JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.70.91.142

Neutral Activity Whitelisted Subnet

Abuse confidence score ?

0% Low Risk

89 reports

21 reporters · latest 1 month ago

172.70.91.142 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 172.70.91.142

This IP address has been reported a total of 89 times from 21 distinct sources. 172.70.91.142 was first reported on February 1st 2023, and the most recent report was 1 month ago. In the last 60 days, the top reporter locations were: Germany with 1 report; Netherlands with 1 report. The only category in these recent reports was: Port Scan 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 overture.bar	2026-08-19 17:40:20 (1 month ago)	Blocked by UFW on NsmallFE [2052/tcp] \| SPT: 11751 \| TTL: 53 \| LEN: 60 \| TOS: 0x00	Port Scan
🇩🇪 acadeova	2026-08-16 03:11:36 (1 month ago)	🚨 Recon detected (nft drop) SRC=172.70.91.142 Observed=TCP dpt=80 in=enp0s6 ttl=58 Time=recent(journ ... show more 🚨 Recon detected (nft drop) SRC=172.70.91.142 Observed=TCP dpt=80 in=enp0s6 ttl=58 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 WellSpring	2026-06-03 20:58:27 (3 months ago)	Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_admin. Path: /wp-admin/insta ... show more Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_admin. Path: /wp-admin/install.php. Auto-blocked after threshold exceeded. Dossier: https://wellspr.ing/dossier/sentinel-172-70-91-142 show less	Web App Attack
🇺🇸 octageeks.com	2026-05-27 04:07:17 (3 months ago)	Wordpress malicious attack:[octausername]	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-19 16:14:23 (4 months ago)	172.70.91.142 - - [19/May/2026:19:14:22 +0300] "GET /wfrontier/wp-content/plugins/ckeditor-for-wordp ... show more 172.70.91.142 - - [19/May/2026:19:14:22 +0300] "GET /wfrontier/wp-content/plugins/ckeditor-for-wordpress/filemanager/browser/default/browser.html HTTP/1.1" 404 3350 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 172.70.91.142 - - [19/May/2026:19:14:22 +0300] "GET /wp-content/uploads/ckeditor/filemanager/browser/default/browser.html HTTP/1.1" 404 789 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" ... show less	Web App Attack
🇬🇧 consul.to	2026-04-19 02:01:55 (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-04-06 02:15:11 (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-04-04 12:04:42 (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-04-01 06:38:38 (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-03-19 10:13:05 (6 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 domainemporium	2026-03-15 13:11:40 (6 months ago)	(mod_security) mod_security triggered on hostname [redacted] 172.70.91.142 (GB/United Kingdom/-): ( ... show more (mod_security) mod_security triggered on hostname [redacted] 172.70.91.142 (GB/United Kingdom/-): (CF_ENABLE) show less	SQL Injection
🇫🇷 Campus France	2026-01-04 12:44:04 (8 months ago)	[Sun Jan 04 13:11:06.170614 2026] [php:error] [pid 908146] [client 172.70.91.142:11304] script '/var ... show more [Sun Jan 04 13:11:06.170614 2026] [php:error] [pid 908146] [client 172.70.91.142:11304] script '/var/www/html/claa.php' not found or unable to stat [Sun Jan 04 13:11:06.986111 2026] [php:error] [pid 908146] [client 172.70.91.142:11304] script '/var/www/html/waq.php' not found or unable to stat [Sun Jan 04 13:11:07.241403 2026] [php:error] [pid 908146] [client 172.70.91.142:11304] script '/var/www/html/wakak.php' not found or unable to stat [Sun Jan 04 13:11:07.786542 2026] [php:error] [pid 908146] [client 172.70.91.142:11304] script '/var/www/html/wp-good.php' not found or unable to stat [Sun Jan 04 13:44:04.015220 2026] [php:error] [pid 924472] [client 172.70.91.142:11853] script '/var/www/html/wefile.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇬🇧 [email protected]	2025-12-24 01:27:05 (9 months ago)	community.the-sse.org:443 172.70.91.142 - - [24/Dec/2025:01:26:53 +0000] "GET /.git/objects/37/c20f6 ... show more community.the-sse.org:443 172.70.91.142 - - [24/Dec/2025:01:26:53 +0000] "GET /.git/objects/37/c20f626d6b09846c3c9113c166af0bfc2cc954 HTTP/1.1" 404 4330 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" community.the-sse.org:443 172.70.91.142 - - [24/Dec/2025:01:26:53 +0000] "GET /.git/objects/36/b06d7abc042bd2619f39553b25aa870718ef89 HTTP/1.1" 404 532 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" community.the-sse.org:443 172.70.91.142 - - [24/Dec/2025:01:26:53 +0000] "GET /.git/objects/a8/3f5a46d3216a6383164fca60b84ad912a18617 HTTP/1.1" 404 532 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2025-11-11 21:16:29 (10 months ago)	172.70.91.142 - - [11/Nov/2025:23:16:26 +0200] "GET /wp-includes/blocks/file/ HTTP/1.1" 404 280 "-" ... show more 172.70.91.142 - - [11/Nov/2025:23:16:26 +0200] "GET /wp-includes/blocks/file/ HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.91.142 - - [11/Nov/2025:23:16:27 +0200] "GET /wp-includes/images/ HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" ... show less	Web App Attack
Anonymous	2025-08-23 22:24:53 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.177

🇮🇳 162.4.81.4

🇰🇷 121.188.228.118

🇸🇬 47.84.138.72

🇺🇸 45.79.115.134

🇷🇺 31.148.139.51

🇸🇬 8.219.8.65

🇷🇺 195.239.40.213

🇳🇱 195.178.110.30

🇳🇱 185.242.226.70

🇨🇳 121.61.49.39

🇺🇸 63.42.190.239

🇩🇪 47.254.154.160

🇸🇬 43.156.33.17

🇺🇸 40.119.45.136

🇳🇱 213.177.179.109

🇭🇰 199.45.154.117

🇮🇳 183.82.33.207

🇫🇷 172.69.223.55

🇳🇱 138.226.239.233