JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.64.213.72

172.64.213.72 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 172.64.213.72 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.64.213.72

Whois 172.64.213.72

IP Abuse Reports for 172.64.213.72:

This IP address has been reported a total of 11 times from 6 distinct sources. 172.64.213.72 was first reported on December 1st 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-15 00:32:53 (2 days ago)	172.64.213.72 - - [15/Jun/2026:00:32:52 +0000] "GET /.env.prod HTTP/2.0" 404 4052 "-" "Mozilla/5.0 ( ... show more 172.64.213.72 - - [15/Jun/2026:00:32:52 +0000] "GET /.env.prod HTTP/2.0" 404 4052 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/76.0.3809.87 Chrome/76.0.3809.87 Safari/537.36" "34.146.55.253" 172.64.213.72 - - [15/Jun/2026:00:32:52 +0000] "GET /.env.backup.txt HTTP/2.0" 404 4055 "-" "Mozilla/5.0 (Linux; Android 9; SM-A530F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "34.146.55.253" 172.64.213.72 - - [15/Jun/2026:00:32:53 +0000] "GET /.env.template HTTP/2.0" 404 4053 "-" "Mozilla/5.0 (Linux; Android 8.1.0; LM-X210CMR) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "34.146.55.253" 172.64.213.72 - - [15/Jun/2026:00:32:53 +0000] "GET /.env.default HTTP/2.0" 404 4053 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36 OPR/31.0.1889.174" "34.146.55.253" 172.64.213.72 - - [15/Jun/2026:00:32:53 +0000] "GET /.env.d ... show less	Port Scan Brute-Force
🇯🇵 S.O.B.A. Dev.	2026-04-06 21:28:39 (2 months ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇩🇪 acadeova	2026-03-30 11:11:06 (2 months ago)	🚨 Recon detected (nft drop) SRC=172.64.213.72 Observed=TCP dpt=80 in=enp0s6 ttl=53 Time=recent(journ ... show more 🚨 Recon detected (nft drop) SRC=172.64.213.72 Observed=TCP dpt=80 in=enp0s6 ttl=53 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 mawan	2026-02-25 12:35:39 (3 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇫🇷 Campus France	2026-02-07 22:08:47 (4 months ago)	[Sat Feb 07 23:08:46.208768 2026] [php:error] [pid 1365509] [client 172.64.213.72:13882] script '/va ... show more [Sat Feb 07 23:08:46.208768 2026] [php:error] [pid 1365509] [client 172.64.213.72:13882] script '/var/www/html/function.php' not found or unable to stat [Sat Feb 07 23:08:46.464070 2026] [php:error] [pid 1365509] [client 172.64.213.72:13882] script '/var/www/html/sx.php' not found or unable to stat [Sat Feb 07 23:08:46.719424 2026] [php:error] [pid 1365509] [client 172.64.213.72:13882] script '/var/www/html/network.php' not found or unable to stat [Sat Feb 07 23:08:46.993066 2026] [php:error] [pid 1365509] [client 172.64.213.72:13882] script '/var/www/html/cloud.php' not found or unable to stat [Sat Feb 07 23:08:47.257862 2026] [php:error] [pid 1365509] [client 172.64.213.72:13882] script '/var/www/html/file7.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-01-01 04:16:34 (5 months ago)	[Thu Jan 01 05:16:33.044977 2026] [php:error] [pid 2713124] [client 172.64.213.72:11632] script '/va ... show more [Thu Jan 01 05:16:33.044977 2026] [php:error] [pid 2713124] [client 172.64.213.72:11632] script '/var/www/html/222.php' not found or unable to stat, referer: https://www.google.com/ [Thu Jan 01 05:16:33.302225 2026] [php:error] [pid 2713124] [client 172.64.213.72:11632] script '/var/www/html/aa.php' not found or unable to stat, referer: https://www.google.de/ [Thu Jan 01 05:16:33.558511 2026] [php:error] [pid 2713124] [client 172.64.213.72:11632] script '/var/www/html/bolt.php' not found or unable to stat, referer: https://www.google.co.uk/ [Thu Jan 01 05:16:33.814543 2026] [php:error] [pid 2713124] [client 172.64.213.72:11632] script '/var/www/html/file.php' not found or unable to stat, referer: https://www.google.com/ [Thu Jan 01 05:16:34.073181 2026] [php:error] [pid 2713124] [client 172.64.213.72:11632] script '/var/www/html/info.php' not found or unable to stat, referer: https://www.yahoo.com/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-22 10:53:24 (5 months ago)	[Mon Dec 22 11:53:23.334524 2025] [php:error] [pid 82914] [client 172.64.213.72:14027] script '/var/ ... show more [Mon Dec 22 11:53:23.334524 2025] [php:error] [pid 82914] [client 172.64.213.72:14027] script '/var/www/html/re.php' not found or unable to stat [Mon Dec 22 11:53:23.595743 2025] [php:error] [pid 82914] [client 172.64.213.72:14027] script '/var/www/html/bless.php' not found or unable to stat [Mon Dec 22 11:53:23.857970 2025] [php:error] [pid 82914] [client 172.64.213.72:14027] script '/var/www/html/blurbs.php' not found or unable to stat [Mon Dec 22 11:53:24.118952 2025] [php:error] [pid 82914] [client 172.64.213.72:14027] script '/var/www/html/cord.php' not found or unable to stat [Mon Dec 22 11:53:24.380057 2025] [php:error] [pid 82914] [client 172.64.213.72:14027] script '/var/www/html/axx.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-20 18:40:37 (5 months ago)	[Sat Dec 20 19:40:36.521743 2025] [php:error] [pid 3087062] [client 172.64.213.72:12391] script '/va ... show more [Sat Dec 20 19:40:36.521743 2025] [php:error] [pid 3087062] [client 172.64.213.72:12391] script '/var/www/html/wp-user.php' not found or unable to stat, referer: https://www.yahoo.com/ [Sat Dec 20 19:40:36.777149 2025] [php:error] [pid 3087062] [client 172.64.213.72:12391] script '/var/www/html/404.php' not found or unable to stat, referer: https://www.bing.com/ [Sat Dec 20 19:40:37.032526 2025] [php:error] [pid 3087062] [client 172.64.213.72:12391] script '/var/www/html/akcc.php' not found or unable to stat, referer: https://www.google.co.uk/ [Sat Dec 20 19:40:37.287976 2025] [php:error] [pid 3087062] [client 172.64.213.72:12391] script '/var/www/html/gg.php' not found or unable to stat, referer: https://www.google.de/ [Sat Dec 20 19:40:37.543223 2025] [php:error] [pid 3087062] [client 172.64.213.72:12391] script '/var/www/html/mah.php' not found or unable to stat, referer: https://www.yahoo.com/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-07 15:44:54 (6 months ago)	[Sun Dec 07 16:44:51.877256 2025] [php:error] [pid 2633261] [client 172.64.213.72:13672] script '/va ... show more [Sun Dec 07 16:44:51.877256 2025] [php:error] [pid 2633261] [client 172.64.213.72:13672] script '/var/www/html/alfa.php' not found or unable to stat, referer: https://www.google.fr/ [Sun Dec 07 16:44:52.140395 2025] [php:error] [pid 2633261] [client 172.64.213.72:13672] script '/var/www/html/api.php' not found or unable to stat, referer: https://www.google.com/ [Sun Dec 07 16:44:52.665805 2025] [php:error] [pid 2633261] [client 172.64.213.72:13672] script '/var/www/html/bless.php' not found or unable to stat, referer: https://www.yahoo.com/ [Sun Dec 07 16:44:53.191252 2025] [php:error] [pid 2633261] [client 172.64.213.72:13672] script '/var/www/html/classwithtostring.php' not found or unable to stat, referer: https://www.bing.com/ [Sun Dec 07 16:44:53.454350 2025] [php:error] [pid 2633261] [client 172.64.213.72:13672] script '/var/www/html/edit.php' not found or unable to stat, referer: https://www.yahoo.com/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-02 11:08:14 (6 months ago)	[Tue Dec 02 12:08:13.740340 2025] [php:error] [pid 2052150] [client 172.64.213.72:12902] script '/va ... show more [Tue Dec 02 12:08:13.740340 2025] [php:error] [pid 2052150] [client 172.64.213.72:12902] script '/var/www/html/edit.php' not found or unable to stat, referer: https://www.bing.com/ [Tue Dec 02 12:08:13.968911 2025] [php:error] [pid 2052150] [client 172.64.213.72:12902] script '/var/www/html/file.php' not found or unable to stat, referer: https://www.google.com/ [Tue Dec 02 12:08:14.197456 2025] [php:error] [pid 2052150] [client 172.64.213.72:12902] script '/var/www/html/gel4y.php' not found or unable to stat, referer: https://www.google.de/ [Tue Dec 02 12:08:14.425751 2025] [php:error] [pid 2052150] [client 172.64.213.72:12902] script '/var/www/html/info.php' not found or unable to stat, referer: https://www.bing.com/ [Tue Dec 02 12:08:14.655289 2025] [php:error] [pid 2052150] [client 172.64.213.72:12902] script '/var/www/html/ioxi-o.php' not found or unable to stat, referer: https://www.google.co.uk/ ... show less	Brute-Force Web App Attack
🇬🇧 no1knows.com	2025-12-01 21:04:32 (6 months ago)	2025/12/01 21:04:26 [error] 3932661#3932661: 128914 FastCGI sent in stderr: "Primary script unknown ... show more 2025/12/01 21:04:26 [error] 3932661#3932661: 128914 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.64.213.72, server: _, request: "GET /.well-known/acme-challenge/xa.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "edgerouter.no1knows.com", referrer: "https://www.google.fr/" 2025/12/01 21:04:27 [error] 3932661#3932661: 128914 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.64.213.72, server: _, request: "GET /.well-known/index.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "edgerouter.no1knows.com", referrer: "https://www.yahoo.com/" 2025/12/01 21:04:27 [error] 3932661#3932661: 128914 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.64.213.72, server: _, request: "GET /1.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "edgerouter.no1knows.c ... show less	Brute-Force Bad Web Bot

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.92.61.242

🇩🇴 190.167.237.191

🇻🇳 165.154.136.52

🇺🇸 162.216.149.132

🇨🇳 140.210.78.20

🇨🇳 114.141.150.101

🇺🇸 108.59.10.27

🇳🇱 91.92.40.7

🇫🇷 85.217.140.4

🇨🇳 60.209.128.58

🇳🇱 45.148.10.151

🇻🇳 27.77.138.70

🇨🇳 14.18.249.77

🇮🇳 13.233.253.7

🇨🇳 221.228.10.158

🇩🇪 194.187.176.88

🇺🇸 192.227.210.218

🇺🇸 192.155.84.194

🇧🇷 187.36.130.95

🇧🇷 152.67.46.203