AbuseIPDB » 172.70.42.232

172.70.42.232 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Important Note: 172.70.42.232 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.70.42.232

Whois 172.70.42.232

IP Abuse Reports for 172.70.42.232:

This IP address has been reported a total of 49 times from 9 distinct sources. 172.70.42.232 was first reported on February 2nd 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Study Bitcoin 🤗	2025-01-13 20:10:34 (1 week ago)	Port probe to tcp/443 (https) [srv130]	Port Scan Brute-Force Bad Web Bot Web App Attack
Study Bitcoin 🤗	2024-12-25 00:24:37 (3 weeks ago)	Port probe to tcp/443 (https) [srv130]	Port Scan Brute-Force Bad Web Bot Web App Attack
Study Bitcoin 🤗	2024-12-23 04:22:31 (4 weeks ago)	Port probe to tcp/443 (https) [srv130]	Port Scan Brute-Force Bad Web Bot Web App Attack
Study Bitcoin 🤗	2024-12-12 18:16:42 (1 month ago)	2 port probes: 2x tcp/443 (https) [srv125]	Port Scan Brute-Force Bad Web Bot Web App Attack
Hirte	2024-12-10 20:43:55 (1 month ago)	SS1: Web Attack GET /admin.php	Web Spam Hacking Bad Web Bot Web App Attack
Hirte	2024-12-09 00:28:32 (1 month ago)	SS1: Web Attack GET /wp-includes/style-engine/about.php GET /wp-includes/rest-api/about.php<br ... show moreSS1: Web Attack GET /wp-includes/style-engine/about.php GET /wp-includes/rest-api/about.php GET /wp-includes/SimplePie/about.php GET /wp-content/banners/about.php show less	Web Spam Hacking Bad Web Bot Web App Attack
TPI-Abuse	2024-12-03 03:46:38 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.232 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 172.70.42.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 02 22:46:35.837185 2024] [security2:error] [pid 22784:tid 22784] [client 172.70.42.232:28296] [client 172.70.42.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virtualizecr.net"] [uri "/core/.env"] [unique_id "Z05_G6LAjnscT5sEfAsoEAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Study Bitcoin 🤗	2024-11-20 10:32:39 (2 months ago)	Port probe to tcp/443 (https) [srv125]	Port Scan Brute-Force Bad Web Bot Web App Attack
Study Bitcoin 🤗	2024-11-08 10:21:00 (2 months ago)	Port probe to tcp/80 (http) [srv125]	Port Scan Bad Web Bot Web App Attack
Study Bitcoin 🤗	2024-11-08 02:17:02 (2 months ago)	Port probe to tcp/80 (http) [srv125]	Port Scan Bad Web Bot Web App Attack
TPI-Abuse	2024-10-13 22:03:32 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.232 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 172.70.42.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 13 18:03:26.186106 2024] [security2:error] [pid 18524:tid 18524] [client 172.70.42.232:36898] [client 172.70.42.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.shivermedia.com"] [uri "/.git/config"] [unique_id "ZwxDrmb7rOV8CZiy7jIq3QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-09-07 18:31:51 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 172.70.42.232 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:225170) triggered by 172.70.42.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 07 14:31:45.526543 2024] [security2:error] [pid 14828:tid 14828] [client 172.70.42.232:38318] [client 172.70.42.232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.upskirtcrazy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.upskirtcrazy.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZtycEWTlLwzYYcXJ_bFeFAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-13 02:24:16 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 172.70.42.232 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:225170) triggered by 172.70.42.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 22:24:09.301205 2024] [security2:error] [pid 7677:tid 7677] [client 172.70.42.232:16416] [client 172.70.42.232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.aaaansweringservice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.aaaansweringservice.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZrrDycfltm8WMhrfgw_M_wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-05-27 21:34:55 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.232 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 172.70.42.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 27 17:34:50.522201 2024] [security2:error] [pid 10550] [client 172.70.42.232:39066] [client 172.70.42.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globetechsecurities.com"] [uri "/.env"] [unique_id "ZlT8eowK9IQhcS8F7AoMxgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-05-01 03:17:13 (8 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH