JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.70.251.167

Neutral Activity Whitelisted Subnet

Abuse confidence score ?

0% Low Risk

162 reports

42 reporters · latest 4 months ago

172.70.251.167 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.70.251.167 has been reported 162 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 172.70.251.167

This IP address has been reported a total of 162 times from 42 distinct sources. 172.70.251.167 was first reported on March 16th 2022, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 services.org.pl	2026-05-14 06:09:37 (4 months ago)	connect() failed (111: Connection refused) while connecting to upstream, client: 172.70.251.167, ser ... show more connect() failed (111: Connection refused) while connecting to upstream, client: 172.70.251.167, server: notebook.services.org.pl, request: "GET / HTTP/1.1", upstream: "http://127.0.0.1:24764/", host: "notebook.services.org.pl" show less	Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-05-14 03:25:09 (4 months ago)	172.70.251.167 - - [14/May/2026: ...	Brute-Force
Anonymous	2026-05-10 15:55:20 (4 months ago)	[Sun May 10 17:55:19.585979 2026] [authz_core:error] [pid 13999] [client 172.70.251.167:10262] AH016 ... show more [Sun May 10 17:55:19.585979 2026] [authz_core:error] [pid 13999] [client 172.70.251.167:10262] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun May 10 17:55:19.607896 2026] [authz_core:error] [pid 13999] [client 172.70.251.167:10262] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun May 10 17:55:19.722849 2026] [authz_core:error] [pid 13999] [client 172.70.251.167:10262] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-09 08:46:10 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 04:46:04.758402 2026] [security2:error] [pid 1019:tid 1019] [client 172.70.251.167:13360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "churchbehindthewalls.com"] [uri "/.git/config"] [unique_id "af70TGsepjEeTjfXJI2S4wAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-08 04:42:54 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 00:42:48.988616 2026] [security2:error] [pid 21929:tid 21929] [client 172.70.251.167:10001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tecnoconce.com"] [uri "/.git/config"] [unique_id "af1pyHYuS2iCyCLu7pnq2wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-30 18:55:00 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 14:54:53.951232 2026] [security2:error] [pid 31965:tid 31965] [client 172.70.251.167:11572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rktect.com"] [uri "/.git/config"] [unique_id "afOlfd81Sva_MJEEBQk_GwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-30 16:42:59 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 12:42:52.434324 2026] [security2:error] [pid 15170:tid 15170] [client 172.70.251.167:10589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.markrikey.com"] [uri "/.git/config"] [unique_id "afOGjE8Umu6D89VMWbFS9AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-23 03:34:24 (5 months ago)	[Thu Apr 23 05:34:23.558240 2026] [authz_core:error] [pid 2647] [client 172.70.251.167:11429] AH0163 ... show more [Thu Apr 23 05:34:23.558240 2026] [authz_core:error] [pid 2647] [client 172.70.251.167:11429] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Apr 23 05:34:23.578277 2026] [authz_core:error] [pid 2647] [client 172.70.251.167:11429] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Apr 23 05:34:23.597734 2026] [authz_core:error] [pid 2647] [client 172.70.251.167:11429] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-04-19 19:58:48 (5 months ago)	[Sun Apr 19 21:58:46.879121 2026] [authz_core:error] [pid 23260] [client 172.70.251.167:12845] AH016 ... show more [Sun Apr 19 21:58:46.879121 2026] [authz_core:error] [pid 23260] [client 172.70.251.167:12845] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Apr 19 21:58:47.395269 2026] [authz_core:error] [pid 23260] [client 172.70.251.167:12845] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Apr 19 21:58:47.661479 2026] [authz_core:error] [pid 23260] [client 172.70.251.167:12845] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 14:40:25 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 10:40:04.578291 2026] [security2:error] [pid 1140263:tid 1140263] [client 172.70.251.167:12487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caitypopxart.com"] [uri "/.git/refs/heads/master"] [unique_id "adUXRLmNy3vun509-re7DwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 01:09:25 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:09:20.715360 2026] [security2:error] [pid 25076:tid 25093] [client 172.70.251.167:9839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tieco.salvoni.com"] [uri "/.git/HEAD"] [unique_id "adMHwMHann328xqjGlU_gwAAAE4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tavis.page	2026-04-04 10:59:19 (5 months ago)	Blocked by UFW on server [443/tcp] Source port: 10010 TTL: 56 Packet length: 60 TOS: 0x00 This repo ... show more Blocked by UFW on server [443/tcp] Source port: 10010 TTL: 56 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 TheWojtek	2026-04-04 00:54:52 (5 months ago)	[Sat Apr 04 02:54:51.962171 2026] [access_compat:error] [pid 1524436:tid 1524489] [client 172.70.251 ... show more [Sat Apr 04 02:54:51.962171 2026] [access_compat:error] [pid 1524436:tid 1524489] [client 172.70.251.167:9923] AH01797: client denied by server configuration: /var/www/nextcloud/config/env ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 11:54:37 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 07:54:33.081640 2026] [security2:error] [pid 25693:tid 25693] [client 172.70.251.167:9274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "normsrotorservice.com"] [uri "/.git/refs/heads/master"] [unique_id "ac-qed82de9zQ6xDGTvQdgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-02 22:23:48 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.70.251.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 18:23:43.834554 2026] [security2:error] [pid 24677:tid 24677] [client 172.70.251.167:11939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.asiancommoditiescorporation.com"] [uri "/.git/config"] [unique_id "ac7sb78d5YgrbStOUF4fUQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 162 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:332::183

🇧🇷 205.210.31.129

🇩🇪 194.187.176.175

🇨🇴 191.97.12.90

🇳🇱 109.160.32.150

🇨🇦 85.217.149.21

🇦🇷 45.185.206.155

🇰🇷 222.118.59.16

🇺🇸 205.210.31.110

🇺🇸 205.210.31.108

🇧🇷 201.76.120.30

🇺🇸 195.184.76.90

🇳🇴 194.127.199.43

🇳🇱 193.25.217.68

🇺🇸 172.174.104.140

🇵🇰 153.117.46.46

🇺🇦 146.120.168.172

🇺🇸 136.144.35.40

🇮🇩 128.14.232.219

🇨🇳 118.212.122.46