JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.70.222.199

Neutral Activity Whitelisted Subnet

Abuse confidence score ?

0% Low Risk

29 reports

13 reporters · latest 4 days ago

172.70.222.199 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 172.70.222.199

Export CSV

This IP address has been reported a total of 29 times from 13 distinct sources. 172.70.222.199 was first reported on March 30th 2024, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: Belgium with 2 reports; Netherlands with 1 report. The most common categories in these recent reports were: Web App Attack 3 times; Hacking 1 time; SSH 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 madeit	2026-10-15 15:12:12 (4 days ago)		Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-30 21:59:22 (2 weeks ago)	Auto-ban: >3000 req/min op 2026-09-30	Web App Attack SSH Hacking
🇧🇪 madeit	2026-09-12 16:01:23 (1 month ago)		Web App Attack
🇬🇧 OptimusGO	2026-07-11 07:58:16 (3 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-11 08:58:16 UTC Log evidence: 07/11/2026-08:58:15.151499 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 172.70.222.199:12073 -> 185.127.18.66:2087 show less	Port Scan Brute-Force
🇧🇬 Stoyko Stoykov	2026-07-07 18:38:10 (3 months ago)	172.70.222.199 - - [07/Jul/2026:21:38:09 +0300] "GET //wp-includes/css/dist/ HTTP/2.0" 404 134 "-" " ... show more 172.70.222.199 - - [07/Jul/2026:21:38:09 +0300] "GET //wp-includes/css/dist/ HTTP/2.0" 404 134 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 iwle	2025-12-31 05:17:54 (9 months ago)	172.70.222.199 - - [31/Dec/2025:00:17:45 -0500] "GET /admin.php HTTP/2.0" 404 16 "https://www.google ... show more 172.70.222.199 - - [31/Dec/2025:00:17:45 -0500] "GET /admin.php HTTP/2.0" 404 16 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.222.199 - - [31/Dec/2025:00:17:46 -0500] "GET /adminfuns.php HTTP/2.0" 404 16 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.222.199 - - [31/Dec/2025:00:17:47 -0500] "GET /xmlrpc.php HTTP/2.0" 404 16 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" ... show less	Brute-Force
🇺🇸 mawan	2025-07-31 15:53:35 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
Anonymous	2025-07-26 12:37:04 (1 year ago)	wp admin page access attempt ...	Hacking Web App Attack
Anonymous	2025-07-20 16:19:22 (1 year ago)	[Sun Jul 20 18:19:20.412224 2025] [authz_core:error] [pid 29932] [client 172.70.222.199:39346] AH016 ... show more [Sun Jul 20 18:19:20.412224 2025] [authz_core:error] [pid 29932] [client 172.70.222.199:39346] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jul 20 18:19:20.662468 2025] [authz_core:error] [pid 29932] [client 172.70.222.199:39346] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jul 20 18:19:20.913893 2025] [authz_core:error] [pid 29932] [client 172.70.222.199:39346] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2025-07-17 21:06:01 (1 year ago)	wp admin page access attempt ...	Hacking Web App Attack
Anonymous	2025-07-16 14:51:03 (1 year ago)	wp admin page access attempt ...	Hacking Web App Attack
Anonymous	2025-07-05 22:10:35 (1 year ago)	[Sun Jul 06 00:10:34.663313 2025] [authz_core:error] [pid 11730] [client 172.70.222.199:18366] AH016 ... show more [Sun Jul 06 00:10:34.663313 2025] [authz_core:error] [pid 11730] [client 172.70.222.199:18366] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jul 06 00:10:34.916215 2025] [authz_core:error] [pid 11730] [client 172.70.222.199:18366] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jul 06 00:10:35.166223 2025] [authz_core:error] [pid 11730] [client 172.70.222.199:18366] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2025-06-30 15:22:13 (1 year ago)	[Mon Jun 30 17:22:12.080786 2025] [authz_core:error] [pid 28729] [client 172.70.222.199:14560] AH016 ... show more [Mon Jun 30 17:22:12.080786 2025] [authz_core:error] [pid 28729] [client 172.70.222.199:14560] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Jun 30 17:22:12.320164 2025] [authz_core:error] [pid 28729] [client 172.70.222.199:14560] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Jun 30 17:22:12.559753 2025] [authz_core:error] [pid 28729] [client 172.70.222.199:14560] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2025-05-16 22:20:10 (1 year ago)	172.70.222.199 - - [17/May/2025:01:20:09 +0300] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 404 498 "- ... show more 172.70.222.199 - - [17/May/2025:01:20:09 +0300] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.222.199 - - [17/May/2025:01:20:10 +0300] "GET /cgi-bin/radio.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" ... show less	Web App Attack
Anonymous	2025-03-19 00:22:36 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇬 102.140.97.134

🇧🇷 16.5.0.217

🇸🇳 213.154.77.61

🇳🇱 188.166.123.25

🇨🇦 159.203.2.26

🇧🇩 103.101.250.217

🇨🇦 85.217.149.73

🇺🇸 70.183.235.23

🇺🇸 204.152.194.222

🇪🇨 177.234.198.68

🇩🇪 87.106.105.31

🇫🇷 85.217.140.36

🇳🇱 77.239.124.201

🇺🇸 71.6.246.71

🇹🇳 196.179.106.70

🇳🇱 193.47.62.69

🇸🇬 192.161.171.31

🇨🇴 190.145.192.106

🇲🇽 187.243.198.59

🇨🇳 124.126.140.93