AbuseIPDB » 172.70.49.195

172.70.49.195 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	cloudflare.com
Country	Japan
City	Tokyo, Tokyo

Important Note: 172.70.49.195 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.70.49.195

Whois 172.70.49.195

IP Abuse Reports for 172.70.49.195:

This IP address has been reported a total of 15 times from 11 distinct sources. 172.70.49.195 was first reported on July 28th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Study Bitcoin 🤗	2024-12-05 12:24:32 (1 week ago)	Port probe to tcp/443 (https) [srv130]	Port Scan Brute-Force Bad Web Bot Web App Attack
Study Bitcoin 🤗	2024-12-03 14:20:31 (1 week ago)	Port probe to tcp/443 (https) [srv130]	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-06 04:33:33 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
weils.net	2024-11-03 15:31:19 (1 month ago)	2024-11-03 23:31:19(GMT+8) - /wp-admin/xmrlpc.php?p=	Bad Web Bot
Anonymous	2024-10-16 14:49:36 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-10-06 22:15:23 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
no1knows.com	2024-09-12 12:04:49 (3 months ago)	2024/09/12 13:01:02 [error] 1606752#1606752: 34094 FastCGI sent in stderr: "Primary script unknown" ... show more2024/09/12 13:01:02 [error] 1606752#1606752: 34094 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.70.49.195, server: _, request: "GET /wp-content/uploads/2023/wso.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com" 2024/09/12 13:04:23 [error] 1606744#1606744: 34725 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.70.49.195, server: _, request: "GET /wp-admin/1.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com" 2024/09/12 13:04:45 [error] 1606744#1606744: 34725 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.70.49.195, server: _, request: "GET /wp-content/upgrade/fond.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com" ... show less	Brute-Force Bad Web Bot
Yepngo	2022-05-14 15:18:31 (2 years ago)	172.70.49.195 - - [14/May/2022:21:11:03 +0200] "POST /xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 ... show more172.70.49.195 - - [14/May/2022:21:11:03 +0200] "POST /xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 172.70.49.195 - - [14/May/2022:21:18:31 +0200] "POST /wp-login.php HTTP/2.0" 200 10210 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force Web App Attack
stfw	2022-04-28 19:31:50 (2 years ago)	8443/tcp 8443/tcp 8443/tcp... [2022-04-28]4pkt,1pt.(tcp)	Port Scan
Yepngo	2022-03-18 17:09:46 (2 years ago)	172.70.49.195 - - [18/Mar/2022:22:09:44 +0100] "POST /wp-login.php HTTP/2.0" 200 10288 "http://yepng ... show more172.70.49.195 - - [18/Mar/2022:22:09:44 +0100] "POST /wp-login.php HTTP/2.0" 200 10288 "http://yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 172.70.49.195 - - [18/Mar/2022:22:09:46 +0100] "POST /wp-login.php HTTP/2.0" 200 10288 "http://yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" ... show less	Brute-Force Web App Attack
faserx	2022-01-29 00:53:10 (2 years ago)	\[Sat Jan 29 05:53:09.091085 2022\] \[:error\] \[pid 8237\] \[client 172.70.49.195:47730\] script \& ... show more\[Sat Jan 29 05:53:09.091085 2022\] \[:error\] \[pid 8237\] \[client 172.70.49.195:47730\] script \'/var/www3/studio-kappa.com/static/alfindex.php\' not found or unable to stat, referer: anonymousfox.co show less	Hacking Web App Attack
IrisFlower	2021-10-31 17:30:05 (3 years ago)	Unauthorized connection attempt detected from IP address 172.70.49.195 to port 443 [J]	Port Scan Hacking
pusathosting.com	2021-09-17 10:25:03 (3 years ago)	ang 172.70.49.195 {toyyibtrans.com} "POST //xmlrpc.php 200 172.70.49.195 {toyyibtrans.com} "PO ... show moreang 172.70.49.195 {toyyibtrans.com} "POST //xmlrpc.php 200 172.70.49.195 {toyyibtrans.com} "POST //xmlrpc.php 200 172.70.49.195 {toyyibtrans.com} "POST //xmlrpc.php 200 show less	Brute-Force Web App Attack
Al Coholic	2021-08-23 15:13:26 (3 years ago)	Detected By Fail2ban	Hacking Bad Web Bot Web App Attack
UKFast Security	2021-07-28 21:44:37 (3 years ago)	WordPress XML RPC POST Brute Force Attack	Web App Attack