JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.68.159.164

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

67 reports

24 reporters · latest 2 minutes ago

172.68.159.164 is on our whitelist as Cloudflare Reverse Proxy via the subnet 172.64.0.0/13.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇵🇱 Poland
City: Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

67 from 24 distinct reporters

First reported

December 21st 2024

Most recent report

2 minutes ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 10 🇩🇪 Germany 4 🇧🇪 Belgium 3

Most common categories Web App Attack 19 Bad Web Bot 12 Brute-Force 12 Hacking 1 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 todix	2026-11-08 09:55:30 UTC · (2 minutes ago)	"GET /.git/config HTTP/2.0" 403 270 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"	Web App Attack
🇺🇦 URAN Publishing Service	2026-11-08 08:33:59 UTC · (1 hour ago)	[08/Nov/2026:10:33:59 +0200] -- 172.68.159.164 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 06:49:09 UTC · (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:49:04.342798 2026] [security2:error] [pid 22284:tid 22284] [client 172.68.159.164:13512] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:49:04.342798 2026] [security2:error] [pid 22284:tid 22284] [client 172.68.159.164:13512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qed-consulting.co"] [uri "/.git/HEAD"] [unique_id "avAbYDSpSnoaT6eTqpg0cAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Viks	2026-11-08 06:20:12 UTC · (3 hours ago)	HTTP vulnerability scanning: GET /.git/HEAD -> 403 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0	Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 03:29:24 UTC · (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:29:18.518359 2026] [security2:error] [pid 12851:tid 12851] [client 172.68.159.164:12356] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:29:18.518359 2026] [security2:error] [pid 12851:tid 12851] [client 172.68.159.164:12356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gwdailey.com"] [uri "/.git/HEAD"] [unique_id "au_sjklh_RK7y8GLk3vbZAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 02:36:05 UTC · (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:36:00.348623 2026] [security2:error] [pid 955:tid 955] [client 172.68.159.164:11045] Mod ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:36:00.348623 2026] [security2:error] [pid 955:tid 955] [client 172.68.159.164:11045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cincypcs.savingshvac.com"] [uri "/.git/HEAD"] [unique_id "au_gEB0ecACfBCd3uYKmmgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 02:09:24 UTC · (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:09:20.715726 2026] [security2:error] [pid 4333:tid 4333] [client 172.68.159.164:10764] M ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:09:20.715726 2026] [security2:error] [pid 4333:tid 4333] [client 172.68.159.164:10764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skomaxentertainment.com.alanmariotti.com"] [uri "/.git/HEAD"] [unique_id "au_Z0EHDAN1c0SiRroizZwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 01:04:15 UTC · (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:04:12.438164 2026] [security2:error] [pid 29933:tid 29933] [client 172.68.159.164:12629] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:04:12.438164 2026] [security2:error] [pid 29933:tid 29933] [client 172.68.159.164:12629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "text.joebankx.com"] [uri "/.git/HEAD"] [unique_id "au_KjK02wZ-TYo-W-DVm5gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 shurizma	2026-11-08 00:43:33 UTC · (9 hours ago)	[08/Nov/2026:00:43:32 +0000] - 403 403 - GET https dengifam.com "/.git/config" [Client 172.68.159.164] [Length 36] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" "-" ...	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-11-07 23:34:51 UTC · (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:34:47.542728 2026] [security2:error] [pid 19432:tid 19432] [client 172.68.159.164:10187] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:34:47.542728 2026] [security2:error] [pid 19432:tid 19432] [client 172.68.159.164:10187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cesadoruf.it"] [uri "/.git/HEAD"] [unique_id "au-1lxVthDMN3nxYFxbhTgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-07 21:58:18 UTC · (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:58:13.780135 2026] [security2:error] [pid 30788:tid 30788] [client 172.68.159.164:12550] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:58:13.780135 2026] [security2:error] [pid 30788:tid 30788] [client 172.68.159.164:12550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blacktvnow.com"] [uri "/.git/HEAD"] [unique_id "au-e9W5V6QXjRW-buMjKbAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-04 20:45:05 UTC · (3 days ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 15:44:54.714399 2026] [security2:error] [pid 976:tid 976] [client 172.68.159.164:11164] Mod ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 15:44:54.714399 2026] [security2:error] [pid 976:tid 976] [client 172.68.159.164:11164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "katlin.anthonyjoseph.us"] [uri "/.git/HEAD"] [unique_id "auuZRvbWVEsr8d6uJZ02pQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-04 08:26:22 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 03:26:16.747483 2026] [security2:error] [pid 558809:tid 558985] [client 172.68.159.164:9756 ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 03:26:16.747483 2026] [security2:error] [pid 558809:tid 558985] [client 172.68.159.164:9756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emmaryan.yrcs.net"] [uri "/.git/HEAD"] [unique_id "aursKOAP6rY4x3NewRQ9yQAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-02 16:45:28 UTC · (5 days ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:45:20.796042 2026] [security2:error] [pid 14935:tid 14935] [client 172.68.159.164:13021] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:45:20.796042 2026] [security2:error] [pid 14935:tid 14935] [client 172.68.159.164:13021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clinc.rcto.us"] [uri "/.git/HEAD"] [unique_id "aui-IJf_c8OKlViCP2ihDQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LoneRider	2026-10-28 08:52:53 UTC · (1 week ago)	[28/Oct/2026:09:52:52.583953 +0100] auG35MjPpnr2upTAhz879AAAAAU 172.68.159.164 41428 127.0.0.1 7081 [28/Oct/2026:09:52:52.900420 +0100] auG35HvqZY-nKMDmo_S6HAAAAAM 172.68.159.164 41458 127.0.0.1 7081 [28/Oct/2026:09:52:53.182294 +0100] auG35eJdA5bJ-_ ... show more [28/Oct/2026:09:52:52.583953 +0100] auG35MjPpnr2upTAhz879AAAAAU 172.68.159.164 41428 127.0.0.1 7081 [28/Oct/2026:09:52:52.900420 +0100] auG35HvqZY-nKMDmo_S6HAAAAAM 172.68.159.164 41458 127.0.0.1 7081 [28/Oct/2026:09:52:53.182294 +0100] auG35eJdA5bJ-_4RrWDEgwAAAAo 172.68.159.164 41484 127.0.0.1 7081 ... show less	Hacking

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇾 118.100.218.248

🇺🇸 66.132.159.80

🇺🇸 24.102.176.24

🇺🇸 20.168.117.95

🇳🇱 193.47.62.167

🇨🇳 183.222.174.168

🇺🇾 167.57.105.142

🇷🇴 138.199.53.245

🇻🇳 118.69.65.12

🇫🇷 104.28.42.20

🇷🇺 95.170.119.100

🇳🇱 93.123.109.9

🇺🇸 66.132.195.126

🇸🇬 62.146.233.159

🇸🇬 20.184.59.236

🇺🇸 20.124.84.235

🇩🇪 8.211.39.142

🇬🇧 185.216.145.179

🇧🇷 179.48.18.42

🇸🇬 45.78.194.242