JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.70.208.22

172.70.208.22 was found in our database!

This IP was reported 144 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 172.70.208.22 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.70.208.22

Whois 172.70.208.22

IP Abuse Reports for 172.70.208.22:

This IP address has been reported a total of 144 times from 20 distinct sources. 172.70.208.22 was first reported on December 11th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-16 07:13:56 (1 day ago)	[Tue Jun 16 09:13:50.799937 2026] [authz_core:error] [pid 23404] [client 172.70.208.22:10154] AH0163 ... show more [Tue Jun 16 09:13:50.799937 2026] [authz_core:error] [pid 23404] [client 172.70.208.22:10154] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Jun 16 09:13:52.067617 2026] [authz_core:error] [pid 23473] [client 172.70.208.22:10160] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Jun 16 09:13:53.291548 2026] [authz_core:error] [pid 23526] [client 172.70.208.22:10168] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-06-14 14:19:12 (2 days ago)	[Sun Jun 14 16:19:11.417449 2026] [authz_core:error] [pid 8105] [client 172.70.208.22:10752] AH01630 ... show more [Sun Jun 14 16:19:11.417449 2026] [authz_core:error] [pid 8105] [client 172.70.208.22:10752] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jun 14 16:19:11.632328 2026] [authz_core:error] [pid 8105] [client 172.70.208.22:10752] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jun 14 16:19:11.845903 2026] [authz_core:error] [pid 8105] [client 172.70.208.22:10752] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 10:15:59 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 172.70.208.22 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.70.208.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 06:15:46.327202 2026] [security2:error] [pid 21578:tid 21578] [client 172.70.208.22:11020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegameforeverybody.com"] [uri "/.env.local"] [unique_id "ai5_UmkL-CoK1qcYLSTdDgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-11 23:54:06 (5 days ago)	[Fri Jun 12 01:54:04.360801 2026] [authz_core:error] [pid 2861] [client 172.70.208.22:11508] AH01630 ... show more [Fri Jun 12 01:54:04.360801 2026] [authz_core:error] [pid 2861] [client 172.70.208.22:11508] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Jun 12 01:54:05.306414 2026] [authz_core:error] [pid 2861] [client 172.70.208.22:11508] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Jun 12 01:54:05.682487 2026] [authz_core:error] [pid 2861] [client 172.70.208.22:11508] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-05-15 10:02:14 (1 month ago)	Persistent port scanning or vulnerability scanning	Port Scan
Anonymous	2026-05-09 23:43:17 (1 month ago)	[Sun May 10 01:43:03.430034 2026] [authz_core:error] [pid 24551] [client 172.70.208.22:10919] AH0163 ... show more [Sun May 10 01:43:03.430034 2026] [authz_core:error] [pid 24551] [client 172.70.208.22:10919] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun May 10 01:43:16.366827 2026] [authz_core:error] [pid 24612] [client 172.70.208.22:13745] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun May 10 01:43:16.559809 2026] [authz_core:error] [pid 24612] [client 172.70.208.22:13745] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇩🇪 acadeova	2026-05-08 07:47:44 (1 month ago)	🚨 Recon detected (nft drop) SRC=172.70.208.22 Observed=TCP dpt=80 in=enp0s6 ttl=53 Time=recent(journ ... show more 🚨 Recon detected (nft drop) SRC=172.70.208.22 Observed=TCP dpt=80 in=enp0s6 ttl=53 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇳🇱 homeshowdomain.nl	2026-05-07 22:00:57 (1 month ago)	Auto-ban: >3000 req/min op 2026-05-07	Web App Attack SSH Hacking
🇩🇪 Blexyel	2026-05-07 18:40:01 (1 month ago)	172.70.208.22 - - [07/May/2026:20:39:38 +0200] "GET /.git/config HTTP/1.1" 200 2116 "-" "Mozilla/5.0 ... show more 172.70.208.22 - - [07/May/2026:20:39:38 +0200] "GET /.git/config HTTP/1.1" 200 2116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 18:00:11 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.70.208.22 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.70.208.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:59:47.237255 2026] [security2:error] [pid 3437:tid 3437] [client 172.70.208.22:11949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.boat-registration-italy.com"] [uri "/.env"] [unique_id "afzTE5kC0FORLbhwdYOAXgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 17:38:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.70.208.22 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.70.208.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:38:29.891706 2026] [security2:error] [pid 11739:tid 11739] [client 172.70.208.22:11406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.laband.info"] [uri "/.git/config"] [unique_id "afzOFelV_1GLS5w-55cTjwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 17:11:44 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.70.208.22 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.70.208.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:11:22.275604 2026] [security2:error] [pid 30151:tid 30158] [client 172.70.208.22:12719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.strengthsmatter.com"] [uri "/.git/config"] [unique_id "afzHug3QHy-zcVct6s8r1gAAAQM"], referer: https://www.google.com/search?q=www.strengthsmatter.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 22:47:19 (1 month ago)	[Mon Apr 27 00:47:10.650261 2026] [authz_core:error] [pid 3010] [client 172.70.208.22:13914] AH01630 ... show more [Mon Apr 27 00:47:10.650261 2026] [authz_core:error] [pid 3010] [client 172.70.208.22:13914] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Apr 27 00:47:18.266325 2026] [authz_core:error] [pid 2317] [client 172.70.208.22:12590] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Apr 27 00:47:18.441715 2026] [authz_core:error] [pid 2317] [client 172.70.208.22:12590] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-04-24 18:53:01 (1 month ago)	[Fri Apr 24 20:52:59.992221 2026] [authz_core:error] [pid 15193] [client 172.70.208.22:14003] AH0163 ... show more [Fri Apr 24 20:52:59.992221 2026] [authz_core:error] [pid 15193] [client 172.70.208.22:14003] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Apr 24 20:53:00.443297 2026] [authz_core:error] [pid 15193] [client 172.70.208.22:14003] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Apr 24 20:53:00.881763 2026] [authz_core:error] [pid 15193] [client 172.70.208.22:14003] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇩🇪 iNetWorker	2026-01-23 09:12:33 (4 months ago)	firewall-block, port(s): 443/tcp	Port Scan

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.96

🇺🇦 185.139.52.126

🇸🇬 161.118.240.3

🇮🇩 103.174.19.83

🇳🇱 91.92.40.13

🇪🇪 80.79.125.77

🇧🇬 79.124.40.126

🇷🇺 5.104.32.176

🇰🇪 197.155.68.86

🇩🇪 194.88.98.109

🇷🇺 178.209.88.16

🇸🇬 172.188.89.41

🇸🇪 130.49.113.198

🇭🇰 118.193.44.112

🇳🇱 45.148.10.151

🇺🇸 45.140.206.24

🇵🇰 39.60.92.102

🇺🇸 216.25.89.107

🇳🇱 176.65.139.235

🇳🇱 176.65.139.234