174.31:40160] [cl ... show more (mod_security) mod_security (id:240000) triggered by 172.70.174.31 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 13 14:51:25.725342 2025] [security2:error] [pid 1737:tid 1737] [client 172.70.174.31:40160] [client 172.70.174.31] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|jspsf.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "jspsf.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z_wHrYsiMQMVvGd2dZhSoQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-12 10:21:38 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 172.70.174.31 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 12 06:21:31.693963 2025] [security2:error] [pid 980662:tid 980662] [client 172.70.174.31:49740] ... show more (mod_security) mod_security (id:240335) triggered by 172.70.174.31 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 12 06:21:31.693963 2025] [security2:error] [pid 980662:tid 980662] [client 172.70.174.31:49740] [client 172.70.174.31] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 138.199.29.241 (+1 hits since last alert)\|webfrog.ws\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "webfrog.ws"] [uri "/xmlrpc.php"] [unique_id "Z_o-qyErAObTpmvCDYtnRgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-03-16 19:51:15 (1 year ago)	Form spam	Web Spam
🇳🇱 Bouncer	2025-03-15 18:09:12 (1 year ago)	(CT) IP 172.70.174.31 (US/United States/-) found to have 151 connections	Brute-Force
🇦🇺 oncord	2025-03-07 04:13:16 (1 year ago)	Form spam	Web Spam
🇦🇺 oncord	2025-02-17 00:43:52 (1 year ago)	Form spam	Web Spam
🇳🇱 Study Bitcoin 🤗	2025-01-26 05:34:40 (1 year ago)	Port probe to tcp/443 (https) [srv130]	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-11 22:51:48 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 172.70.174.31 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 11 17:51:41.381483 2025] [security2:error] [pid 356096:tid 356096] [client 172.70.174.31:33032] ... show more (mod_security) mod_security (id:225170) triggered by 172.70.174.31 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 11 17:51:41.381483 2025] [security2:error] [pid 356096:tid 356096] [client 172.70.174.31:33032] [client 172.70.174.31] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|newmanwood.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newmanwood.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z4L1_bh7ibh6-MhqTWt7EAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Study Bitcoin 🤗	2024-12-10 01:10:46 (1 year ago)	Port probe to tcp/80 (http) [srv125]	Port Scan Bad Web Bot Web App Attack
🇳🇱 Study Bitcoin 🤗	2024-11-27 00:08:34 (1 year ago)	Port probe to tcp/443 (https) [srv130]	Port Scan Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 198.2.141.23

🇨🇳 120.236.109.214

🇷🇴 2.57.121.112

🇳🇱 2a01:7c8:bb07:b4:ffff:11:5:9

🇨🇳 218.21.37.250

🇺🇸 206.189.230.154

🇮🇳 202.0.148.202

🇳🇱 193.47.62.69

🇬🇧 185.216.145.181

🇨🇴 181.54.165.174

🇳🇱 45.148.10.151

🇺🇸 45.79.109.4

🇻🇳 123.23.140.239

🇨🇳 122.51.5.251

🇺🇸 85.208.96.202

🇫🇮 80.223.176.145

🇺🇸 68.225.58.43

🇧🇪 35.206.186.214

🇦🇪 20.46.43.126

🇧🇷 187.93.68.178