JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.70.42.44

172.70.42.44

Neutral Activity Whitelisted Subnet

97 reports found in our database

0% Low Risk

Abuse confidence score ?

172.70.42.44 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP

Cloudflare, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS13335

Domain Name

cloudflare.com

Country

🇺🇸 United States of America

City

Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.70.42.44 has been reported 97 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 172.70.42.44:

This IP address has been reported a total of 97 times from 21 distinct sources. 172.70.42.44 was first reported on October 20th 2022, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-21 09:32:54 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 05:32:50.488342 2026] [security2:error] [pid 648:tid 648] [client 172.70.42.44:10496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kemblebrother.kemblebrothers.com"] [uri "/.env.backup"] [unique_id "ajevwjSuO9BbP74M0GFrEwAAAA0"], referer: https://www.google.com/search?q=www.kemblebrother.kemblebrothers.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 05:57:12 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 01:57:06.687658 2026] [security2:error] [pid 4436:tid 4436] [client 172.70.42.44:13427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fasllc.rooksfamily.com"] [uri "/.env"] [unique_id "ajd9MnPcDpgnvJ8jy60SWgAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-06-21 05:35:55 (3 months ago)	dot file probe	Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 17:26:00 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 13:25:52.250190 2026] [security2:error] [pid 20111:tid 20117] [client 172.70.42.44:10343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.brucejoell.com"] [uri "/sftp-config.json"] [unique_id "ahSGIPlTYZuGnyUGpFpeAAAAAYM"], referer: https://www.google.com/search?q=webmail.brucejoell.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Timothee Lebourdais	2026-05-22 00:03:26 (3 months ago)	[nuc] Blocked by SysWarden Firewall (Web Attack)	Hacking Web App Attack Port Scan
🇳🇱 homeshowdomain.nl	2026-05-14 22:06:55 (4 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-13. show less	Web App Attack SSH Hacking
🇩🇪 ghostwarriors	2026-05-06 14:22:05 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-01 00:21:29 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-04-22 00:50:08 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 20:22:27 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 16:22:22.869314 2026] [security2:error] [pid 15728:tid 15728] [client 172.70.42.44:13396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.dukemason.com"] [uri "/.env.dev"] [unique_id "ac1-fjJ2NEgZPfgobWrsCQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 12:01:47 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 08:01:42.421834 2026] [security2:error] [pid 27296:tid 27296] [client 172.70.42.44:11027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hollywooddrummers.com.mikedeutsch.com"] [uri "/.env.production.local"] [unique_id "ac0JJgbRYKwLyeSlVH2xmAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 11:09:09 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 07:09:00.624937 2026] [security2:error] [pid 23582:tid 23582] [client 172.70.42.44:9751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cipcug.org"] [uri "/.env2"] [unique_id "acz8zDV7vjLYWEC_nF8I_gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 07:37:37 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 03:37:32.175585 2026] [security2:error] [pid 17972:tid 17972] [client 172.70.42.44:12659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aykonak.com.qcyprus.com"] [uri "/.env.example"] [unique_id "aczLPOPn4MdlrdtNCR2hcQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 06:53:29 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 02:53:21.876635 2026] [security2:error] [pid 9648:tid 9659] [client 172.70.42.44:13115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadingedgesupply.com"] [uri "/.env1"] [unique_id "aczA4ceVBUL0MnIIcK0kcwAAAUk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 15:24:48 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 172.70.42.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 11:24:41.328168 2026] [security2:error] [pid 19684:tid 19684] [client 172.70.42.44:10606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.awl-v.com"] [uri "/config/.env"] [unique_id "acvnObtsgt6bsxaBC2BDTwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.110.147.56

🇮🇳 123.108.206.21

🇺🇸 205.210.31.104

🇳🇱 193.29.139.132

🇰🇷 122.199.225.53

🇮🇩 27.123.7.187

🇮🇳 14.97.112.170

🇳🇱 193.47.62.69

🇺🇸 107.173.146.203

🇻🇳 103.221.221.228

🇮🇩 103.187.165.26

🇱🇹 84.32.244.112

🇺🇸 62.11.129.215

🇺🇸 51.57.81.164

🇺🇸 35.254.250.214

🇫🇷 2a02:c207:2251:1050::1

🇨🇾 213.7.81.165

🇨🇦 198.245.62.60

🇰🇷 175.196.78.7

🇯🇵 172.105.200.173