This IP address has been reported a total of
13
times from
8 distinct
sources.
172.68.12.122 was first reported on
March 25th 2025 , and the most recent report was
48 minutes ago Belgium
with 2
reports;
Singapore
with 1
report.
The only category in these recent reports was:
Web App Attack
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇧🇪
madeit
2026-10-09 09:26:49
(48 minutes ago)
Web App Attack
2026-08-22 01:10:32
(1 month ago)
Automatic report - Vulnerability scan
/forum7/memberlist.php?mode=viewprofile&sid=6de20cc628899a9570 ...
show more
Automatic report - Vulnerability scan
/forum7/memberlist.php?mode=viewprofile&sid=6de20cc628899a9570781eafa40f7d5b&u=22
show less
Web App Attack
🇧🇪
madeit
2026-08-21 02:14:15
(1 month ago)
Web App Attack
2026-08-09 20:45:51
(1 month ago)
Automatic report - Vulnerability scan
/forum7/memberlist.php?mode=viewprofile&u=16430&sid=2213132afb ...
show more
Automatic report - Vulnerability scan
/forum7/memberlist.php?mode=viewprofile&u=16430&sid=2213132afb51ea3b82b3ccc355701a0f
show less
Web App Attack
2026-08-09 18:41:06
(1 month ago)
Automatic report - Vulnerability scan
/forum7/memberlist.php?mode=viewprofile&sid=0a553c2a2dec89528d ...
show more
Automatic report - Vulnerability scan
/forum7/memberlist.php?mode=viewprofile&sid=0a553c2a2dec89528dad54939b3079b9&u=16359
show less
Web App Attack
2026-08-07 21:10:53
(2 months ago)
Automatic report - Vulnerability scan
/forum7/memberlist.php?mode=viewprofile&sid=6a127515a8557fc2cb ...
show more
Automatic report - Vulnerability scan
/forum7/memberlist.php?mode=viewprofile&sid=6a127515a8557fc2cb6356a2cac4615d&u=4
show less
Web App Attack
2025-12-26 00:52:05
(9 months ago)
[Fri Dec 26 01:51:59.799755 2025] [authz_core:error] [pid 27115] [client 172.68.12.122:9296] AH01630 ...
show more
[Fri Dec 26 01:51:59.799755 2025] [authz_core:error] [pid 27115] [client 172.68.12.122:9296] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Dec 26 01:52:01.952313 2025] [authz_core:error] [pid 27115] [client 172.68.12.122:9296] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Dec 26 01:52:04.434764 2025] [authz_core:error] [pid 27115] [client 172.68.12.122:9296] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
2025-12-25 17:03:37
(9 months ago)
[Thu Dec 25 18:03:17.378479 2025] [authz_core:error] [pid 21359] [client 172.68.12.122:14331] AH0163 ...
show more
[Thu Dec 25 18:03:17.378479 2025] [authz_core:error] [pid 21359] [client 172.68.12.122:14331] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Dec 25 18:03:18.178086 2025] [authz_core:error] [pid 21359] [client 172.68.12.122:14331] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Dec 25 18:03:36.513323 2025] [authz_core:error] [pid 24499] [client 172.68.12.122:13339] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
🇺🇸
Paschen J Ki
2025-10-23 06:54:59
(11 months ago)
Blocked by UFW on 1 [8008/tcp]
Source port: 21387
TTL: 47
Packet length: 60
TOS: 0x00
This report w ...
show more
Blocked by UFW on 1 [8008/tcp]
Source port: 21387
TTL: 47
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇦🇺
screwlooseit.com.au
2025-07-31 16:56:10
(1 year ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
RU/Russia/-
Web App Attack
2025-07-25 07:12:59
(1 year ago)
IPS Event Trigger From Unknown IP
Hacking
🇺🇸
TPI-Abuse
2025-05-14 22:59:03
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 172.68.12.122 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.12.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 14 18:59:00.354380 2025] [security2:error] [pid 1594522:tid 1594522] [client 172.68.12.122:60244] [client 172.68.12.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eddysgroup.com"] [uri "/.env"] [unique_id "aCUgNB0eJ2873o_ST6JX4wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Study Bitcoin 🤗
2025-03-25 06:02:38
(1 year ago)
Port probe to tcp/2095 (nbx ser)
[srv125]
Port Scan
Showing 1 to
13
of 13 reports
