JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.70.222.131

172.70.222.131 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 172.70.222.131 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.70.222.131

Whois 172.70.222.131

IP Abuse Reports for 172.70.222.131:

This IP address has been reported a total of 61 times from 15 distinct sources. 172.70.222.131 was first reported on February 4th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 kkw	2026-09-18 14:49:05 (2 days ago)	[REDACTED] 172.70.222.131 - - [18/Sep/2026:16:49:02 +0200] "GET /notifications/.env HTTP/2.0" 404 28 ... show more [REDACTED] 172.70.222.131 - - [18/Sep/2026:16:49:02 +0200] "GET /notifications/.env HTTP/2.0" 404 281635 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇧🇪 madeit	2026-09-13 00:34:12 (1 week ago)		Web App Attack
🇧🇪 madeit	2026-08-26 15:09:31 (3 weeks ago)		Web App Attack
🇧🇪 madeit	2026-08-05 05:15:02 (1 month ago)		Web App Attack
🇺🇸 mawan	2026-07-18 06:11:43 (2 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇦 URAN Publishing Service	2026-02-08 05:29:05 (7 months ago)	172.70.222.131 - - [08/Feb/2026:07:28:58 +0200] "GET /wp-admin/images/ HTTP/1.1" 404 351 "-" "Mozill ... show more 172.70.222.131 - - [08/Feb/2026:07:28:58 +0200] "GET /wp-admin/images/ HTTP/1.1" 404 351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.222.131 - - [08/Feb/2026:07:29:05 +0200] "GET /wp-login.php HTTP/1.1" 404 351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-02-06 20:59:29 (7 months ago)	172.70.222.131 - - [06/Feb/2026:22:59:28 +0200] "GET /wp-content/cache/ HTTP/1.1" 404 351 "-" "Mozil ... show more 172.70.222.131 - - [06/Feb/2026:22:59:28 +0200] "GET /wp-content/cache/ HTTP/1.1" 404 351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.222.131 - - [06/Feb/2026:22:59:28 +0200] "GET /wp-includes/js/thickbox/ HTTP/1.1" 404 351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 Campus France	2025-12-12 04:31:17 (9 months ago)	[Fri Dec 12 05:31:15.502527 2025] [php:error] [pid 3448648] [client 172.70.222.131:13809] script '/v ... show more [Fri Dec 12 05:31:15.502527 2025] [php:error] [pid 3448648] [client 172.70.222.131:13809] script '/var/www/html/wp-login.php' not found or unable to stat, referer: https://www.google.fr/ [Fri Dec 12 05:31:15.761303 2025] [php:error] [pid 3448648] [client 172.70.222.131:13809] script '/var/www/html/wp-signin.php' not found or unable to stat, referer: https://www.google.fr/ [Fri Dec 12 05:31:16.021175 2025] [php:error] [pid 3448648] [client 172.70.222.131:13809] script '/var/www/html/wp-user.php' not found or unable to stat, referer: https://www.yahoo.com/ [Fri Dec 12 05:31:16.281307 2025] [php:error] [pid 3448648] [client 172.70.222.131:13809] script '/var/www/html/wp.php' not found or unable to stat, referer: https://www.yahoo.com/ [Fri Dec 12 05:31:16.541088 2025] [php:error] [pid 3448648] [client 172.70.222.131:13809] script '/var/www/html/xmlrpc.php' not found or unable to stat, referer: https://www.google.de/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-09 16:13:05 (9 months ago)	[Tue Dec 09 17:13:04.585038 2025] [php:error] [pid 2869030] [client 172.70.222.131:11070] script '/v ... show more [Tue Dec 09 17:13:04.585038 2025] [php:error] [pid 2869030] [client 172.70.222.131:11070] script '/var/www/html/nas.php' not found or unable to stat [Tue Dec 09 17:13:04.845113 2025] [php:error] [pid 2869030] [client 172.70.222.131:11070] script '/var/www/html/jju.php' not found or unable to stat [Tue Dec 09 17:13:04.845113 2025] [php:error] [pid 2869030] [client 172.70.222.131:11070] script '/var/www/html/jju.php' not found or unable to stat [Tue Dec 09 17:13:05.107510 2025] [php:error] [pid 2869030] [client 172.70.222.131:11070] script '/var/www/html/cool.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-08 20:36:37 (9 months ago)	[Mon Dec 08 21:36:35.863018 2025] [php:error] [pid 2764303] [client 172.70.222.131:14252] script '/v ... show more [Mon Dec 08 21:36:35.863018 2025] [php:error] [pid 2764303] [client 172.70.222.131:14252] script '/var/www/html/bak.php' not found or unable to stat [Mon Dec 08 21:36:36.154851 2025] [php:error] [pid 2764303] [client 172.70.222.131:14252] script '/var/www/html/ini.php' not found or unable to stat [Mon Dec 08 21:36:36.436163 2025] [php:error] [pid 2764303] [client 172.70.222.131:14252] script '/var/www/html/ws.php' not found or unable to stat [Mon Dec 08 21:36:37.118185 2025] [php:error] [pid 2764303] [client 172.70.222.131:14252] script '/var/www/html/moon.php' not found or unable to stat [Mon Dec 08 21:36:37.366896 2025] [php:error] [pid 2764303] [client 172.70.222.131:14252] script '/var/www/html/0x.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-11-24 06:41:56 (9 months ago)	172.70.222.131 - - [24/Nov/2025:07:41:54 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 172.70.222.131 - - [24/Nov/2025:07:41:54 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 413 "-" "-" 172.70.222.131 - - [24/Nov/2025:07:41:55 +0100] "GET /neshe HTTP/1.1" 404 412 "-" "-" 172.70.222.131 - - [24/Nov/2025:07:41:55 +0100] "GET /siln.php HTTP/1.1" 404 412 "-" "-" 172.70.222.131 - - [24/Nov/2025:07:41:55 +0100] "GET /xpow0b.php HTTP/1.1" 404 412 "-" "-" 172.70.222.131 - - [24/Nov/2025:07:41:55 +0100] "GET /xpobv.php HTTP/1.1" 404 412 "-" "-" ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-11-21 18:01:05 (9 months ago)	[Fri Nov 21 16:16:06.816817 2025] [php:error] [pid 2610130] [client 172.70.222.131:11570] script '/v ... show more [Fri Nov 21 16:16:06.816817 2025] [php:error] [pid 2610130] [client 172.70.222.131:11570] script '/var/www/html/b.php' not found or unable to stat [Fri Nov 21 16:16:07.067206 2025] [php:error] [pid 2610130] [client 172.70.222.131:11570] script '/var/www/html/adds.php' not found or unable to stat [Fri Nov 21 16:16:07.960020 2025] [php:error] [pid 2610130] [client 172.70.222.131:11570] script '/var/www/html/admin.php' not found or unable to stat [Fri Nov 21 16:16:08.207934 2025] [php:error] [pid 2610130] [client 172.70.222.131:11570] script '/var/www/html/autoload_classmap.php' not found or unable to stat [Fri Nov 21 19:01:05.397521 2025] [php:error] [pid 2638596] [client 172.70.222.131:9543] script '/var/www/html/ae.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-11-21 15:16:08 (9 months ago)	172.70.222.131 - - [21/Nov/2025:16:15:59 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 172.70.222.131 - - [21/Nov/2025:16:15:59 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 413 "-" "-" 172.70.222.131 - - [21/Nov/2025:16:16:06 +0100] "GET /b.php HTTP/1.1" 404 413 "-" "-" 172.70.222.131 - - [21/Nov/2025:16:16:07 +0100] "GET /adds.php HTTP/1.1" 404 412 "-" "-" 172.70.222.131 - - [21/Nov/2025:16:16:07 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 404 412 "-" "-" 172.70.222.131 - - [21/Nov/2025:16:16:07 +0100] "GET /admin.php HTTP/1.1" 404 412 "-" "-" ... show less	Brute-Force Web App Attack
🇯🇵 S.O.B.A. Dev.	2025-11-10 16:10:01 (10 months ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 Paschen J Ki	2025-09-03 21:25:55 (1 year ago)	Blocked by UFW [8008/tcp] Source port: 15036 TTL: 51 Packet length: 60 TOS: 0x00 This report was ge ... show more Blocked by UFW [8008/tcp] Source port: 15036 TTL: 51 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.162.17.141

🇩🇪 213.95.11.49

🇷🇺 212.164.26.40

🇺🇸 207.90.244.6

🇺🇸 158.94.211.60

🇨🇳 119.86.198.146

🇨🇦 104.253.66.179

🇫🇮 104.28.254.16

🇮🇹 93.51.116.48

🇷🇺 89.239.145.99

🇺🇸 66.132.224.83

🇺🇸 47.202.232.139

🇩🇰 46.29.235.249

🇨🇳 36.129.129.28

🇺🇸 34.86.183.13

🇬🇧 2a06:4880:c000::e6

🇰🇷 211.251.245.88

🇨🇳 211.95.80.122

🇨🇭 205.188.0.78

🇭🇰 203.160.86.32