JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.69.222.228

172.69.222.228 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 172.69.222.228 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.69.222.228

Whois 172.69.222.228

IP Abuse Reports for 172.69.222.228:

This IP address has been reported a total of 70 times from 23 distinct sources. 172.69.222.228 was first reported on December 4th 2023, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-24 15:36:44 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.69.222.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.222.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 11:36:39.086789 2026] [security2:error] [pid 4112656:tid 4112767] [client 172.69.222.228:11652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kappyart.com.howiek.com"] [uri "/.git/HEAD"] [unique_id "aoxlB7pbcnNyy8Byb3SkaAAAAUo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 10:52:13 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.69.222.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.222.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 06:52:07.935020 2026] [security2:error] [pid 1052:tid 1052] [client 172.69.222.228:10983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.turnedthepagemusic.com"] [uri "/.git/config"] [unique_id "aowiV7eqKZtfhR0PwNgF1QAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 08:10:35 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.69.222.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.222.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 04:10:28.649780 2026] [security2:error] [pid 3537:tid 3537] [client 172.69.222.228:11218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.oweng.com"] [uri "/.git/config"] [unique_id "aov8dKDDVgy-Rv5tVQ9oWAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 07:59:25 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 172.69.222.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.222.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 03:59:20.037664 2026] [security2:error] [pid 26720:tid 26720] [client 172.69.222.228:11931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "janner.janner.us"] [uri "/.git/config"] [unique_id "aoFt2C-MWMXRaYYGizK2AgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-14 22:50:02 (1 week ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Web App Attack Hacking SQL Injection
🇧🇬 Stoyko Stoykov	2026-08-04 04:51:08 (2 weeks ago)	172.69.222.228 - - [04/Aug/2026:07:51:07 +0300] "GET /portal/.env HTTP/2.0" 404 0 "-" "Mozilla/5.0 ( ... show more 172.69.222.228 - - [04/Aug/2026:07:51:07 +0300] "GET /portal/.env HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" ... show less	Hacking Web App Attack
🇧🇬 Stoyko Stoykov	2026-07-31 11:55:51 (3 weeks ago)	172.69.222.228 - - [31/Jul/2026:14:55:51 +0300] "GET /app/phpinfo%2ephp HTTP/2.0" 404 0 "-" "curl/8. ... show more 172.69.222.228 - - [31/Jul/2026:14:55:51 +0300] "GET /app/phpinfo%2ephp HTTP/2.0" 404 0 "-" "curl/8.7.1" ... show less	Hacking Web App Attack
🇺🇸 mawan	2026-07-22 01:42:12 (1 month ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇩🇪 Séfora Srl	2026-04-23 22:02:18 (4 months ago)	Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ... show more Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail show less	Bad Web Bot
🇫🇷 Campus France	2026-04-09 00:34:40 (4 months ago)	[Thu Apr 09 02:34:27.818603 2026] [php:error] [pid 1661995] [client 172.69.222.228:11755] script '/v ... show more [Thu Apr 09 02:34:27.818603 2026] [php:error] [pid 1661995] [client 172.69.222.228:11755] script '/var/www/html/setup.php' not found or unable to stat [Thu Apr 09 02:34:28.392232 2026] [php:error] [pid 1661995] [client 172.69.222.228:11755] script '/var/www/html/ab.php' not found or unable to stat [Thu Apr 09 02:34:35.346639 2026] [php:error] [pid 1662763] [client 172.69.222.228:14229] script '/var/www/html/customize.php' not found or unable to stat [Thu Apr 09 02:34:35.525125 2026] [php:error] [pid 1662763] [client 172.69.222.228:14229] script '/var/www/html/lock.php' not found or unable to stat [Thu Apr 09 02:34:39.839178 2026] [php:error] [pid 1662763] [client 172.69.222.228:14229] script '/var/www/html/repeater.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-04-02 21:49:25 (4 months ago)	[Thu Apr 02 05:16:01.657447 2026] [php:error] [pid 443810] [client 172.69.222.228:11071] script '/va ... show more [Thu Apr 02 05:16:01.657447 2026] [php:error] [pid 443810] [client 172.69.222.228:11071] script '/var/www/html/less.php' not found or unable to stat [Thu Apr 02 23:49:24.565160 2026] [php:error] [pid 1068261] [client 172.69.222.228:13106] script '/var/www/html/wpn.php' not found or unable to stat [Thu Apr 02 23:49:24.670867 2026] [php:error] [pid 1068261] [client 172.69.222.228:13106] script '/var/www/html/lock.php' not found or unable to stat [Thu Apr 02 23:49:24.979085 2026] [php:error] [pid 1068261] [client 172.69.222.228:13106] script '/var/www/html/system_log.php' not found or unable to stat [Thu Apr 02 23:49:25.034357 2026] [php:error] [pid 1068261] [client 172.69.222.228:13106] script '/var/www/html/.alf.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-02-06 21:34:45 (6 months ago)	[Thu Feb 05 21:05:06.519287 2026] [php:error] [pid 3920962] [client 172.69.222.228:11589] script '/v ... show more [Thu Feb 05 21:05:06.519287 2026] [php:error] [pid 3920962] [client 172.69.222.228:11589] script '/var/www/html/keys.php' not found or unable to stat [Fri Feb 06 08:30:08.877869 2026] [php:error] [pid 119764] [client 172.69.222.228:11134] script '/var/www/html/function.php' not found or unable to stat [Fri Feb 06 08:30:11.220629 2026] [php:error] [pid 119764] [client 172.69.222.228:11134] script '/var/www/html/wp-l0gin.php' not found or unable to stat [Fri Feb 06 08:30:33.142333 2026] [php:error] [pid 119764] [client 172.69.222.228:14306] script '/var/www/html/adminfuns.php' not found or unable to stat [Fri Feb 06 22:34:44.875414 2026] [php:error] [pid 564933] [client 172.69.222.228:11770] script '/var/www/html/wp-l0gin.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇬🇧 cg-design.co.uk	2026-01-26 15:44:58 (6 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 172.69.222.228 (FR/F ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 172.69.222.228 (FR/France/-) show less	Bad Web Bot
🇫🇷 Campus France	2026-01-12 21:16:20 (7 months ago)	[Mon Jan 12 22:16:19.214738 2026] [php:error] [pid 2648270] [client 172.69.222.228:12389] script '/v ... show more [Mon Jan 12 22:16:19.214738 2026] [php:error] [pid 2648270] [client 172.69.222.228:12389] script '/var/www/html/classwithtostring.php' not found or unable to stat, referer: https://www.google.co.uk/ [Mon Jan 12 22:16:19.698953 2026] [php:error] [pid 2648270] [client 172.69.222.228:12389] script '/var/www/html/file.php' not found or unable to stat, referer: https://www.yahoo.com/ [Mon Jan 12 22:16:19.698953 2026] [php:error] [pid 2648270] [client 172.69.222.228:12389] script '/var/www/html/file.php' not found or unable to stat, referer: https://www.yahoo.com/ [Mon Jan 12 22:16:19.933248 2026] [php:error] [pid 2648270] [client 172.69.222.228:12389] script '/var/www/html/goods.php' not found or unable to stat, referer: https://www.google.de/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-01-12 12:50:10 (7 months ago)	[Mon Jan 12 11:46:31.409481 2026] [php:error] [pid 2352078] [client 172.69.222.228:9960] script '/va ... show more [Mon Jan 12 11:46:31.409481 2026] [php:error] [pid 2352078] [client 172.69.222.228:9960] script '/var/www/html/edit.php' not found or unable to stat, referer: https://www.google.de/ [Mon Jan 12 11:46:31.836186 2026] [php:error] [pid 2352078] [client 172.69.222.228:9960] script '/var/www/html/alfa.php' not found or unable to stat, referer: https://www.google.de/ [Mon Jan 12 11:46:32.053139 2026] [php:error] [pid 2352078] [client 172.69.222.228:9960] script '/var/www/html/install.php' not found or unable to stat, referer: https://www.bing.com/ [Mon Jan 12 11:46:32.269296 2026] [php:error] [pid 2352078] [client 172.69.222.228:9960] script '/var/www/html/abcd.php' not found or unable to stat, referer: https://www.google.de/ [Mon Jan 12 13:50:09.662666 2026] [php:error] [pid 2411163] [client 172.69.222.228:14046] script '/var/www/html/file2.php' not found or unable to stat, referer: https://www.bing.com/ ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.98.32.226

🇮🇩 103.162.54.18

🇩🇪 51.89.69.103

🇩🇪 195.182.16.23

🇳🇱 195.178.110.137

🇳🇱 167.71.72.95

🇮🇩 128.14.232.142

🇫🇷 91.231.89.133

🇩🇪 89.163.221.163

🇷🇴 80.94.95.146

🇩🇪 69.5.169.191

🇯🇵 61.215.151.161

🇨🇳 27.128.170.83

🇵🇰 203.128.29.53

🇳🇱 185.136.15.10

🇵🇱 109.95.144.151

🇷🇴 92.118.39.77

🇳🇱 91.92.40.153

🇺🇸 2607:f8b0:400e:c17::12a

🇹🇼 198.235.24.126