JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.68.210.12

Neutral Activity Whitelisted Subnet

Abuse confidence score ?

0% Low Risk

109 reports

25 reporters · latest 14 hours ago

172.68.210.12 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 172.68.210.12

This IP address has been reported a total of 109 times from 25 distinct sources. 172.68.210.12 was first reported on April 17th 2022, and the most recent report was 14 hours ago. In the last 60 days, the top reporter locations were: Japan with 1 report; United States of America with 1 report. The most common categories in these recent reports were: Port Scan 1 time; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chrisj	2026-09-26 20:37:51 (14 hours ago)	[Sat Sep 26 20:37:49.849314 2026] [proxy_fcgi:error] [pid 210177:tid 210192] [remote 172.68.210.12:1 ... show more [Sat Sep 26 20:37:49.849314 2026] [proxy_fcgi:error] [pid 210177:tid 210192] [remote 172.68.210.12:13485] AH01071: Got error 'Primary script unknown' [Sat Sep 26 20:37:50.318135 2026] [proxy_fcgi:error] [pid 210177:tid 210193] [remote 172.68.210.12:13485] AH01071: Got error 'Primary script unknown' [Sat Sep 26 20:37:50.784723 2026] [proxy_fcgi:error] [pid 210177:tid 210179] [remote 172.68.210.12:13485] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇯🇵 S.O.B.A. Dev.	2026-09-15 10:37:23 (1 week ago)	Persistent port scanning or vulnerability scanning	Port Scan
Anonymous	2026-06-22 00:28:27 (3 months ago)	(caddyscan) Scanner path probe from 172.68.210.12 (AU/Australia/-): 5 in the last 3600 secs; Ports: ... show more (caddyscan) Scanner path probe from 172.68.210.12 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.68.210.12 - - [22/Jun/2026:00:28:21 +0000] "GET /html/.env HTTP/1.1" [REDACTED] 200 2627 172.68.210.12 - - [22/Jun/2026:00:28:21 +0000] "GET /live/.env HTTP/1.1" [REDACTED] 200 2627 172.68.210.12 - - [22/Jun/2026:00:28:22 +0000] "GET /prod/.env HTTP/1.1" [REDACTED] 200 2627 172.68.210.12 - - [22/Jun/2026:00:28:22 +0000] "GET /staging/.env HTTP/1.1" [REDACTED] 200 2627 172.68.210.12 - - [22/Jun/2026:00:28:22 +0000] "GET /opt/.env HTTP/1.1" show less	Port Scan
Anonymous	2026-05-08 04:41:19 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-04-08 11:13:14 (5 months ago)	172.68.210.12 - - [08/Apr/2026:13:13:12 +0200] "GET /wp-includes/IXR/ HTTP/1.0" 404 460 "-" "Mozilla ... show more 172.68.210.12 - - [08/Apr/2026:13:13:12 +0200] "GET /wp-includes/IXR/ HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [08/Apr/2026:13:13:12 +0200] "GET /wp-includes/IXR/ HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [08/Apr/2026:13:13:13 +0200] "GET /wp-includes/css/ HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [08/Apr/2026:13:13:13 +0200] "GET /wp-includes/css/ HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [08/Apr/2026:13:13:13 +0200] "GET /wp-includes/sitemaps/ HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck ... show less	Brute-Force Web App Attack
Anonymous	2026-04-06 21:45:25 (5 months ago)	172.68.210.12 - - [06/Apr/2026:23:45:24 +0200] "GET /wp-includes/ HTTP/1.0" 404 460 "-" "Mozilla/5.0 ... show more 172.68.210.12 - - [06/Apr/2026:23:45:24 +0200] "GET /wp-includes/ HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [06/Apr/2026:23:45:24 +0200] "GET /wp-includes/ HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [06/Apr/2026:23:45:24 +0200] "GET /wp-includes/rest-api/fields/ HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [06/Apr/2026:23:45:24 +0200] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [06/Apr/2026:23:45:25 +0200] "GET /wp-includes/Text/ HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTM ... show less	Brute-Force Web App Attack
🇩🇪 acadeova	2026-03-30 11:08:43 (5 months ago)	🚨 Recon detected (nft drop) SRC=172.68.210.12 Observed=TCP dpt=80 in=enp0s6 ttl=53 Time=recent(journ ... show more 🚨 Recon detected (nft drop) SRC=172.68.210.12 Observed=TCP dpt=80 in=enp0s6 ttl=53 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
Anonymous	2026-03-22 04:09:29 (6 months ago)	172.68.210.12 - - [22/Mar/2026:06:09:27 +0200] "GET /wp-content/autoload_classmap.php HTTP/1.0" 404 ... show more 172.68.210.12 - - [22/Mar/2026:06:09:27 +0200] "GET /wp-content/autoload_classmap.php HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [22/Mar/2026:06:09:27 +0200] "GET /wp-content/autoload_classmap.php HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [22/Mar/2026:06:09:27 +0200] "GET /wp-includes/ID3/index.php HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [22/Mar/2026:06:09:27 +0200] "GET /wp-includes/ID3/index.php HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [22/Mar/2026:06:09:28 +0200] "GET /wp-content/autoload_classmap.php HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Wind ... show less	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-03-12 16:29:10 (6 months ago)	172.68.210.12 - - [12/Mar/2026:18:29:06 +0200] "GET /wp-content/uploads/index.php HTTP/1.1" 404 357 ... show more 172.68.210.12 - - [12/Mar/2026:18:29:06 +0200] "GET /wp-content/uploads/index.php HTTP/1.1" 404 357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [12/Mar/2026:18:29:09 +0200] "GET /wp-admin/user/index.php HTTP/1.1" 404 357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-03-08 17:05:57 (6 months ago)	172.68.210.12 - - [08/Mar/2026:19:05:56 +0200] "GET /wp-content/upgrade/222.php HTTP/1.0" 404 460 "- ... show more 172.68.210.12 - - [08/Mar/2026:19:05:56 +0200] "GET /wp-content/upgrade/222.php HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [08/Mar/2026:19:05:56 +0200] "GET /wp-content/upgrade/222.php HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [08/Mar/2026:19:05:57 +0200] "GET /wp-content/uploads/footer.php HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [08/Mar/2026:19:05:57 +0200] "GET /wp-content/uploads/footer.php HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.210.12 - - [08/Mar/2026:19:05:57 +0200] "GET /wp-content/uploads/autodiagnosis.php HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Wind ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-24 17:38:50 (9 months ago)	[Wed Dec 24 18:38:48.101161 2025] [php:error] [pid 1677702] [client 172.68.210.12:12869] script '/va ... show more [Wed Dec 24 18:38:48.101161 2025] [php:error] [pid 1677702] [client 172.68.210.12:12869] script '/var/www/html/info.php' not found or unable to stat, referer: https://duckduckgo.com/ [Wed Dec 24 18:38:48.371118 2025] [php:error] [pid 1677702] [client 172.68.210.12:12869] script '/var/www/html/ioxi-o.php' not found or unable to stat, referer: https://www.yahoo.com/ [Wed Dec 24 18:38:48.641583 2025] [php:error] [pid 1677702] [client 172.68.210.12:12869] script '/var/www/html/nc4.php' not found or unable to stat, referer: https://duckduckgo.com/ [Wed Dec 24 18:38:49.721440 2025] [php:error] [pid 1677702] [client 172.68.210.12:12869] script '/var/www/html/wp-good.php' not found or unable to stat, referer: https://www.bing.com/ [Wed Dec 24 18:38:50.531254 2025] [php:error] [pid 1677702] [client 172.68.210.12:12869] script '/var/www/html/xmrlpc.php' not found or unable to stat, referer: https://www.bing.com/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-13 23:59:18 (9 months ago)	[Sun Dec 14 00:59:16.484572 2025] [php:error] [pid 4048715] [client 172.68.210.12:11546] script '/va ... show more [Sun Dec 14 00:59:16.484572 2025] [php:error] [pid 4048715] [client 172.68.210.12:11546] script '/var/www/html/wp-good.php' not found or unable to stat, referer: https://www.google.fr/ [Sun Dec 14 00:59:16.756780 2025] [php:error] [pid 4048715] [client 172.68.210.12:11546] script '/var/www/html/ioxi-o.php' not found or unable to stat, referer: https://www.google.com/ [Sun Dec 14 00:59:17.027640 2025] [php:error] [pid 4048715] [client 172.68.210.12:11546] script '/var/www/html/file.php' not found or unable to stat, referer: https://www.google.fr/ [Sun Dec 14 00:59:17.571470 2025] [php:error] [pid 4048715] [client 172.68.210.12:11546] script '/var/www/html/wp-signin.php' not found or unable to stat, referer: https://duckduckgo.com/ [Sun Dec 14 00:59:17.846915 2025] [php:error] [pid 4048715] [client 172.68.210.12:11546] script '/var/www/html/abcd.php' not found or unable to stat, referer: https://www.yahoo.com/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-12 11:49:44 (9 months ago)	[Fri Dec 12 12:49:35.765932 2025] [php:error] [pid 3594392] [client 172.68.210.12:11502] script '/va ... show more [Fri Dec 12 12:49:35.765932 2025] [php:error] [pid 3594392] [client 172.68.210.12:11502] script '/var/www/html/css.php' not found or unable to stat [Fri Dec 12 12:49:36.630362 2025] [php:error] [pid 3594392] [client 172.68.210.12:11502] script '/var/www/html/network.php' not found or unable to stat [Fri Dec 12 12:49:39.115103 2025] [php:error] [pid 3594392] [client 172.68.210.12:11502] script '/var/www/html/wp-mail.php' not found or unable to stat [Fri Dec 12 12:49:39.817082 2025] [php:error] [pid 3594392] [client 172.68.210.12:11502] script '/var/www/html/wp.php' not found or unable to stat [Fri Dec 12 12:49:43.776265 2025] [php:error] [pid 3594392] [client 172.68.210.12:11502] script '/var/www/html/lock.php' not found or unable to stat ... show less	Brute-Force Web App Attack
Anonymous	2025-07-31 15:44:37 (1 year ago)	wp admin page access attempt ...	Hacking Web App Attack
🇺🇸 mawan	2025-06-09 23:59:56 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.240.153.12

🇺🇸 174.68.47.164

🇩🇪 139.19.117.197

🇳🇱 45.137.215.48

🇻🇳 42.112.31.145

🇮🇩 34.101.167.222

🇲🇽 189.222.235.244

🇨🇷 181.78.180.114

🇺🇸 162.216.150.130

🇨🇴 152.202.182.40

🇸🇬 104.64.202.235

🇮🇳 103.66.61.180

🇺🇸 101.36.115.241

🇹🇼 36.231.161.220

🇲🇦 196.124.99.83

🇲🇽 187.141.71.166

🇦🇷 186.129.221.254

🇭🇰 152.32.210.202

🇨🇳 121.229.205.104

🇲🇲 103.95.4.146