JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.64.198.223

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

70 reports

30 reporters · latest 6 minutes ago

172.64.198.223 is on our whitelist as Cloudflare Reverse Proxy via the subnet 172.64.0.0/13.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇵🇱 Poland
City: Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

70 from 30 distinct reporters

First reported

December 7th 2025

Most recent report

6 minutes ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 31 🇩🇪 Germany 5 🇫🇷 France 4

Most common categories Web App Attack 47 Brute-Force 32 Bad Web Bot 30 Port Scan 3 Exploited Host 2

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-10 10:35:11 UTC · (6 minutes ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:35:07.621669 2026] [security2:error] [pid 8684:tid 8684] [client 172.64.198.223:13968] M ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:35:07.621669 2026] [security2:error] [pid 8684:tid 8684] [client 172.64.198.223:13968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emailautomationworkflow.wholesalelivelobsters.com"] [uri "/.git/HEAD"] [unique_id "avLzW2fniY90sZgJpM8-RgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 00:41:46 UTC · (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:41:39.628117 2026] [security2:error] [pid 6139:tid 6139] [client 172.64.198.223:12048] M ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:41:39.628117 2026] [security2:error] [pid 6139:tid 6139] [client 172.64.198.223:12048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mwrn.com"] [uri "/.git/config"] [unique_id "avJoQwTbRpepCOZlnE_lXgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 pm33	2026-11-09 22:10:09 UTC · (12 hours ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 17:09:19 UTC · (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:09:16.133343 2026] [security2:error] [pid 17560:tid 17560] [client 172.64.198.223:10790] ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:09:16.133343 2026] [security2:error] [pid 17560:tid 17560] [client 172.64.198.223:10790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.csennews.com"] [uri "/.git/config"] [unique_id "avH-PGOZj9LGQxTNE599NQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 16:47:27 UTC · (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:47:20.439015 2026] [security2:error] [pid 21317:tid 21317] [client 172.64.198.223:9410] ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:47:20.439015 2026] [security2:error] [pid 21317:tid 21317] [client 172.64.198.223:9410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ji-technovation.com"] [uri "/.git/config"] [unique_id "avH5GL1uWVgGN1uWEf4xIgAAADE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 13:07:08 UTC · (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:07:02.291724 2026] [security2:error] [pid 19949:tid 19949] [client 172.64.198.223:12454] ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:07:02.291724 2026] [security2:error] [pid 19949:tid 19949] [client 172.64.198.223:12454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.cdphotography.us"] [uri "/.git/HEAD"] [unique_id "avHFdoPrX7fRLGe4WDFDcgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 09:48:38 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:48:32.628702 2026] [security2:error] [pid 6639:tid 6639] [client 172.64.198.223:11151] M ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:48:32.628702 2026] [security2:error] [pid 6639:tid 6639] [client 172.64.198.223:11151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fallsgreatestcookies.dc406.org"] [uri "/.git/HEAD"] [unique_id "avGW8DhlJXOCUTOsIyRacgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 09:12:30 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:12:22.818224 2026] [security2:error] [pid 15874:tid 15874] [client 172.64.198.223:11206] ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:12:22.818224 2026] [security2:error] [pid 15874:tid 15874] [client 172.64.198.223:11206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jaykaydrone.krakowski.net"] [uri "/.git/HEAD"] [unique_id "avGOduBUpgsBvntZeOkLAgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 cleverest.eu	2026-11-09 08:18:00 UTC · (1 day ago)	MimirWAF has 1 incident from 1 distinct domain => {"bad_request_uri / vcs_probe"}	Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 07:22:39 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:22:36.027158 2026] [security2:error] [pid 6423:tid 6423] [client 172.64.198.223:9827] Mo ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:22:36.027158 2026] [security2:error] [pid 6423:tid 6423] [client 172.64.198.223:9827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whoownsmyhome.com"] [uri "/.git/config"] [unique_id "avF0vNwjoC1V-2nocFpGrwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 05:35:17 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:35:10.751751 2026] [security2:error] [pid 19217:tid 19217] [client 172.64.198.223:9278] ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:35:10.751751 2026] [security2:error] [pid 19217:tid 19217] [client 172.64.198.223:9278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hygeiamedical.icu"] [uri "/.git/config"] [unique_id "avFbjio7q8zUcM7FwtwPQAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 02:09:14 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:09:07.464271 2026] [security2:error] [pid 7244:tid 7244] [client 172.64.198.223:10266] M ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:09:07.464271 2026] [security2:error] [pid 7244:tid 7244] [client 172.64.198.223:10266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.picklebillystayandplay.com"] [uri "/.git/HEAD"] [unique_id "avErQ9mQw4ILZLQaPv-i9wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 01:12:45 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:12:38.178239 2026] [security2:error] [pid 29777:tid 29777] [client 172.64.198.223:10479] ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:12:38.178239 2026] [security2:error] [pid 29777:tid 29777] [client 172.64.198.223:10479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.fruitsinthedesert.com"] [uri "/.git/config"] [unique_id "avEeBmfQEHGsgBQhtwJkTAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 00:18:15 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:18:12.482495 2026] [security2:error] [pid 25615:tid 25617] [client 172.64.198.223:12387] ... show more (mod_security) mod_security (id:210492) triggered by 172.64.198.223 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:18:12.482495 2026] [security2:error] [pid 25615:tid 25617] [client 172.64.198.223:12387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.wwjnd.com"] [uri "/.git/HEAD"] [unique_id "avERRKRo8I5LJCVvNhnCjQAAAMA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 uthul	2026-11-09 00:09:47 UTC · (1 day ago)	T-Pot honeypot: 10 hits on ports [443] (automated)	Port Scan Web App Attack

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 144.217.135.149

🇺🇸 104.22.101.158

🇫🇷 85.217.140.40

🇨🇳 60.25.71.28

🇮🇩 39.194.0.62

🇵🇪 38.226.210.90

🇬🇧 216.226.76.20

🇬🇪 213.200.31.214

🇰🇷 175.209.156.146

🇺🇸 161.35.52.151

🇨🇳 39.99.236.33

🇧🇪 35.195.41.101

🇷🇺 31.29.142.197

🇬🇧 5.226.140.52

🇬🇧 5.226.140.11

🇧🇷 205.210.31.168

🇪🇬 196.219.81.254

🇳🇱 195.178.110.94

🇬🇧 188.240.59.16

🇬🇧 185.69.145.208