This IP address has been reported a total of
55
times from
13 distinct
sources.
172.70.50.66 was first reported on
October 9th 2025 , and the most recent report was
20 hours ago France
with 4
reports;
Germany
with 3
reports;
Belgium
with 1
report.
The most common categories in these recent reports were:
Web App Attack
11
times;
Hacking
2
times;
Brute-Force
1
time;
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
dynamix
2026-10-20 19:40:24
(20 hours ago)
Multiple WAF Violations
Web App Attack
🇧🇬
Stoyko Stoykov
2026-10-19 13:50:47
(2 days ago)
172.70.50.66 - - [19/Oct/2026:16:50:46 +0300] "GET / HTTP/2.0" 200 8302 "-" "Mozilla/5.0 (compatible ...
show more
172.70.50.66 - - [19/Oct/2026:16:50:46 +0300] "GET / HTTP/2.0" 200 8302 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
...
show less
Hacking
Web App Attack
🇫🇷
dynamix
2026-10-18 03:18:02
(3 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-15 14:49:05
(6 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-09-23 15:46:57
(4 weeks ago)
Multiple WAF Violations
Web App Attack
2026-09-08 21:39:45
(1 month ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇻🇳
cimee
2026-09-01 18:42:25
(1 month ago)
This IP accessed the path /backend/.env, which is banned.
Bad Web Bot
Web App Attack
2026-08-31 12:07:45
(1 month ago)
[Mon Aug 31 14:07:43.964695 2026] [authz_core:error] [pid 856] [client 172.70.50.66:10924] AH01630: ...
show more
[Mon Aug 31 14:07:43.964695 2026] [authz_core:error] [pid 856] [client 172.70.50.66:10924] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Aug 31 14:07:44.195454 2026] [authz_core:error] [pid 856] [client 172.70.50.66:10924] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Aug 31 14:07:44.448007 2026] [authz_core:error] [pid 856] [client 172.70.50.66:10924] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
2026-08-30 14:10:04
(1 month ago)
[Sun Aug 30 16:10:03.589317 2026] [authz_core:error] [pid 7905] [client 172.70.50.66:9526] AH01630: ...
show more
[Sun Aug 30 16:10:03.589317 2026] [authz_core:error] [pid 7905] [client 172.70.50.66:9526] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Aug 30 16:10:03.843169 2026] [authz_core:error] [pid 7905] [client 172.70.50.66:9526] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Aug 30 16:10:04.220837 2026] [authz_core:error] [pid 7905] [client 172.70.50.66:9526] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
2026-08-30 08:05:20
(1 month ago)
[Sun Aug 30 10:05:19.282357 2026] [authz_core:error] [pid 4492] [client 172.70.50.66:14201] AH01630: ...
show more
[Sun Aug 30 10:05:19.282357 2026] [authz_core:error] [pid 4492] [client 172.70.50.66:14201] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Aug 30 10:05:19.416139 2026] [authz_core:error] [pid 4492] [client 172.70.50.66:14201] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Aug 30 10:05:19.672383 2026] [authz_core:error] [pid 4492] [client 172.70.50.66:14201] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
🇧🇪
madeit
2026-08-22 21:52:39
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-05 02:26:17
(2 months ago)
Web App Attack
🇺🇸
MPL
2026-08-03 21:34:14
(2 months ago)
tcp/443 (5 or more attempts)
Port Scan
🇺🇸
mawan
2026-07-31 12:57:26
(2 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 09:19:23
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 172.70.50.66 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.50.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 05:19:20.459649 2026] [security2:error] [pid 2425490:tid 2425490] [client 172.70.50.66:13337] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.batonrougecustomcabinets.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.batonrougecustomcabinets.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "amHcmFw0PcXSv3B56MClggAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
15
of 55 reports
