JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.70.91.214

Neutral Activity Whitelisted Subnet

Abuse confidence score ?

0% Low Risk

100 reports

28 reporters · latest 5 days ago

172.70.91.214 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 172.70.91.214

Export CSV

This IP address has been reported a total of 100 times from 28 distinct sources. 172.70.91.214 was first reported on February 27th 2023, and the most recent report was 5 days ago. In the last 60 days, the top reporter locations were: United States of America with 3 reports; Germany with 1 report; France with 1 report. The most common categories in these recent reports were: Web App Attack 5 times; Bad Web Bot 3 times; Brute-Force 3 times; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-10-15 14:49:10 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 09:55:55 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 172.70.91.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.70.91.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:55:32.354417 2026] [security2:error] [pid 3545:tid 3545] [client 172.70.91.214:12205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackballprojects.com"] [uri "/.env.dev"] [unique_id "atCjFBiETrRN42X65Vn2TAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 06:43:57 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 172.70.91.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.70.91.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 02:43:49.519159 2026] [security2:error] [pid 15534:tid 15534] [client 172.70.91.214:10153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.justinrudd.com"] [uri "/.env.local"] [unique_id "atB2JbiiGKuTCWYFdlW2WAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-06 14:25:28 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.70.91.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.70.91.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 10:25:23.093333 2026] [security2:error] [pid 13535:tid 13535] [client 172.70.91.214:11456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mylert.sguard.co"] [uri "/.git/config"] [unique_id "asUE0-LRnQWPrRMIEPON_QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-10-06 13:12:07 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇩🇪 www.mammazone.it	2026-09-21 09:07:55 (1 month ago)	[Mon Sep 21 11:07:54.790010 2026] [proxy_fcgi:error] [pid 20541] [client 172.70.91.214:13498] AH0107 ... show more [Mon Sep 21 11:07:54.790010 2026] [proxy_fcgi:error] [pid 20541] [client 172.70.91.214:13498] AH01071: Got error 'Primary script unknown' [Mon Sep 21 11:07:54.886244 2026] [proxy_fcgi:error] [pid 20541] [client 172.70.91.214:13498] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇩🇪 www.mammazone.it	2026-08-17 19:13:13 (2 months ago)	[Mon Aug 17 21:13:12.505415 2026] [proxy_fcgi:error] [pid 3847710] [client 172.70.91.214:9853] AH010 ... show more [Mon Aug 17 21:13:12.505415 2026] [proxy_fcgi:error] [pid 3847710] [client 172.70.91.214:9853] AH01071: Got error 'Primary script unknown' [Mon Aug 17 21:13:12.779815 2026] [proxy_fcgi:error] [pid 3847710] [client 172.70.91.214:9853] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇩🇪 www.mammazone.it	2026-08-02 10:24:11 (2 months ago)	[Sun Aug 02 12:24:10.111630 2026] [proxy_fcgi:error] [pid 4431] [client 172.70.91.214:12165] AH01071 ... show more [Sun Aug 02 12:24:10.111630 2026] [proxy_fcgi:error] [pid 4431] [client 172.70.91.214:12165] AH01071: Got error 'Primary script unknown' [Sun Aug 02 12:24:10.652478 2026] [proxy_fcgi:error] [pid 4431] [client 172.70.91.214:12165] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇩🇪 www.mammazone.it	2026-07-26 04:39:19 (2 months ago)	[Sun Jul 26 06:39:18.034075 2026] [proxy_fcgi:error] [pid 2396634] [client 172.70.91.214:9741] AH010 ... show more [Sun Jul 26 06:39:18.034075 2026] [proxy_fcgi:error] [pid 2396634] [client 172.70.91.214:9741] AH01071: Got error 'Primary script unknown' [Sun Jul 26 06:39:18.222872 2026] [proxy_fcgi:error] [pid 2396634] [client 172.70.91.214:9741] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇩🇪 www.mammazone.it	2026-07-25 13:17:59 (2 months ago)	[Sat Jul 25 15:17:58.341345 2026] [proxy_fcgi:error] [pid 2156237] [client 172.70.91.214:9887] AH010 ... show more [Sat Jul 25 15:17:58.341345 2026] [proxy_fcgi:error] [pid 2156237] [client 172.70.91.214:9887] AH01071: Got error 'Primary script unknown' [Sat Jul 25 15:17:58.518725 2026] [proxy_fcgi:error] [pid 2156237] [client 172.70.91.214:9887] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇺🇸 canine.tools	2026-07-12 10:01:23 (3 months ago)	[fail2ban Auto Report] {"time":"2026-07-12T06:01:23.573699442-04:00","level":"INFO","source":{"funct ... show more [fail2ban Auto Report] {"time":"2026-07-12T06:01:23.573699442-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"searxng.canine.tools","method":"GET","path":"//search","user_agent":"","accept_language":"","priority":"","x-forwarded-for":"172.70.91.214","x-real-ip":"172.70.91.214","host":"searxng.canine.tools","check_result":{"name":"bot/no-user-agent-string","rule":"DENY","weight":15}} ... show less	Bad Web Bot
🇬🇧 consul.to	2026-06-25 07:52:11 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 www.mammazone.it	2026-06-23 06:10:03 (3 months ago)	[Tue Jun 23 08:10:02.709080 2026] [proxy_fcgi:error] [pid 2636124] [client 172.70.91.214:10522] AH01 ... show more [Tue Jun 23 08:10:02.709080 2026] [proxy_fcgi:error] [pid 2636124] [client 172.70.91.214:10522] AH01071: Got error 'Primary script unknown' [Tue Jun 23 08:10:03.570411 2026] [proxy_fcgi:error] [pid 2636124] [client 172.70.91.214:10522] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇩🇪 www.mammazone.it	2026-06-19 22:06:30 (4 months ago)	[Sat Jun 20 00:06:29.689588 2026] [proxy_fcgi:error] [pid 1784013] [client 172.70.91.214:12609] AH01 ... show more [Sat Jun 20 00:06:29.689588 2026] [proxy_fcgi:error] [pid 1784013] [client 172.70.91.214:12609] AH01071: Got error 'Primary script unknown' [Sat Jun 20 00:06:30.021357 2026] [proxy_fcgi:error] [pid 1784013] [client 172.70.91.214:12609] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇺🇸 mawan	2026-06-17 08:12:08 (4 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.158.51.190

🇳🇱 91.92.42.200

🇺🇸 65.49.1.183

🇳🇱 34.90.199.112

🇺🇸 20.169.82.238

🇫🇷 2a02:842a:ae80:7b01:b1e5:532f:b97f:62aa

🇺🇸 174.182.26.31

🇻🇳 117.2.17.109

🇧🇩 103.154.158.60

🇳🇱 34.147.28.155

🇦🇷 201.177.75.133

🇧🇪 198.235.24.153

🇧🇷 190.115.84.25

🇧🇴 181.188.172.6

🇫🇮 130.49.9.247

🇮🇳 103.248.120.6

🇭🇰 103.45.64.231

🇨🇳 101.71.134.165

🇮🇹 88.42.161.66

🇷🇺 82.112.43.35