JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.68.159.61

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

73 reports

23 reporters · latest 1 day ago

172.68.159.61 is on our whitelist as Cloudflare Reverse Proxy via the subnet 172.64.0.0/13.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇵🇱 Poland
City: Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

73 from 23 distinct reporters

First reported

June 29th 2024

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 12 🇨🇿 Czechia 3 🇩🇪 Germany 2

Most common categories Web App Attack 17 Brute-Force 17 Bad Web Bot 14 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-10 09:53:12 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:53:06.055354 2026] [security2:error] [pid 25877:tid 25877] [client 172.68.159.61:12832] M ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:53:06.055354 2026] [security2:error] [pid 25877:tid 25877] [client 172.68.159.61:12832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cg-assembly.cgautomatizacion.com"] [uri "/.git/config"] [unique_id "avLpglLsofey6y2oCI3C2QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 07:46:14 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:46:07.048386 2026] [security2:error] [pid 3055:tid 3055] [client 172.68.159.61:11934] Mod ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:46:07.048386 2026] [security2:error] [pid 3055:tid 3055] [client 172.68.159.61:11934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "media.l3l4.com"] [uri "/.git/HEAD"] [unique_id "avLLv9G2m4J4YndjfPcjeQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 02:45:31 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:45:28.123414 2026] [security2:error] [pid 12722:tid 12779] [client 172.68.159.61:12318] M ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:45:28.123414 2026] [security2:error] [pid 12722:tid 12779] [client 172.68.159.61:12318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.shieldsenterprisesusa.com"] [uri "/.git/HEAD"] [unique_id "avKFSEDHnCApXwALFiJFJAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 03:42:55 UTC · (3 days ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:42:48.700823 2026] [security2:error] [pid 17754:tid 17754] [client 172.68.159.61:11315] M ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:42:48.700823 2026] [security2:error] [pid 17754:tid 17754] [client 172.68.159.61:11315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pakistanvision.com"] [uri "/.git/HEAD"] [unique_id "au_vuJIgWclDgQkwYuuchwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-11-01 09:38:02 UTC · (1 week ago)	172.68.159.61 - - [01/Nov/2026:10:38:01 +0100] "GET /.git/config HTTP/2.0" 404 275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ...	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-01 06:50:36 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:50:30.807702 2026] [security2:error] [pid 17832:tid 17832] [client 172.68.159.61:10000] M ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:50:30.807702 2026] [security2:error] [pid 17832:tid 17832] [client 172.68.159.61:10000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skomaxentertainment.com.alanmariotti.com"] [uri "/.git/HEAD"] [unique_id "aubhNq62LNg0a8VZn74uwAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-31 21:23:48 UTC · (1 week ago)	IP matched detection query many 3xx errors.	Brute-Force
Anonymous	2026-10-26 12:36:28 UTC · (2 weeks ago)	IP matched detection query Detection of too many failed responses.	Brute-Force Bad Web Bot Hacking
🇺🇸 TPI-Abuse	2026-10-25 02:01:29 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:01:22.913957 2026] [security2:error] [pid 13188:tid 13188] [client 172.68.159.61:10099] M ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:01:22.913957 2026] [security2:error] [pid 13188:tid 13188] [client 172.68.159.61:10099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.garbothemusical.net"] [uri "/.git/HEAD"] [unique_id "at1i8vyP_AImpgCAsU_RxgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-24 03:38:56 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 23:38:51.842474 2026] [security2:error] [pid 20049:tid 20049] [client 172.68.159.61:10893] M ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 23:38:51.842474 2026] [security2:error] [pid 20049:tid 20049] [client 172.68.159.61:10893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.fales-lorenz.net"] [uri "/.git/HEAD"] [unique_id "atwoS1RiTTBNtcvo_7TjwAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 04:57:50 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:57:45.638661 2026] [security2:error] [pid 27302:tid 27302] [client 172.68.159.61:9439] Mo ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:57:45.638661 2026] [security2:error] [pid 27302:tid 27302] [client 172.68.159.61:9439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gulfgym.gulftelecom.com"] [uri "/.git/config"] [unique_id "atmXyQFnLzhJ1UpafqKWAQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 04:04:39 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:04:35.279377 2026] [security2:error] [pid 20146:tid 20146] [client 172.68.159.61:13448] M ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:04:35.279377 2026] [security2:error] [pid 20146:tid 20146] [client 172.68.159.61:13448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.edmontonwaterjet.com"] [uri "/.git/HEAD"] [unique_id "atmLU4o2zDYT3QObmeL09gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 23:43:48 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:43:40.798535 2026] [security2:error] [pid 30931:tid 30931] [client 172.68.159.61:11303] M ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:43:40.798535 2026] [security2:error] [pid 30931:tid 30931] [client 172.68.159.61:11303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jeremyurbanski.com"] [uri "/.git/HEAD"] [unique_id "atlOLHWKW0dF-U3A9ClYpQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 22:09:39 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 18:09:36.074364 2026] [security2:error] [pid 1565:tid 1565] [client 172.68.159.61:14234] Mod ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 18:09:36.074364 2026] [security2:error] [pid 1565:tid 1565] [client 172.68.159.61:14234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.brytonmarsh.com"] [uri "/.git/HEAD"] [unique_id "atk4IOtBSwp-ySgasg9XhAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 21:44:51 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 17:44:45.214289 2026] [security2:error] [pid 8618:tid 8668] [client 172.68.159.61:12603] Mod ... show more (mod_security) mod_security (id:210492) triggered by 172.68.159.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 17:44:45.214289 2026] [security2:error] [pid 8618:tid 8668] [client 172.68.159.61:12603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.koalacogs.com"] [uri "/.git/config"] [unique_id "atkyTdPjf_FOa9xr5HXgEgAAAVQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 176.115.253.91

🇸🇪 89.160.102.76

🇩🇪 69.5.169.19

🇫🇷 46.105.42.96

🇩🇪 2a01:4020:31:0:102::b2

🇳🇱 2a01:4020:2:b:103::67e

🇬🇧 2a01:4020:1:1:102::406

🇲🇾 202.184.148.229

🇬🇧 198.244.168.172

🇩🇪 194.88.98.85

🇧🇷 177.74.153.10

🇮🇹 95.74.139.52

🇰🇷 59.15.58.148

🇯🇵 34.97.206.143

🇺🇸 20.168.123.59

🇳🇱 2.56.10.36

🇺🇸 2a03:2880:f806:6::

🇳🇱 2a01:4020:2:b:103::54f

🇳🇱 2a01:4020:2:b:103::261

🇬🇧 2a01:4020:1:1:101::1de