JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.231.64.70

5.231.64.70 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 42%: ?

42%

ISP	GHOSTnet Network used for VPS Hosting Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS12586
Domain Name	ghostnet.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.231.64.70

Whois 5.231.64.70

IP Abuse Reports for 5.231.64.70:

This IP address has been reported a total of 9 times from 9 distinct sources. 5.231.64.70 was first reported on May 16th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 YF	2026-05-29 21:03:48 (1 week ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇫🇮 inlink.ltd	2026-05-26 11:52:53 (1 week ago)	Known malicious PHP file or CMS probe	Web App Attack
🇩🇪 todix	2026-05-24 10:36:28 (1 week ago)	WebAttack or semilar from 5.231.64.70	Web App Attack
🇨🇭 Origon	2026-05-23 03:29:46 (1 week ago)	http-wordpress-scan - IP: 5.231.64.70 - time="2026-05-23T05:29:46+02:00" level=info msg="(555f66b4f ... show more http-wordpress-scan - IP: 5.231.64.70 - time="2026-05-23T05:29:46+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 5.231.64.70 (FR/12586) : 4h ban on Ip 5.231.64.70" module=db show less	Web App Attack
🇬🇧 relianoid.com	2026-05-20 23:05:29 (2 weeks ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇨🇭 4server	2026-05-19 11:47:35 (2 weeks ago)	[TueMay1913:47:30.6871922026][security2:error][pid1178946:tid1179210][client5.231.64.70:0]ModSecurit ... show more [TueMay1913:47:30.6871922026][security2:error][pid1178946:tid1179210][client5.231.64.70:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"www.benvenutialfood.ch\"][uri\"/wp-content/plugins/worker/readme.txt\"][unique_id\"agxN0qp0VT4DO8FmpUbmvwAAAA8\"]\,referer:https://www.google.com/ show less	Hacking Web App Attack
🇫🇮 6kilowatti	2026-05-17 17:50:54 (2 weeks ago)	5.231.64.70 - - [17/May/2026:20:50:53 +0300] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google ... show more 5.231.64.70 - - [17/May/2026:20:50:53 +0300] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 5.231.64.70 - [17/May/2026:20:50:53 +0300] "GET /wp-login.php HTTP/1.1" 404 4096 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 octageeks.com	2026-05-17 04:09:53 (2 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇳🇱 holos.pt	2026-05-16 11:20:02 (2 weeks ago)	Blocked for Readme.txt and debug.log scans in query string: /wp-content/plugins/worker/readme.txt	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.175.201.167

🇺🇾 167.62.206.231

🇺🇸 104.248.218.184

🇷🇴 2.57.121.25

🇻🇳 180.93.36.16

🇺🇸 172.190.220.228

🇨🇦 69.49.112.67

🇳🇱 45.148.10.141

🇻🇳 42.1.65.137

🇺🇸 18.144.236.177

🇧🇷 205.210.31.215

🇪🇹 196.188.116.56

🇮🇷 188.121.121.26

🇺🇸 172.121.197.36

🇸🇪 171.25.158.57

🇲🇴 125.31.2.160

🇺🇸 49.51.204.105

🇳🇱 45.148.10.157

🇳🇱 20.160.86.7

🇨🇦 216.251.35.201