JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.70.216.89

172.70.216.89 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 172.70.216.89 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.70.216.89

Whois 172.70.216.89

IP Abuse Reports for 172.70.216.89:

This IP address has been reported a total of 61 times from 15 distinct sources. 172.70.216.89 was first reported on November 26th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-06-29 10:10:49 (1 week ago)	Multiple unauthorized connection attempts	Web App Attack
Anonymous	2026-04-01 11:29:36 (3 months ago)	[Wed Apr 01 13:29:25.233178 2026] [authz_core:error] [pid 20635] [client 172.70.216.89:9751] AH01630 ... show more [Wed Apr 01 13:29:25.233178 2026] [authz_core:error] [pid 20635] [client 172.70.216.89:9751] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Apr 01 13:29:33.708358 2026] [authz_core:error] [pid 20202] [client 172.70.216.89:11229] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Apr 01 13:29:35.850851 2026] [authz_core:error] [pid 20202] [client 172.70.216.89:11229] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇫🇷 masterguru	2026-03-22 09:26:35 (3 months ago)	Blocked Cloudflare Worker request. Pattern match "." at REQUEST_HEADERS:Cf-Worker. (5025-193)	Hacking
🇪🇸 el-brujo	2026-02-28 11:12:58 (4 months ago)	28/Feb/2026:12:12:57.749039 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 28/Feb/2026:12:12:57.749039 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 172.70.216.89] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's)&no' [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s)&no found within REQUEST_HEADERS:Referer: https://www.google.com/') AND AND\\\\x0f10093=CONVERT(INT,(SELECT\\\\x0d'~' (SELECT\\\\x06(CASE\\\\x0aWHEN\\\\x06(10093=10093)\\\\x0aTHEN\\\\x0a'1'\\\\x0bELSE\\\\x06'0'\\\\x08END)) '~'))-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "uptime.elhacker.net"] [uri "/"] [unique_id "aaLNuUUTTiejNWNgp2Q3JgAFeQE"] ... show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-02-18 04:58:48 (4 months ago)	172.70.216.89 - - [18/Feb/2026:06:58:46 +0200] "GET /cgi-bin/lsd.php HTTP/1.1" 404 190 "-" "-" 172.7 ... show more 172.70.216.89 - - [18/Feb/2026:06:58:46 +0200] "GET /cgi-bin/lsd.php HTTP/1.1" 404 190 "-" "-" 172.70.216.89 - - [18/Feb/2026:06:58:46 +0200] "GET /wp-content/uploads/atomlib.php HTTP/1.1" 404 196 "-" "-" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-02-01 18:27:04 (5 months ago)	172.70.216.89 - - [01/Feb/2026:20:26:58 +0200] "GET /wp-content/plugins/akismet/ HTTP/1.1" 404 2868 ... show more 172.70.216.89 - - [01/Feb/2026:20:26:58 +0200] "GET /wp-content/plugins/akismet/ HTTP/1.1" 404 2868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.216.89 - - [01/Feb/2026:20:27:02 +0200] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 404 302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-01-03 18:21:08 (6 months ago)	172.70.216.89 - - [03/Jan/2026:20:21:06 +0200] "POST /wp-admin/admin-ajax.php?action=uploadFontIcon ... show more 172.70.216.89 - - [03/Jan/2026:20:21:06 +0200] "POST /wp-admin/admin-ajax.php?action=uploadFontIcon HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-01-02 19:44:40 (6 months ago)	172.70.216.89 - - [02/Jan/2026:21:44:35 +0200] "GET /xmlrpc.php HTTP/1.1" 404 196 "-" "-" 172.70.216 ... show more 172.70.216.89 - - [02/Jan/2026:21:44:35 +0200] "GET /xmlrpc.php HTTP/1.1" 404 196 "-" "-" 172.70.216.89 - - [02/Jan/2026:21:44:39 +0200] "GET /wp-content/wp-conflg.php HTTP/1.1" 404 196 "-" "-" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2025-12-26 19:50:30 (6 months ago)	172.70.216.89 - - [26/Dec/2025:21:50:11 +0200] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 404 280 ... show more 172.70.216.89 - - [26/Dec/2025:21:50:11 +0200] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 404 280 "-" "Go-http-client/1.1" 172.70.216.89 - - [26/Dec/2025:21:50:29 +0200] "GET /wp-content/plugins/ HTTP/1.1" 404 280 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2025-12-24 03:31:58 (6 months ago)	172.70.216.89 - - [24/Dec/2025:05:31:48 +0200] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 404 1 ... show more 172.70.216.89 - - [24/Dec/2025:05:31:48 +0200] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 404 196 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.216.89 - - [24/Dec/2025:05:31:57 +0200] "GET /wp-includes/js/crop/ HTTP/1.1" 404 196 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" ... show less	Web App Attack
Anonymous	2025-12-22 11:52:51 (6 months ago)	[Mon Dec 22 12:51:43.841052 2025] [authz_core:error] [pid 4762] [client 172.70.216.89:11255] AH01630 ... show more [Mon Dec 22 12:51:43.841052 2025] [authz_core:error] [pid 4762] [client 172.70.216.89:11255] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.yahoo.com/ [Mon Dec 22 12:52:24.707591 2025] [authz_core:error] [pid 4762] [client 172.70.216.89:9921] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.de/ [Mon Dec 22 12:52:51.329092 2025] [authz_core:error] [pid 7547] [client 172.70.216.89:11525] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.yahoo.com/ ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2025-11-23 06:02:58 (7 months ago)	172.70.216.89 - - [23/Nov/2025:08:02:55 +0200] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 404 196 ... show more 172.70.216.89 - - [23/Nov/2025:08:02:55 +0200] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 404 196 "-" "-" 172.70.216.89 - - [23/Nov/2025:08:02:57 +0200] "GET /wp-admin/js/themes.php HTTP/1.1" 404 196 "-" "-" ... show less	Web App Attack
🇫🇮 Shaik Sai Meera	2025-11-06 16:05:18 (8 months ago)	IM360 WAF: Hidden file access	Brute-Force
Anonymous	2025-10-07 11:57:48 (9 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇦 URAN Publishing Service	2025-09-18 19:18:12 (9 months ago)	172.70.216.89 - - [18/Sep/2025:22:18:07 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 404 28 ... show more 172.70.216.89 - - [18/Sep/2025:22:18:07 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.70.216.89 - - [18/Sep/2025:22:18:11 +0300] "GET /wp-content/uploads/inputs.php HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.244.39.224

🇸🇬 185.206.250.77

🇻🇳 183.91.186.36

🇺🇸 66.132.172.139

🇺🇸 64.62.197.13

🇺🇸 20.169.105.0

🇺🇸 195.184.76.141

🇧🇷 187.95.231.80

🇲🇴 182.93.50.90

🇺🇸 154.83.197.69

🇺🇸 107.0.200.227

🇫🇷 91.196.152.247

🇺🇸 74.7.244.55

🇺🇸 45.156.129.78

🇻🇳 14.225.206.187

🇬🇧 2a06:4880:6000::72

🇺🇾 179.27.99.9

🇧🇷 177.52.83.26

🇺🇸 159.223.162.133

🇳🇱 91.92.42.10