Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 172.70.85.19
This IP address has been reported a total of
94
times from
26 distinct
sources.
172.70.85.19 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Belgium
with 2
reports;
United States of America
with 1
report.
The most common categories in these recent reports were:
Web App Attack
2
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Thu Feb 05 19:55:14.808511 2026] [php:error] [pid 3884772] [client 172.70.85.19:14175] script '/var ...
show more[Thu Feb 05 19:55:14.808511 2026] [php:error] [pid 3884772] [client 172.70.85.19:14175] script '/var/www/html/inc.php' not found or unable to stat
[Thu Feb 05 19:55:16.401948 2026] [php:error] [pid 3884772] [client 172.70.85.19:14175] script '/var/www/html/function.php' not found or unable to stat
[Thu Feb 05 19:55:18.944599 2026] [php:error] [pid 3884772] [client 172.70.85.19:14175] script '/var/www/html/new.php' not found or unable to stat
[Thu Feb 05 19:55:33.272156 2026] [php:error] [pid 3882661] [client 172.70.85.19:11643] script '/var/www/html/init.php' not found or unable to stat
[Thu Feb 05 19:55:34.893988 2026] [php:error] [pid 3882661] [client 172.70.85.19:11643] script '/var/www/html/adminfuns.php' not found or unable to stat
...
show less
Brute-Force
Web App Attack
Anonymous
[Fri Jan 23 12:55:08.601815 2026] [authz_core:error] [pid 24469] [client 172.70.85.19:11529] AH01630 ...
show more[Fri Jan 23 12:55:08.601815 2026] [authz_core:error] [pid 24469] [client 172.70.85.19:11529] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jan 23 12:55:10.823429 2026] [authz_core:error] [pid 24469] [client 172.70.85.19:11529] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jan 23 12:55:13.565286 2026] [authz_core:error] [pid 24469] [client 172.70.85.19:11529] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Triggered Cloudflare WAF (firewallManaged) from GB.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show moreTriggered Cloudflare WAF (firewallManaged) from GB.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Triggered Cloudflare WAF (firewallManaged) from GB.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show moreTriggered Cloudflare WAF (firewallManaged) from GB.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: [email protected]
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
