JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.70.248.160

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

180 reports

63 reporters · latest 5 hours ago

172.70.248.160 is on our whitelist as Cloudflare Reverse Proxy via the subnet 172.64.0.0/13.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

180 from 63 distinct reporters

First reported

February 8th 2025

Most recent report

5 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 18 🇫🇷 France 6 🇨🇭 Switzerland 4

Most common categories Web App Attack 29 Bad Web Bot 18 Brute-Force 15 Hacking 6 Port Scan 1

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-12 14:06:38 UTC · (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:06:33.859508 2026] [security2:error] [pid 15343:tid 15343] [client 172.70.248.160:11251] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:06:33.859508 2026] [security2:error] [pid 15343:tid 15343] [client 172.70.248.160:11251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mathewyoung.com"] [uri "/.htaccess"] [unique_id "avXH6QShOMhiJqSOn5XL-wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 pashait	2026-11-12 11:31:18 UTC · (8 hours ago)	Auto-blocked by Seczar SecureOps — TLS / SSL Anomaly Burst (11 events in 10min) at 2026-11-12 11:31	Hacking
🇺🇸 TPI-Abuse	2026-11-11 01:49:26 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:49:18.858899 2026] [security2:error] [pid 28289:tid 28289] [client 172.70.248.160:13968] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:49:18.858899 2026] [security2:error] [pid 28289:tid 28289] [client 172.70.248.160:13968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whiteweddingnapkins.com"] [uri "/wp-config.php.save"] [unique_id "avPJntVyyaAidezI2lixKQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-11 01:05:24 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:05:16.552131 2026] [security2:error] [pid 26060:tid 26060] [client 172.70.248.160:9595] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:05:16.552131 2026] [security2:error] [pid 26060:tid 26060] [client 172.70.248.160:9595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oceanicpier.com"] [uri "/.htaccess"] [unique_id "avO_TK6W9c0MBNIXCdaYrwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-11 00:37:21 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:37:14.604081 2026] [security2:error] [pid 13440:tid 13440] [client 172.70.248.160:9891] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:37:14.604081 2026] [security2:error] [pid 13440:tid 13440] [client 172.70.248.160:9891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martinka.org"] [uri "/wp-config.php"] [unique_id "avO4upfFVNcfahgxQ8EhlwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 11:45:16 UTC · (2 days ago)	(mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:45:08.617900 2026] [security2:error] [pid 25149:tid 25149] [client 172.70.248.160:10362] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:45:08.617900 2026] [security2:error] [pid 25149:tid 25149] [client 172.70.248.160:10362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.expertprofessionalcleaners.com"] [uri "/wp-config.php.save"] [unique_id "avMDxHni-5d-TsDqeBBMNwAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 05:27:07 UTC · (2 days ago)	(mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:27:00.483019 2026] [security2:error] [pid 2702924:tid 2702997] [client 172.70.248.160:11 ... show more (mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:27:00.483019 2026] [security2:error] [pid 2702924:tid 2702997] [client 172.70.248.160:11601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killerrockandroll.com"] [uri "/wp-config.php.bak"] [unique_id "avKrJPKDXkyvv8G_Okc8bAAAAgo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TAY	2026-11-09 21:40:33 UTC · (2 days ago)	172.70.248.160 - - [10/Nov/2026:05:40:31 +0800] "GET /wp-config.php.old HTTP/1.1" 301 507 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 172.70.248.160 - - [10/Nov/2026:05:4 ... show more 172.70.248.160 - - [10/Nov/2026:05:40:31 +0800] "GET /wp-config.php.old HTTP/1.1" 301 507 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 172.70.248.160 - - [10/Nov/2026:05:40:31 +0800] "GET /wp-config.php HTTP/1.1" 301 499 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 172.70.248.160 - - [10/Nov/2026:05:40:31 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 172.70.248.160 - - [10/Nov/2026:05:40:32 +0800] "GET /wp-config.php HTTP/1.1" 301 499 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 172.70.248.160 - - [10/Nov/2026:05:40:32 +0800] "GET /wp-config.php.save HTTP/1.1" 301 509 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/60 ... show less	Brute-Force
🇨🇭 TheCoon	2026-11-08 10:56:08 UTC · (4 days ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇫🇷 dynamix	2026-11-05 07:55:42 UTC · (1 week ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-11-04 12:25:16 UTC · (1 week ago)	Web application firewall blocked 3 malicious HTTP requests. Port: 80,443 (HTTP/HTTPS). Attack types: XSS/SQLi/exploit attempts. Timestamp: 1793795114.6446917 UTC. ASN: 13335 (CLOUDFLARENET - Cloudflare, Inc., US). All requests completed TCP 3-way han ... show more Web application firewall blocked 3 malicious HTTP requests. Port: 80,443 (HTTP/HTTPS). Attack types: XSS/SQLi/exploit attempts. Timestamp: 1793795114.6446917 UTC. ASN: 13335 (CLOUDFLARENET - Cloudflare, Inc., US). All requests completed TCP 3-way handshake (verified via PROXY protocol). show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-11-01 13:27:22 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 08:27:13.890996 2026] [security2:error] [pid 13469:tid 13469] [client 172.70.248.160:9566] ... show more (mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 08:27:13.890996 2026] [security2:error] [pid 13469:tid 13469] [client 172.70.248.160:9566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dynarol.com"] [uri "/.env"] [unique_id "auc-MT3mKafxVDGHGociJQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-01 08:43:54 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 03:43:48.353160 2026] [security2:error] [pid 6034:tid 6089] [client 172.70.248.160:13915] M ... show more (mod_security) mod_security (id:210492) triggered by 172.70.248.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 03:43:48.353160 2026] [security2:error] [pid 6034:tid 6089] [client 172.70.248.160:13915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jedelectric.com"] [uri "/.env.save"] [unique_id "aub7xIxq6JOy4N9iH5YOKgAAAY0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 craudiovizai	2026-10-27 18:30:37 UTC · (2 weeks ago)	Automated honeypot detection. blocked ip against a Next.js application. Paths: /wp-admin/install.php?step=1. Blocked at the edge.	Bad Web Bot
🇫🇷 dynamix	2026-10-26 10:42:23 UTC · (2 weeks ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 180 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 185.100.85.25

🇯🇵 180.196.58.117

🇵🇱 172.69.155.197

🇮🇳 103.147.248.23

🇮🇶 37.239.116.4

🇺🇸 23.234.83.185

🇭🇷 217.9.244.86

🇮🇳 203.145.143.163

🇧🇩 202.134.11.242

🇻🇳 180.93.250.126

🇺🇸 167.89.72.22

🇺🇸 146.70.165.153

🇺🇸 135.136.54.237

🇺🇸 135.119.113.149

🇨🇳 120.82.82.85

🇬🇧 35.203.211.49

🇧🇪 34.77.153.177

🇺🇸 23.234.101.253

🇺🇸 23.234.93.72

🇺🇸 23.234.78.169