JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.68.159.216

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

56 reports

16 reporters · latest 1 minute ago

172.68.159.216 is on our whitelist as Cloudflare Reverse Proxy via the subnet 172.64.0.0/13.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇵🇱 Poland
City: Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

56 from 16 distinct reporters

First reported

March 14th 2025

Most recent report

1 minute ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 12 🇧🇪 Belgium 2 🇮🇹 Italy 1

Most common categories Web App Attack 16 Bad Web Bot 13 Brute-Force 12

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-11-08 07:28:05 UTC · (1 minute ago)	[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.216 - - [08/Nov/2026:08:27:53 +0100] "GET /.git/config HTTP/2.0" 404 49359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ ... show more [ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.216 - - [08/Nov/2026:08:27:53 +0100] "GET /.git/config HTTP/2.0" 404 49359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 06:38:50 UTC · (50 minutes ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:38:46.136229 2026] [security2:error] [pid 20345:tid 20345] [client 172.68.159.216:12133] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:38:46.136229 2026] [security2:error] [pid 20345:tid 20345] [client 172.68.159.216:12133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "winformation.us"] [uri "/.git/config"] [unique_id "avAY9gnCIW3X0YGnJ7vRkQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-11-08 04:48:56 UTC · (2 hours ago)	cloudlinux2 fail2ban: 2026-11-08 05:44:42,563 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 45.131.193.214 - 2026-11-08 05:44:41cloudlinux2 fail2ban: 2026-11-08 05:45:12,417 fail2ban.filter [1672]: INFO [plesk-wordpress] ... show more cloudlinux2 fail2ban: 2026-11-08 05:44:42,563 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 45.131.193.214 - 2026-11-08 05:44:41cloudlinux2 fail2ban: 2026-11-08 05:45:12,417 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 45.132.115.158 - 2026-11-08 05:45:11cloudlinux2 fail2ban: 2026-11-08 05:45:16,246 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 45.132.115.158 - 2026-11-08 05:45:15cloudlinux2 fail2ban: 2026-11-08 05:45:17,302 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 45.132.115.165 - 2026-11-08 05:45:16cloudlinux2 fail2ban: 2026-11-08 05:46:05,211 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 45.131.193.81 - 2026-11-08 05:46:04cloudlinux2 fail2ban: 2026-11-08 05:46:01,088 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 45.131.193.81 - 2026-11-08 05:46:00cloudlinux2 fail2ban: 2026-11-08 05:46:38,897 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 172.68.159.216 - 2026-11-08 05:46:38cl show less	Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 03:29:24 UTC · (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:29:18.522455 2026] [security2:error] [pid 10671:tid 10671] [client 172.68.159.216:13362] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:29:18.522455 2026] [security2:error] [pid 10671:tid 10671] [client 172.68.159.216:13362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gwdailey.com"] [uri "/.git/config"] [unique_id "au_sjpWp0oCGh41KpvSi-AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 02:59:07 UTC · (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:58:59.364808 2026] [security2:error] [pid 17973:tid 17973] [client 172.68.159.216:10120] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:58:59.364808 2026] [security2:error] [pid 17973:tid 17973] [client 172.68.159.216:10120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "systemcapacityoptimization.com"] [uri "/.git/HEAD"] [unique_id "au_lc2Y3PXkfPjn9ll_KZQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 02:29:11 UTC · (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:29:07.363708 2026] [security2:error] [pid 12695:tid 12695] [client 172.68.159.216:10962] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:29:07.363708 2026] [security2:error] [pid 12695:tid 12695] [client 172.68.159.216:10962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "firstclasstreatment.com"] [uri "/.git/config"] [unique_id "au_ec9Tqbrrdhq7zv2RSdQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 02:01:36 UTC · (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:01:31.952628 2026] [security2:error] [pid 26652:tid 26652] [client 172.68.159.216:13156] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:01:31.952628 2026] [security2:error] [pid 26652:tid 26652] [client 172.68.159.216:13156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roughexports.com"] [uri "/.git/config"] [unique_id "au_X-8rRqjIGYbbNGU8OGQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 01:44:18 UTC · (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:44:09.515236 2026] [security2:error] [pid 10115:tid 10115] [client 172.68.159.216:10842] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:44:09.515236 2026] [security2:error] [pid 10115:tid 10115] [client 172.68.159.216:10842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "denemeblog.osmanbozkurt.com"] [uri "/.git/HEAD"] [unique_id "au_T6YENYe-hGDENcCEUjgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-07 22:45:21 UTC · (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:45:18.259546 2026] [security2:error] [pid 14369:tid 14369] [client 172.68.159.216:9894] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:45:18.259546 2026] [security2:error] [pid 14369:tid 14369] [client 172.68.159.216:9894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eb3d.net"] [uri "/.git/config"] [unique_id "au-p_i2yckQ3OL2laAcnTAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-07 22:01:35 UTC · (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:01:28.223875 2026] [security2:error] [pid 2386530:tid 2386632] [client 172.68.159.216:12 ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:01:28.223875 2026] [security2:error] [pid 2386530:tid 2386632] [client 172.68.159.216:12366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "number1synthetic.com"] [uri "/.git/HEAD"] [unique_id "au-fuHk6F77-mPoFoFhDggAAAk0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-07 21:38:17 UTC · (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:38:13.619295 2026] [security2:error] [pid 32056:tid 32056] [client 172.68.159.216:12159] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:38:13.619295 2026] [security2:error] [pid 32056:tid 32056] [client 172.68.159.216:12159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluepointstudios.com"] [uri "/.git/HEAD"] [unique_id "au-aRUqtM1n-EHDW7iMeKQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-01 14:43:53 UTC · (6 days ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 09:43:47.335730 2026] [security2:error] [pid 29786:tid 29814] [client 172.68.159.216:12782] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 09:43:47.335730 2026] [security2:error] [pid 29786:tid 29814] [client 172.68.159.216:12782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "upperwilds.com.danfriel.com"] [uri "/.git/config"] [unique_id "audQI1I56GL23rnGRvHkswAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 03:57:08 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 23:57:03.733216 2026] [security2:error] [pid 3621:tid 3621] [client 172.68.159.216:12800] M ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 23:57:03.733216 2026] [security2:error] [pid 3621:tid 3621] [client 172.68.159.216:12800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.concertosupport.com"] [uri "/.git/config"] [unique_id "atmJjwuqRE_XI_mDNaNq0wAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 01:11:09 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 21:11:02.220254 2026] [security2:error] [pid 29873:tid 29873] [client 172.68.159.216:10867] ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 21:11:02.220254 2026] [security2:error] [pid 29873:tid 29873] [client 172.68.159.216:10867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nekstlevel.com"] [uri "/.git/HEAD"] [unique_id "atliptnlOdvAhN6OwB3ERQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-10-21 08:41:22 UTC · (2 weeks ago)		Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 207.175.199.114

🇨🇳 39.104.64.139

🇿🇦 20.87.24.214

🇺🇸 184.16.85.247

🇺🇸 152.32.206.49

🇺🇸 148.153.56.170

🇺🇸 5.183.252.66

🇺🇸 198.199.68.21

🇧🇷 179.96.190.201

🇫🇷 163.172.66.206

🇺🇸 137.184.210.110

🇷🇺 95.163.243.162

🇧🇼 83.143.30.70

🇫🇷 51.91.237.124

🇧🇪 35.210.186.108

🇺🇸 20.96.179.87

🇫🇮 147.185.133.152

🇳🇱 77.239.124.112

🇺🇸 34.238.192.196

🇨🇳 221.229.218.50