172.68.159.66

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. Whitelisted Subnet

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Abuse Confidence Score
0% Low Risk
51 reports
16 reporters Β· latest 7 hours ago

172.68.159.66 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
πŸ‡΅πŸ‡± Poland
City
Warsaw, Mazovia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
51 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡§πŸ‡ͺ Belgium 2 πŸ‡ΊπŸ‡Έ United States of America 2 πŸ‡§πŸ‡¬ Bulgaria 1
Most common categories Web App Attack 4 Hacking 2 Bad Web Bot 1 Brute-Force 1 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡§πŸ‡¬ Stoyko Stoykov
172.68.159.66 - - [28/Oct/2026:16:44:28 +0200] "GET /wp/wp-json/ HTTP/2.0" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ...
Hacking Web App Attack
πŸ‡«πŸ‡· vincent_EUDIER
SURICATA HTTP unable to match response to request
Hacking
πŸ‡ΊπŸ‡Έ TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
πŸ‡§πŸ‡ͺ madeit
Web App Attack
πŸ‡§πŸ‡ͺ madeit
Web App Attack
πŸ‡ΊπŸ‡Έ MPL
tcp/443 (5 or more attempts)
Port Scan
πŸ‡§πŸ‡ͺ madeit
Web App Attack
Anonymous
invalid request
Bad Web Bot Web App Attack
πŸ‡¦πŸ‡Ί trentwiles.com
Unauthorized connection attempt detected from IP address 172.68.159.66 to port 443 [SYD]
Port Scan
πŸ‡΅πŸ‡± IROK
Malware/WebShell Scan blocked by ModSecurity ...
Hacking
πŸ‡¬πŸ‡§ OptimusGO
Port Scan Brute-Force
πŸ‡ΈπŸ‡ͺ vaia.cloud
trying wp-login.php/xmlrpc.php 69 times in 1 minutes
Brute-Force Web App Attack
Anonymous
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force SSH
Anonymous
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force SSH
Anonymous
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡ΊπŸ‡Έ 193.56.116.78
πŸ‡³πŸ‡± 193.47.62.69
πŸ‡«πŸ‡· 173.249.52.138
πŸ‡ΏπŸ‡¦ 160.119.55.58
πŸ‡«πŸ‡· 78.155.152.231
πŸ‡©πŸ‡ͺ 77.83.25.25
πŸ‡³πŸ‡± 62.197.45.211
πŸ‡§πŸ‡· 200.175.149.58
πŸ‡³πŸ‡± 200.138.46.39
πŸ‡΅πŸ‡­ 138.84.69.115
πŸ‡·πŸ‡Ί 95.139.199.217
πŸ‡³πŸ‡± 77.91.71.91
πŸ‡ΊπŸ‡Έ 212.87.216.164
πŸ‡²πŸ‡½ 187.136.110.170
πŸ‡ΊπŸ‡Έ 162.216.149.248
πŸ‡ΊπŸ‡Έ 162.216.149.146
πŸ‡ΊπŸ‡Έ 150.136.214.177
πŸ‡ΉπŸ‡­ 110.49.76.244
πŸ‡ΊπŸ‡Έ 54.166.203.225
πŸ‡ΊπŸ‡Έ 50.117.36.65