JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.70.243.124

172.70.243.124

Neutral Activity Whitelisted Subnet

152 reports found in our database

0% Low Risk

Abuse confidence score ?

172.70.243.124 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP

Cloudflare, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS13335

Domain Name

cloudflare.com

Country

🇩🇪 Germany

City

Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 172.70.243.124:

This IP address has been reported a total of 152 times from 37 distinct sources. 172.70.243.124 was first reported on April 28th 2023, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: Germany with 4 reports; Russian Federation with 1 report. The most common categories in these recent reports were: Web App Attack 5 times; Bad Web Bot 1 time; Exploited Host 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 XICTRON	2026-09-10 05:45:15 (1 hour ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
Anonymous	2026-09-02 16:31:31 (1 week ago)	[Wed Sep 02 18:31:28.263458 2026] [authz_core:error] [pid 20346] [client 172.70.243.124:9240] AH0163 ... show more [Wed Sep 02 18:31:28.263458 2026] [authz_core:error] [pid 20346] [client 172.70.243.124:9240] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://antler-snacks.com/wordpress/wp-admin/ [Wed Sep 02 18:31:29.940169 2026] [authz_core:error] [pid 20346] [client 172.70.243.124:9240] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://antler-snacks.com/wordpress/wp-admin/ [Wed Sep 02 18:31:29.968741 2026] [authz_core:error] [pid 20346] [client 172.70.243.124:9240] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://antler-snacks.com/wordpress/wp-admin/ ... show less	Web App Attack
Anonymous	2026-09-01 16:41:15 (1 week ago)	[Tue Sep 01 18:41:13.931134 2026] [authz_core:error] [pid 26531] [client 172.70.243.124:13154] AH016 ... show more [Tue Sep 01 18:41:13.931134 2026] [authz_core:error] [pid 26531] [client 172.70.243.124:13154] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Sep 01 18:41:14.261548 2026] [authz_core:error] [pid 26531] [client 172.70.243.124:13154] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Sep 01 18:41:14.364122 2026] [authz_core:error] [pid 26531] [client 172.70.243.124:13154] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇷🇺 DZBOT	2026-08-16 23:37:06 (3 weeks ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-08-13 22:14:20 (3 weeks ago)	[Fri Aug 14 00:13:39.786811 2026] [authz_core:error] [pid 2875] [client 172.70.243.124:13106] AH0163 ... show more [Fri Aug 14 00:13:39.786811 2026] [authz_core:error] [pid 2875] [client 172.70.243.124:13106] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Aug 14 00:14:19.935756 2026] [authz_core:error] [pid 3159] [client 172.70.243.124:11649] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Aug 14 00:14:19.958598 2026] [authz_core:error] [pid 3159] [client 172.70.243.124:11649] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-04-30 14:11:19 (4 months ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 00:42:11 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.124 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 20:42:07.721962 2026] [security2:error] [pid 1113769:tid 1113769] [client 172.70.243.124:13284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.warshaw1.com"] [uri "/.git/logs/HEAD"] [unique_id "adRS37E0uhYHNAdsWX-I7wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-05 19:46:59 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.124 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 15:46:54.565174 2026] [security2:error] [pid 12027:tid 12027] [client 172.70.243.124:10605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.waleed-alshalan.com"] [uri "/.git/config"] [unique_id "adK8LnNipx2h8kGjQUUPCgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-05 06:29:07 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.124 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 02:29:00.761985 2026] [security2:error] [pid 24478:tid 24478] [client 172.70.243.124:10055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.player-care.us"] [uri "/.env"] [unique_id "adIBLLWJnzkOC6eekrVEHAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-04 18:12:51 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.124 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 14:12:47.584392 2026] [security2:error] [pid 24951:tid 24951] [client 172.70.243.124:9315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.elegantweddingnapkins.com"] [uri "/.git/refs/heads/master"] [unique_id "adFUn7dqKSeVFqJ3O8EcQQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-04-04 13:06:13 (5 months ago)	Scanning/Probing (45)	Brute-Force Web App Attack
🇺🇸 myagent.site	2026-04-04 06:25:20 (5 months ago)	Blocking for trying to access an exploit file: /admin/.env	Hacking
🇳🇱 jjnxpct	2026-04-04 03:53:45 (5 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /docker/.env.local (Rule ID: 930130) - Restricted File Access Attempt show less	Web App Attack Hacking
🇩🇪 Vegascosmetics	2026-04-03 21:50:50 (5 months ago)	Kingcopy(AI-IDS):IP does Multiple AWS Environment Abuse	Hacking Web App Attack
🇦🇺 aranguren.org	2026-04-02 20:56:21 (5 months ago)	172.70.243.124 - - [03/Apr/2026:07:56:21 +1100] "GET /.git/index HTTP/2.0" 404 999 "-" "-" 172.70.24 ... show more 172.70.243.124 - - [03/Apr/2026:07:56:21 +1100] "GET /.git/index HTTP/2.0" 404 999 "-" "-" 172.70.243.124 - - [03/Apr/2026:07:56:21 +1100] "GET /.git/refs/heads/main HTTP/2.0" 404 999 "-" "-" 172.70.243.124 - - [03/Apr/2026:07:56:21 +1100] "GET /.git/config HTTP/2.0" 404 999 "-" "-" 172.70.243.124 - - [03/Apr/2026:07:56:21 +1100] "GET /.env.production HTTP/2.0" 404 999 "-" "-" 172.70.243.124 - - [03/Apr/2026:07:56:21 +1100] "GET /.env.development HTTP/2.0" 404 999 "-" "-" 172.70.243.124 - - [03/Apr/2026:07:56:21 +1100] "GET /.env.dev HTTP/2.0" 404 999 "-" "-" ... show less	Bad Web Bot

Showing 1 to 15 of 152 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.20.163.167

🇺🇸 66.212.23.118

🇺🇸 35.236.241.106

🇹🇿 196.41.46.194

🇺🇸 192.241.74.154

🇲🇽 187.169.91.21

🇦🇷 179.36.146.183

🇺🇸 162.216.149.229

🇧🇬 79.124.60.218

🇧🇬 79.124.58.198

🇱🇹 62.60.130.253

🇭🇰 47.238.153.138

🇵🇾 45.236.247.58

🇺🇸 43.166.242.53

🇨🇳 36.135.100.48

🇺🇸 35.245.198.105

🇺🇸 35.236.58.136

🇬🇧 35.189.118.98

🇺🇸 35.185.64.176

🇨🇱 34.176.180.44