This IP address has been reported a total of
25
times from
9 distinct
sources.
172.64.213.180 was first reported on
November 30th 2025 , and the most recent report was
2 hours ago Germany
with 4
reports;
France
with 3
reports;
Belgium
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
9
times;
Port Scan
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
dynamix
2026-10-21 18:05:59
(2 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-18 03:13:29
(3 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-13 19:56:27
(1 week ago)
Multiple WAF Violations
Web App Attack
2026-10-05 13:26:01
(2 weeks ago)
[Mon Oct 05 15:26:00.011065 2026] [authz_core:error] [pid 29385] [client 172.64.213.180:9934] AH0163 ...
show more
[Mon Oct 05 15:26:00.011065 2026] [authz_core:error] [pid 29385] [client 172.64.213.180:9934] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Oct 05 15:26:00.260130 2026] [authz_core:error] [pid 29385] [client 172.64.213.180:9934] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Oct 05 15:26:00.506880 2026] [authz_core:error] [pid 29385] [client 172.64.213.180:9934] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
🇧🇪
madeit
2026-09-29 23:07:31
(3 weeks ago)
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-09-18 07:28:19
(1 month ago)
Persistent port scanning or vulnerability scanning
Port Scan
2026-09-17 17:54:49
(1 month ago)
[Thu Sep 17 19:54:46.588222 2026] [authz_core:error] [pid 19382] [client 172.64.213.180:11353] AH016 ...
show more
[Thu Sep 17 19:54:46.588222 2026] [authz_core:error] [pid 19382] [client 172.64.213.180:11353] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Sep 17 19:54:47.869346 2026] [authz_core:error] [pid 19382] [client 172.64.213.180:11353] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Sep 17 19:54:48.446531 2026] [authz_core:error] [pid 19382] [client 172.64.213.180:11353] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
2026-09-15 20:56:21
(1 month ago)
[Tue Sep 15 22:56:18.990153 2026] [authz_core:error] [pid 7517] [client 172.64.213.180:12146] AH0163 ...
show more
[Tue Sep 15 22:56:18.990153 2026] [authz_core:error] [pid 7517] [client 172.64.213.180:12146] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 15 22:56:20.248385 2026] [authz_core:error] [pid 7517] [client 172.64.213.180:12146] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 15 22:56:21.026551 2026] [authz_core:error] [pid 7517] [client 172.64.213.180:12146] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
🇧🇪
madeit
2026-09-11 15:04:20
(1 month ago)
Web App Attack
2026-09-07 07:50:02
(1 month ago)
[Mon Sep 07 09:49:59.615121 2026] [authz_core:error] [pid 9042] [client 172.64.213.180:12066] AH0163 ...
show more
[Mon Sep 07 09:49:59.615121 2026] [authz_core:error] [pid 9042] [client 172.64.213.180:12066] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Sep 07 09:49:59.933533 2026] [authz_core:error] [pid 9042] [client 172.64.213.180:12066] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Sep 07 09:50:01.329320 2026] [authz_core:error] [pid 9042] [client 172.64.213.180:12066] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
2026-09-02 00:24:48
(1 month ago)
(caddyscan) Scanner path probe from 172.64.213.180 (JP/Japan/-): 5 in the last 3600 secs; Ports: *; ...
show more
(caddyscan) Scanner path probe from 172.64.213.180 (JP/Japan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.64.213.180 - - [02/Sep/2026:00:24:43 +0000] "GET /redis/.env HTTP/1.1"
[REDACTED] 200 2627 172.64.213.180 - - [02/Sep/2026:00:24:43 +0000] "GET /elasticsearch/.env HTTP/1.1"
[REDACTED] 200 2627 172.64.213.180 - - [02/Sep/2026:00:24:43 +0000] "GET /rabbitmq/.env HTTP/1.1"
[REDACTED] 200 2627 172.64.213.180 - - [02/Sep/2026:00:24:43 +0000] "GET /kafka/.env HTTP/1.1"
[REDACTED] 200 2627 172.64.213.180 - - [02/Sep/2026:00:24:44 +0000] "GET /queue/.env HTTP/1.1"
show less
Port Scan
🇯🇵
S.O.B.A. Dev.
2026-08-08 17:34:24
(2 months ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇯🇵
S.O.B.A. Dev.
2026-08-06 17:02:24
(2 months ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇺🇸
mnsf
2026-06-21 02:05:08
(4 months ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-09 12:54:32
(4 months ago)
Multiple WAF Violations
Web App Attack
Showing 1 to
15
of 25 reports
