JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.68.164.20

172.68.164.20 was found in our database!

This IP was reported 133 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 172.68.164.20 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.68.164.20

Whois 172.68.164.20

IP Abuse Reports for 172.68.164.20:

This IP address has been reported a total of 133 times from 20 distinct sources. 172.68.164.20 was first reported on December 3rd 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-03 17:47:55 (6 days ago)	[Fri Jul 03 19:47:53.193487 2026] [authz_core:error] [pid 30482] [client 172.68.164.20:11891] AH0163 ... show more [Fri Jul 03 19:47:53.193487 2026] [authz_core:error] [pid 30482] [client 172.68.164.20:11891] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Jul 03 19:47:54.172118 2026] [authz_core:error] [pid 30482] [client 172.68.164.20:11891] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Jul 03 19:47:54.571713 2026] [authz_core:error] [pid 30482] [client 172.68.164.20:11891] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-07-03 00:37:27 (6 days ago)	[Fri Jul 03 02:37:25.929574 2026] [authz_core:error] [pid 5772] [client 172.68.164.20:10361] AH01630 ... show more [Fri Jul 03 02:37:25.929574 2026] [authz_core:error] [pid 5772] [client 172.68.164.20:10361] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Jul 03 02:37:26.456676 2026] [authz_core:error] [pid 5772] [client 172.68.164.20:10361] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Jul 03 02:37:26.814867 2026] [authz_core:error] [pid 5772] [client 172.68.164.20:10361] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-06-25 08:45:09 (2 weeks ago)	172.68.164.20 - - [25/Jun/2026:10:45:08 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ... show more 172.68.164.20 - - [25/Jun/2026:10:45:08 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 172.68.164.20 - - [25/Jun/2026:10:45:08 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 172.68.164.20 - - [25/Jun/2026:10:45:09 +0200] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 172.68.164.20 - - [25/Jun/2026:10:45:09 +0200] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 172.68.164.20 - - [25/Jun/2026:10:45:09 +0200] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1 ... show less	Brute-Force Web App Attack
🇬🇧 OptimusGO	2026-06-22 02:44:14 (2 weeks ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-06-22 03:44:14 UTC Log evidence: 172.68.164.20 - - [22/Jun/2026:03:44:10 +0100] "POST /graphql/api HTTP/1.1" 404 118 "-" "Mozilla/5.0 (l9scan/2.0.534323e2835313e27363e2237313; +https://leakix.net)" 06/22/2026-03:44:10.516406 [] [1:2033603:1] ET EXPLOIT GraphQL Introspection Query Attempt [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 172.68.164.20:10440 -> 185.127.18.66:80 06/22/2026-03:44:10.516406 [] [1:2049255:1] ET SCAN LeakIX Inbound User-Agent [] [Classification: Misc activity] [Priority: 3] {TCP} 172.68.164.20:10440 -> 185.127.18.66:80 show less	Port Scan Brute-Force
Anonymous	2026-05-27 08:20:42 (1 month ago)	[Wed May 27 10:20:40.948835 2026] [authz_core:error] [pid 17841] [client 172.68.164.20:10132] AH0163 ... show more [Wed May 27 10:20:40.948835 2026] [authz_core:error] [pid 17841] [client 172.68.164.20:10132] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed May 27 10:20:41.474231 2026] [authz_core:error] [pid 17841] [client 172.68.164.20:10132] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed May 27 10:20:41.828600 2026] [authz_core:error] [pid 17841] [client 172.68.164.20:10132] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-10 02:52:56 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.68.164.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.68.164.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 22:52:47.606870 2026] [security2:error] [pid 10106:tid 10106] [client 172.68.164.20:12730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weroinc.com"] [uri "/.env.dev"] [unique_id "af_y_wK3gxwL_3FyvL_tOgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-08 13:38:03 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.164.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.68.164.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 09:37:36.466152 2026] [security2:error] [pid 1974:tid 1974] [client 172.68.164.20:9688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rimaine.org"] [uri "/.env.backup"] [unique_id "af3nIO1GUs2i_9xWcWwzugAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 17:50:05 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.164.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.68.164.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:49:47.770616 2026] [security2:error] [pid 18773:tid 18773] [client 172.68.164.20:9815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kirklandplumbing.ca"] [uri "/.git/config"] [unique_id "afzQuz-J0du6ELHOCVyuHAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-23 11:12:32 (4 months ago)	[Mon Feb 23 12:12:30.738381 2026] [authz_core:error] [pid 3479] [client 172.68.164.20:12411] AH01630 ... show more [Mon Feb 23 12:12:30.738381 2026] [authz_core:error] [pid 3479] [client 172.68.164.20:12411] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Feb 23 12:12:30.939295 2026] [authz_core:error] [pid 3479] [client 172.68.164.20:12411] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Feb 23 12:12:31.129436 2026] [authz_core:error] [pid 3479] [client 172.68.164.20:12411] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-02-17 17:35:35 (4 months ago)	[Tue Feb 17 18:35:33.641974 2026] [authz_core:error] [pid 7181] [client 172.68.164.20:10847] AH01630 ... show more [Tue Feb 17 18:35:33.641974 2026] [authz_core:error] [pid 7181] [client 172.68.164.20:10847] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Feb 17 18:35:33.952551 2026] [authz_core:error] [pid 7181] [client 172.68.164.20:10847] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Feb 17 18:35:34.453688 2026] [authz_core:error] [pid 7181] [client 172.68.164.20:10847] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇷🇴 ReporTR	2026-02-12 09:23:20 (4 months ago)	Repeated malicious activity detected by Fail2Ban jail 'plesk-panel'. TCP connection completed. IP ba ... show more Repeated malicious activity detected by Fail2Ban jail 'plesk-panel'. TCP connection completed. IP banned. show less	Hacking
Anonymous	2026-02-05 18:44:33 (5 months ago)	[Thu Feb 05 19:44:31.900532 2026] [authz_core:error] [pid 17067] [client 172.68.164.20:11955] AH0163 ... show more [Thu Feb 05 19:44:31.900532 2026] [authz_core:error] [pid 17067] [client 172.68.164.20:11955] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Feb 05 19:44:32.124618 2026] [authz_core:error] [pid 17067] [client 172.68.164.20:11955] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Feb 05 19:44:32.887422 2026] [authz_core:error] [pid 17067] [client 172.68.164.20:11955] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-01-10 16:32:16 (5 months ago)	[Sat Jan 10 17:25:16.780878 2026] [authz_core:error] [pid 11890] [client 172.68.164.20:11935] AH0163 ... show more [Sat Jan 10 17:25:16.780878 2026] [authz_core:error] [pid 11890] [client 172.68.164.20:11935] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Jan 10 17:31:38.174937 2026] [authz_core:error] [pid 10930] [client 172.68.164.20:11137] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Jan 10 17:32:15.983125 2026] [authz_core:error] [pid 12874] [client 172.68.164.20:11296] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-01-04 13:55:06 (6 months ago)	[Sun Jan 04 14:54:58.353379 2026] [authz_core:error] [pid 4383] [client 172.68.164.20:13234] AH01630 ... show more [Sun Jan 04 14:54:58.353379 2026] [authz_core:error] [pid 4383] [client 172.68.164.20:13234] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jan 04 14:55:05.102419 2026] [authz_core:error] [pid 4776] [client 172.68.164.20:13239] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jan 04 14:55:05.299051 2026] [authz_core:error] [pid 4776] [client 172.68.164.20:13239] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2025-12-29 00:57:58 (6 months ago)	[Mon Dec 29 01:57:57.840882 2025] [authz_core:error] [pid 7866] [client 172.68.164.20:11117] AH01630 ... show more [Mon Dec 29 01:57:57.840882 2025] [authz_core:error] [pid 7866] [client 172.68.164.20:11117] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.de/ [Mon Dec 29 01:57:58.105736 2025] [authz_core:error] [pid 7866] [client 172.68.164.20:11117] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.bing.com/ [Mon Dec 29 01:57:58.365446 2025] [authz_core:error] [pid 7866] [client 172.68.164.20:11117] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.de/ ... show less	Web App Attack

Showing 1 to 15 of 133 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.127

🇬🇧 195.96.139.66

🇺🇸 185.223.152.213

🇩🇪 167.94.146.43

🇮🇳 134.209.144.242

🇨🇳 118.196.34.237

🇨🇳 116.179.37.40

🇮🇳 103.171.169.185

🇸🇬 68.183.234.194

🇰🇷 222.239.251.12

🇺🇸 216.25.89.72

🇷🇴 193.46.255.86

🇬🇧 185.247.137.42

🇵🇱 176.53.159.198

🇷🇺 154.90.70.254

🇨🇳 116.179.37.38

🇸🇬 103.187.146.90

🇦🇪 95.182.94.67

🇧🇬 78.128.114.58

🇸🇬 47.82.54.27