JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.68.244.132

172.68.244.132 was found in our database!

This IP was reported 153 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 172.68.244.132 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.68.244.132

Whois 172.68.244.132

IP Abuse Reports for 172.68.244.132:

This IP address has been reported a total of 153 times from 19 distinct sources. 172.68.244.132 was first reported on September 28th 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lime	2026-06-24 06:23:34 (3 weeks ago)	172.68.244.132 - - [24/Jun/2026:06:23:33 +0000] "GET /credentials.json HTTP/1.1" 200 7022 "-" "Mozil ... show more 172.68.244.132 - - [24/Jun/2026:06:23:33 +0000] "GET /credentials.json HTTP/1.1" 200 7022 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 00:57:22 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 20:57:19.045920 2026] [security2:error] [pid 12937:tid 12937] [client 172.68.244.132:10231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thomasanthonyquinn.com.kevinfranz.com"] [uri "/.env.container"] [unique_id "adME7wNzWsgYQuPshAEVeQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-05 09:02:31 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 05:02:20.177351 2026] [security2:error] [pid 32395:tid 32395] [client 172.68.244.132:9964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lucid-hq.com"] [uri "/admin/.env"] [unique_id "adIlHIKbim5eBmyUWYsfrgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-04 11:03:16 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 07:03:08.004492 2026] [security2:error] [pid 29787:tid 29787] [client 172.68.244.132:12718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.klam.nyc"] [uri "/config/.env.local"] [unique_id "adDv7Kd_3ig1QX1JeXI4ywAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-04 06:14:14 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 02:14:10.684072 2026] [security2:error] [pid 6312:tid 6312] [client 172.68.244.132:12428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centrodentalsindolor.com"] [uri "/.env.production.local"] [unique_id "adCsMgSPALPrm5Py_dY34gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-04 04:10:54 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 00:10:49.848319 2026] [security2:error] [pid 28850:tid 28850] [client 172.68.244.132:11584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.countertop.mooseled.com"] [uri "/.env"] [unique_id "adCPSdz7dAl7AzEx0lkwhAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-03 20:18:44 (3 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 08:49:42 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 04:49:33.224433 2026] [security2:error] [pid 8331:tid 8331] [client 172.68.244.132:9315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.franchiseconsultants.org"] [uri "/.env.staging"] [unique_id "ac9_Hbf0bGejr3LoI8hZQQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 08:27:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 04:27:47.797625 2026] [security2:error] [pid 14005:tid 14005] [client 172.68.244.132:12937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thewarmachineguns.com"] [uri "/.env.development.local"] [unique_id "ac96A-AIYHPDDSFokXbKPwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 05:21:08 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 01:21:04.777705 2026] [security2:error] [pid 26434:tid 26434] [client 172.68.244.132:9326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sutherlandyogastudio.com"] [uri "/.env.prod"] [unique_id "ac9OQK6rFDDhOljCZ0M6WAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-02 13:52:39 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 09:52:34.759820 2026] [security2:error] [pid 23444:tid 23444] [client 172.68.244.132:10238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newbook.flyingdodopublications.com"] [uri "/web/.env"] [unique_id "ac50olWBHrBlYAVRzdbUmwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 10:16:31 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 06:16:26.890547 2026] [security2:error] [pid 2768:tid 2768] [client 172.68.244.132:14001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ehrlichfamily.com"] [uri "/.env.bak"] [unique_id "aczweiVUeCvAPr19qewyjAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 09:51:22 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 05:50:47.743728 2026] [security2:error] [pid 19166:tid 19166] [client 172.68.244.132:11562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.cityviewsportsbar.com"] [uri "/.env_config"] [unique_id "aczqd6XSHRmGb7hSJudkKAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 08:20:35 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 04:20:28.625680 2026] [security2:error] [pid 8318:tid 8357] [client 172.68.244.132:9692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.flipkimmel.com"] [uri "/.env.local.backup"] [unique_id "aczVTGF-g_fm33j0wwOypAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 04:07:06 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.68.244.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 00:06:55.987278 2026] [security2:error] [pid 22813:tid 22813] [client 172.68.244.132:11934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.peterndudar.com"] [uri "/.env.local"] [unique_id "acyZ304KFKiT0Vf-iQQ63wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 153 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.166.206.112

🇹🇭 202.29.232.118

🇵🇰 153.117.9.65

🇺🇸 104.22.1.125

🇺🇸 208.84.102.103

🇺🇸 207.90.244.21

🇳🇱 204.76.203.30

🇧🇪 198.235.24.238

🇵🇱 176.53.159.197

🇺🇸 147.182.202.179

🇺🇸 142.93.31.237

🇨🇳 117.79.226.11

🇮🇳 106.213.82.88

🇭🇰 101.36.119.203

🇨🇦 85.217.149.63

🇩🇪 69.5.169.139

🇺🇸 45.156.129.61

🇳🇱 45.148.10.157

🇻🇳 27.79.0.97

🇷🇴 2.57.121.25