JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.68.213.126

Neutral Activity Whitelisted Subnet

Abuse confidence score ?

0% Low Risk

42 reports

13 reporters · latest 4 hours ago

172.68.213.126 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇨🇿 Czechia
City	Prague, Prague

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 172.68.213.126

This IP address has been reported a total of 42 times from 13 distinct sources. 172.68.213.126 was first reported on March 13th 2024, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: Ukraine with 8 reports; United States of America with 6 reports; Belgium with 2 reports. The most common categories in these recent reports were: Web App Attack 17 times; Bad Web Bot 14 times; Brute-Force 6 times; Hacking 2 times; SQL Injection 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-09-26 10:22:35 (4 hours ago)	[26/Sep/2026:13:22:34 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [26/Sep/2026:13:22:34 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /credentials.json HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-26 00:28:41 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.213.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.213.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 20:28:35.275888 2026] [security2:error] [pid 22956:tid 22956] [client 172.68.213.126:12141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tianabes.com"] [uri "/.git/config"] [unique_id "arcRsy0zKhIRsdrvirKvYwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 23:32:45 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.213.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.213.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 19:32:41.342092 2026] [security2:error] [pid 28258:tid 28258] [client 172.68.213.126:10033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thingstodonude.com"] [uri "/.git/config"] [unique_id "arcEmRGRycagCqzpYrtn-AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-25 22:20:03 (16 hours ago)	172.68.213.126 - - [25/Sep/2026:19:20:01 -0300] "GET /.git/config HTTP/2.0" 500 170 "-" "curl/8.4.0" ... show more 172.68.213.126 - - [25/Sep/2026:19:20:01 -0300] "GET /.git/config HTTP/2.0" 500 170 "-" "curl/8.4.0" ... show less	Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-09-25 21:49:00 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.213.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.213.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 17:48:56.788799 2026] [security2:error] [pid 8592:tid 8592] [client 172.68.213.126:12821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lgougeon.com"] [uri "/.git/config"] [unique_id "arbsSMSiXEyKfreWqW6lnQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 21:18:52 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.68.213.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.213.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 17:18:48.625870 2026] [security2:error] [pid 9699:tid 9699] [client 172.68.213.126:11448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krukgpt.com"] [uri "/.git/config"] [unique_id "arblOLuOZGdGxaPm9fwq6AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-09-25 02:32:05 (1 day ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-09-23 08:53:36 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 172.68.213.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.213.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 04:53:29.575154 2026] [security2:error] [pid 19091:tid 19091] [client 172.68.213.126:12655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hshs82.com"] [uri "/.git/config"] [unique_id "arOTiQ-BtHxVxUiHm7jrXgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 chengkev	2026-09-22 21:54:05 (3 days ago)	Esta IP fue detectada por CrowdSec, activando crowdsecurity/http-probing	Web App Attack Hacking
🇺🇦 URAN Publishing Service	2026-09-15 05:46:36 (1 week ago)	[15/Sep/2026:08:46:35 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [15/Sep/2026:08:46:35 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /google-key.json HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-14 02:14:26 (1 week ago)	[14/Sep/2026:05:14:25 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [14/Sep/2026:05:14:25 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /google-key.json HTTP/1.1 show less	Bad Web Bot Web App Attack
🇧🇪 madeit	2026-09-13 19:23:23 (1 week ago)		Web App Attack
🇺🇦 URAN Publishing Service	2026-09-13 01:22:58 (1 week ago)	[13/Sep/2026:04:22:58 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [13/Sep/2026:04:22:58 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /google-key.json HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-11 14:34:39 (2 weeks ago)	[11/Sep/2026:17:34:38 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [11/Sep/2026:17:34:38 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /google-key.json HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-08 11:35:18 (2 weeks ago)	[08/Sep/2026:14:35:18 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [08/Sep/2026:14:35:18 +0300] -- 172.68.213.126 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /google-key.json HTTP/1.1 show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.47.50.175

🇳🇱 185.242.226.92

🇻🇳 163.223.211.76

🇳🇱 89.21.67.148

🇮🇳 20.204.42.136

🇲🇩 185.164.81.156

🇧🇦 109.163.128.36

🇧🇩 103.138.170.105

🇳🇱 86.54.31.34

🇺🇸 71.6.233.236

🇸🇪 70.34.212.124

🇧🇪 66.249.93.70

🇺🇸 24.199.95.62

🇺🇸 23.92.27.206

🇮🇪 20.13.164.162

🇲🇾 202.165.22.102

🇺🇸 195.184.76.53

🇨🇱 190.171.165.205

🇲🇽 189.165.11.232

🇧🇷 177.162.218.231