JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.70.243.201

172.70.243.201 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 172.70.243.201 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.70.243.201

Whois 172.70.243.201

IP Abuse Reports for 172.70.243.201:

This IP address has been reported a total of 109 times from 33 distinct sources. 172.70.243.201 was first reported on April 29th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 madeit	2026-08-16 04:07:38 (1 month ago)		Web App Attack
🇧🇪 madeit	2026-08-06 05:37:48 (1 month ago)		Web App Attack
🇳🇱 ipoac.nl	2026-07-16 08:14:36 (2 months ago)	ipoac.nl:80 172.70.243.201 - - [16/Jul/2026:10:14:36 +0200] - "GET /wp-admin/install.php?step=1 HTTP ... show more ipoac.nl:80 172.70.243.201 - - [16/Jul/2026:10:14:36 +0200] - "GET /wp-admin/install.php?step=1 HTTP/1.1" 302 955 "-" "http://-/wp-admin/install.php?step=1" show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-02 20:15:11 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:15:06.614392 2026] [security2:error] [pid 28513:tid 28513] [client 172.70.243.201:12949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gslministries.com"] [uri "/.git/config"] [unique_id "akbGymBfYuJ8mA9zvPq_9AAAAF4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 12:53:15 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 08:53:07.774316 2026] [security2:error] [pid 3583:tid 3583] [client 172.70.243.201:9445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clevercad.com"] [uri "/.git/config"] [unique_id "akZfM9lMgPd8VQz3-I9SpgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 COMPLEX	2026-06-23 00:04:02 (2 months ago)	Unsolicited TCP traffic \| Action: DROP \| Port 8443	Brute-Force
🇺🇸 TPI-Abuse	2026-06-12 21:37:43 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 17:37:40.448344 2026] [security2:error] [pid 22500:tid 22500] [client 172.70.243.201:9470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.microscopicpablo.com"] [uri "/.git/HEAD"] [unique_id "aix8JBsJFm7bHMpfMy0qkwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 11:04:50 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 07:04:47.038302 2026] [security2:error] [pid 16770:tid 16770] [client 172.70.243.201:10913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digitalmarketing-group.com"] [uri "/.git/config"] [unique_id "ah64z6pJdVTSuuThBccjawAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WellSpring	2026-05-28 03:11:54 (3 months ago)	wordpress scan on 504.today/wp-admin/install.php — WellSpr.ing/NetSentinel civic-AI security layer	Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2026-05-09 04:07:50 (4 months ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 TPI-Abuse	2026-05-08 07:50:06 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 03:49:55.654469 2026] [security2:error] [pid 15589:tid 15589] [client 172.70.243.201:12743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arellasoc.com"] [uri "/.git/config"] [unique_id "af2Vo1COgyy4Gvo7huZFngAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-30 04:39:37 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 00:39:31.282904 2026] [security2:error] [pid 5022:tid 5022] [client 172.70.243.201:11249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.pelicancovecondo.com"] [uri "/.git/config"] [unique_id "afLdA4OLgYsQheq0U90RpAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-04-04 23:30:07 (5 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-04-04 22:08:02 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 18:07:51.504110 2026] [security2:error] [pid 5363:tid 5383] [client 172.70.243.201:12314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.luxury.management"] [uri "/.git/refs/heads/master"] [unique_id "adGLtybyYYlbgvS7R-q8sQAAAJI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-02 01:09:14 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.243.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 21:09:07.694082 2026] [security2:error] [pid 26598:tid 26612] [client 172.70.243.201:9874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.moogoob.com"] [uri "/.git/config"] [unique_id "ac3Bs89qUz8qw3Jy4WhKqwAAAIw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 47.79.206.152

🇳🇱 193.47.62.69

🇲🇽 189.244.108.143

🇷🇺 178.68.173.76

🇨🇦 159.203.1.98

🇻🇪 153.67.5.0

🇺🇸 134.33.97.1

🇲🇾 120.141.27.68

🇹🇭 118.194.250.113

🇳🇱 109.160.32.212

🇹🇯 94.199.21.109

🇧🇬 80.66.66.126

🇷🇸 77.243.26.173

🇸🇬 47.128.54.223

🇺🇸 35.231.198.237

🇩🇪 34.40.125.187

🇹🇭 27.130.79.94

🇻🇳 221.132.21.185

🇺🇸 216.25.89.136

🇧🇪 207.175.136.234