AbuseIPDB » 172.64.213.16
172.64.213.16
This IP was reported 9 times. Confidence of
Abuse
is 0% : ?
ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇯🇵
Japan
City
Tokyo, Tokyo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
Important Note: 172.64.213.16 is an IP address from within
our whitelist belonging to the subnet
172.64.0.0/13 ,
which we identify as: "Cloudflare Reverse Proxy" .
Whitelisted netblocks are typically owned by trusted entities, such as Google
or Microsoft who may use them for search engine spiders. However, these same entities
sometimes also provide cloud servers and mail services which are easily abused. Pay special
attention when trusting or distrusting these IPs.
IP Abuse Reports for 172.64.213.16 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
172.64.213.16 was first reported on
December 8th 2025 , and the most recent report was
18 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇧
cg-design.co.uk
2026-08-31 10:48:56
(18 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 172.64.213.16 (JP/Japan/-)
SQL Injection
🇧🇪
madeit
2026-08-29 22:18:48
(2 days ago)
Web App Attack
🇧🇪
madeit
2026-08-08 21:31:18
(3 weeks ago)
Web App Attack
🇺🇸
ratcarcher-labs
2026-08-05 05:29:39
(3 weeks ago)
[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=75 attacks=3 depth=3 ...
show more
[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=75 attacks=3 depth=3 node=node-ap-south canary=no human_score=65 agentic=15 cc=JP asn=Cloudflare, Inc. | Data provided by Ratcarcher Labs · https://ratcarcher-labs.com · docs https://api.ratcarcher-labs.com/api/v1/public/docs
show less
Port Scan
Bad Web Bot
🇺🇸
mawan
2026-07-18 06:06:55
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
2026-06-30 19:57:16
(2 months ago)
172.64.213.16 - - [30/Jun/2026:21:57:10 +0200] "GET /mode.php HTTP/1.1" 404 124 "-" "-"
172.64.213.1 ...
show more
172.64.213.16 - - [30/Jun/2026:21:57:10 +0200] "GET /mode.php HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:21:57:11 +0200] "GET /dx.php HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:21:57:11 +0200] "GET //themes.php HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:21:57:12 +0200] "GET /dx.php HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:21:57:12 +0200] "GET /11.php HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:21:57:12 +0200] "GET /p.php HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:21:57:12 +0200] "GET //wp-includes/Requests/ HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:21:57:13 +0200] "GET /bthil.php HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:21:57:13 +0200] "GET /7.php HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:21:57:13 +0200] "GET /8.php HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:21:57:13 +0200] "GET /1.php HTTP/1.1" 404 124 "-" "-"
172.64.213.16 - - [30/Jun/2026:2
...
show less
Bad Web Bot
Web App Attack
2026-06-09 03:35:22
(2 months ago)
[Tue Jun 09 05:35:21.699086 2026] [authz_core:error] [pid 25679] [client 172.64.213.16:10055] AH0163 ...
show more
[Tue Jun 09 05:35:21.699086 2026] [authz_core:error] [pid 25679] [client 172.64.213.16:10055] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Jun 09 05:35:21.947305 2026] [authz_core:error] [pid 25679] [client 172.64.213.16:10055] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Jun 09 05:35:22.195406 2026] [authz_core:error] [pid 25679] [client 172.64.213.16:10055] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-06-05 10:55:35
(2 months ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇩🇪
Blexyel
2025-12-08 10:52:53
(8 months ago)
172.64.213.16 - - [08/Dec/2025:11:52:52 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 1 ...
show more
172.64.213.16 - - [08/Dec/2025:11:52:52 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 153 "-" "-" "_"
...
show less
Brute-Force
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: