JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.70.92.141

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

175 reports

30 reporters · latest 15 hours ago

172.70.92.141 is on our whitelist as Cloudflare Reverse Proxy via the subnet 172.64.0.0/13.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

175 from 30 distinct reporters

First reported

December 23rd 2021

Most recent report

15 hours ago

Last 60 days

Top reporter locations 🇧🇪 Belgium 3 🇫🇮 Finland 2 🇯🇵 Japan 1

Most common categories Web App Attack 3 Brute-Force 2 Port Scan 1

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 madeit	2026-11-09 23:24:40 UTC · (15 hours ago)		Web App Attack
🇧🇪 madeit	2026-10-20 19:05:30 UTC · (2 weeks ago)		Web App Attack
🇧🇪 madeit	2026-10-13 17:55:07 UTC · (3 weeks ago)		Web App Attack
🇫🇮 abdubhai	2026-10-08 02:41:39 UTC · (1 month ago)	172.70.92.141 - - [08/Oct/2026:0 ...	Brute-Force
🇫🇮 abdubhai	2026-10-06 07:20:07 UTC · (1 month ago)	172.70.92.141 - - [06/Oct/2026:1 ...	Brute-Force
🇯🇵 S.O.B.A. Dev.	2026-09-20 10:51:57 UTC · (1 month ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇧🇪 madeit	2026-09-03 22:43:26 UTC · (2 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 02:38:27 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 22:38:23.428786 2026] [security2:error] [pid 16121:tid 16121] [client 172.70.92.141:13885] M ... show more (mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 22:38:23.428786 2026] [security2:error] [pid 16121:tid 16121] [client 172.70.92.141:13885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.swampoodlegrounds.com"] [uri "/.git/HEAD"] [unique_id "aoPFn3aQgf9FO7vmLg76EwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 01:58:18 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 21:58:10.768379 2026] [security2:error] [pid 13085:tid 13085] [client 172.70.92.141:11236] M ... show more (mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 21:58:10.768379 2026] [security2:error] [pid 13085:tid 13085] [client 172.70.92.141:11236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mldlnn.com"] [uri "/.git/HEAD"] [unique_id "aoO8MjJQ76xAzxKv0ZHwEgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 CBJ	2026-08-18 00:56:04 UTC · (2 months ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 09:14:04 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:13:59.233521 2026] [security2:error] [pid 7189:tid 7189] [client 172.70.92.141:11332] Mod ... show more (mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:13:59.233521 2026] [security2:error] [pid 7189:tid 7189] [client 172.70.92.141:11332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.simonharvey.com"] [uri "/.git/config"] [unique_id "aoLQ15LBBtTs0mqEh9ll3QAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 03:25:20 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 23:25:14.093124 2026] [security2:error] [pid 12212:tid 12212] [client 172.70.92.141:11044] M ... show more (mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 23:25:14.093124 2026] [security2:error] [pid 12212:tid 12212] [client 172.70.92.141:11044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bhsp.org"] [uri "/.git/HEAD"] [unique_id "aoJ_GtEddhAdUSRWTPYZtgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-08-16 23:03:37 UTC · (2 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 08:14:45 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 04:14:31.469996 2026] [security2:error] [pid 16072:tid 16072] [client 172.70.92.141:13321] M ... show more (mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 04:14:31.469996 2026] [security2:error] [pid 16072:tid 16072] [client 172.70.92.141:13321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.layoverinamsterdam.thinkingepic.com"] [uri "/.git/config"] [unique_id "aoFxZxfaJLrmirPrB4LfSAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 02:07:56 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 22:07:52.552647 2026] [security2:error] [pid 26201:tid 26201] [client 172.70.92.141:10339] M ... show more (mod_security) mod_security (id:210492) triggered by 172.70.92.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 22:07:52.552647 2026] [security2:error] [pid 26201:tid 26201] [client 172.70.92.141:10339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jbrodriguez.com"] [uri "/.git/config"] [unique_id "an_J-BXlxcIxVxchDLoSkgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 175 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 159.224.231.178

🇫🇮 147.185.133.67

🇳🇱 109.160.32.104

🇸🇬 85.203.23.32

🇺🇸 46.173.252.34

🇵🇰 210.2.130.106

🇺🇸 74.249.131.228

🇨🇳 59.44.107.110

🇺🇸 34.82.211.214

🇦🇱 31.171.153.182

🇯🇵 212.32.76.30

🇮🇳 182.70.254.196

🇮🇳 182.69.178.123

🇨🇳 125.120.2.104

🇮🇩 101.255.111.209

🇦🇷 45.173.193.140

🇨🇳 183.230.54.87

🇺🇸 172.104.19.160

🇰🇪 102.204.199.175

🇺🇸 57.141.20.70