JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.68.36.152

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

17 reports

11 reporters · latest 6 months ago

172.68.36.152 is on our whitelist as Cloudflare Reverse Proxy via the subnet 172.64.0.0/13.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇺🇸 United States of America
City: St. Louis, Missouri

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.68.36.152 has been reported 17 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

17 from 11 distinct reporters

First reported

June 25th 2023

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 lns.bz	2026-04-22 16:57:16 UTC · (6 months ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 mawan	2026-03-15 22:51:47 UTC · (7 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
Anonymous	2026-03-12 06:19:37 UTC · (7 months ago)	Aggressive web scan	Web App Attack
Anonymous	2026-03-07 10:59:48 UTC · (8 months ago)	Aggressive web scan	Web App Attack
Anonymous	2026-03-05 11:49:48 UTC · (8 months ago)	Aggressive web scan	Web App Attack
🇺🇸 chrisj	2026-03-03 15:47:24 UTC · (8 months ago)	[Tue Mar 03 15:47:22.437274 2026] [proxy_fcgi:error] [pid 1166767:tid 1166767] [client 172.68.36.152:9625] AH01071: Got error 'Primary script unknown', referer: http://mail.updates.sistemas.biz/style.php [Tue Mar 03 15:47:24.069260 2026] [proxy_fcgi: ... show more [Tue Mar 03 15:47:22.437274 2026] [proxy_fcgi:error] [pid 1166767:tid 1166767] [client 172.68.36.152:9625] AH01071: Got error 'Primary script unknown', referer: http://mail.updates.sistemas.biz/style.php [Tue Mar 03 15:47:24.069260 2026] [proxy_fcgi:error] [pid 1166767:tid 1166767] [client 172.68.36.152:9625] AH01071: Got error 'Primary script unknown', referer: http://whm.updates.sistemas.biz/flower.php [Tue Mar 03 15:47:24.263095 2026] [proxy_fcgi:error] [pid 1166767:tid 1166767] [client 172.68.36.152:9625] AH01071: Got error 'Primary script unknown', referer: http://cpcalendars.updates.sistemas.biz/style.php ... show less	Brute-Force
🇩🇪 acadeova	2026-02-16 05:07:09 UTC · (8 months ago)	🚨 Recon detected (nft drop) SRC=172.68.36.152 Observed=TCP dpt=80 in=enp0s6 ttl=53 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN)	Port Scan
🇫🇷 Campus France	2026-01-10 08:50:01 UTC · (10 months ago)	[Sat Jan 10 09:49:59.539570 2026] [php:error] [pid 879219] [client 172.68.36.152:14263] script '/var/www/html/style.php' not found or unable to stat [Sat Jan 10 09:50:00.121116 2026] [php:error] [pid 879219] [client 172.68.36.152:14263] script '/var/ ... show more [Sat Jan 10 09:49:59.539570 2026] [php:error] [pid 879219] [client 172.68.36.152:14263] script '/var/www/html/style.php' not found or unable to stat [Sat Jan 10 09:50:00.121116 2026] [php:error] [pid 879219] [client 172.68.36.152:14263] script '/var/www/html/chosen.php' not found or unable to stat [Sat Jan 10 09:50:00.258131 2026] [php:error] [pid 879219] [client 172.68.36.152:14263] script '/var/www/html/file.php' not found or unable to stat [Sat Jan 10 09:50:00.424376 2026] [php:error] [pid 879219] [client 172.68.36.152:14263] script '/var/www/html/flower.php' not found or unable to stat [Sat Jan 10 09:50:00.595046 2026] [php:error] [pid 879219] [client 172.68.36.152:14263] script '/var/www/html/gifclass.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-01-05 17:09:20 UTC · (10 months ago)	[Mon Jan 05 18:09:19.489272 2026] [php:error] [pid 1758957] [client 172.68.36.152:14324] script '/var/www/html/style.php' not found or unable to stat [Mon Jan 05 18:09:20.036260 2026] [php:error] [pid 1758957] [client 172.68.36.152:14324] script '/va ... show more [Mon Jan 05 18:09:19.489272 2026] [php:error] [pid 1758957] [client 172.68.36.152:14324] script '/var/www/html/style.php' not found or unable to stat [Mon Jan 05 18:09:20.036260 2026] [php:error] [pid 1758957] [client 172.68.36.152:14324] script '/var/www/html/chosen.php' not found or unable to stat [Mon Jan 05 18:09:20.145294 2026] [php:error] [pid 1758957] [client 172.68.36.152:14324] script '/var/www/html/file.php' not found or unable to stat [Mon Jan 05 18:09:20.251727 2026] [php:error] [pid 1758957] [client 172.68.36.152:14324] script '/var/www/html/flower.php' not found or unable to stat [Mon Jan 05 18:09:20.357417 2026] [php:error] [pid 1758957] [client 172.68.36.152:14324] script '/var/www/html/gifclass.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇩🇪 403veli	2026-01-03 04:24:58 UTC · (10 months ago)	Confirmed malicious activity observed via T-Pot honeypot Observed 30 events on port 80 (unknown) from 2026-01-03T04:24:58+00:00 to 2026-01-03T04:26:09.445000+00:00. Sample: {"event_type": "flow", "src_ip": "172.68.36.152", "src_port": 39617, "dest_po ... show more Confirmed malicious activity observed via T-Pot honeypot Observed 30 events on port 80 (unknown) from 2026-01-03T04:24:58+00:00 to 2026-01-03T04:26:09.445000+00:00. Sample: {"event_type": "flow", "src_ip": "172.68.36.152", "src_port": 39617, "dest_port": 80} show less	Port Scan
🇫🇷 Campus France	2026-01-02 18:37:26 UTC · (10 months ago)	[Fri Jan 02 19:37:24.605732 2026] [php:error] [pid 3863201] [client 172.68.36.152:12314] script '/var/www/html/style.php' not found or unable to stat [Fri Jan 02 19:37:25.728342 2026] [php:error] [pid 3863201] [client 172.68.36.152:12314] script '/va ... show more [Fri Jan 02 19:37:24.605732 2026] [php:error] [pid 3863201] [client 172.68.36.152:12314] script '/var/www/html/style.php' not found or unable to stat [Fri Jan 02 19:37:25.728342 2026] [php:error] [pid 3863201] [client 172.68.36.152:12314] script '/var/www/html/chosen.php' not found or unable to stat [Fri Jan 02 19:37:26.033779 2026] [php:error] [pid 3863201] [client 172.68.36.152:12314] script '/var/www/html/file.php' not found or unable to stat [Fri Jan 02 19:37:26.195413 2026] [php:error] [pid 3863201] [client 172.68.36.152:12314] script '/var/www/html/flower.php' not found or unable to stat [Fri Jan 02 19:37:26.403679 2026] [php:error] [pid 3863201] [client 172.68.36.152:12314] script '/var/www/html/gifclass.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇩🇪 alive	2025-12-30 23:07:06 UTC · (10 months ago)	Confirmed malicious activity observed via T-Pot honeypot Observed 29 events on port 443 (unknown) from 2025-12-30T23:07:06+00:00 to 2025-12-30T23:08:17.662000+00:00. Sample: {"src_port": 40965, "src_ip": "172.68.36.152", "dest_port": 443}	Port Scan
🇬🇧 no1knows.com	2025-12-22 12:38:54 UTC · (10 months ago)	2025/12/22 12:38:51 [error] 828376#828376: 17278 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.68.36.152, server: _, request: "GET /wp-content/style.php HTTP/1.1", upstream: "fastcgi://unix ... show more 2025/12/22 12:38:51 [error] 828376#828376: 17278 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.68.36.152, server: _, request: "GET /wp-content/style.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com" 2025/12/22 12:38:52 [error] 828376#828376: 17278 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.68.36.152, server: _, request: "GET /wp-content/themes/style.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com" 2025/12/22 12:38:52 [error] 828376#828376: 17278 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.68.36.152, server: _, request: "GET /wp-admin/style.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com" ... show less	Brute-Force Bad Web Bot
🇫🇷 Campus France	2025-12-19 06:42:23 UTC · (10 months ago)	[Fri Dec 19 07:42:21.882355 2025] [php:error] [pid 2035822] [client 172.68.36.152:9711] script '/var/www/html/style.php' not found or unable to stat [Fri Dec 19 07:42:22.668092 2025] [php:error] [pid 2035822] [client 172.68.36.152:9711] script '/var/ ... show more [Fri Dec 19 07:42:21.882355 2025] [php:error] [pid 2035822] [client 172.68.36.152:9711] script '/var/www/html/style.php' not found or unable to stat [Fri Dec 19 07:42:22.668092 2025] [php:error] [pid 2035822] [client 172.68.36.152:9711] script '/var/www/html/chosen.php' not found or unable to stat [Fri Dec 19 07:42:22.809043 2025] [php:error] [pid 2035822] [client 172.68.36.152:9711] script '/var/www/html/file.php' not found or unable to stat [Fri Dec 19 07:42:22.932739 2025] [php:error] [pid 2035822] [client 172.68.36.152:9711] script '/var/www/html/flower.php' not found or unable to stat [Fri Dec 19 07:42:23.049140 2025] [php:error] [pid 2035822] [client 172.68.36.152:9711] script '/var/www/html/gifclass.php' not found or unable to stat ... show less	Brute-Force Web App Attack
Anonymous	2024-05-10 03:57:33 UTC · (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 206.217.129.164

🇳🇱 109.160.32.132

🇫🇷 91.196.152.59

🇧🇪 35.206.183.251

🇩🇪 192.108.48.150

🇵🇱 172.64.200.165

🇬🇧 154.16.44.141

🇫🇷 91.196.152.190

🇵🇰 36.255.47.91

🇧🇬 31.13.248.39

🇳🇱 195.178.110.232

🇺🇸 134.122.113.50

🇨🇳 103.254.76.136

🇺🇸 45.79.207.111

🇺🇸 195.184.76.54

🇺🇸 185.61.222.25

🇧🇷 177.85.176.146

🇫🇮 146.19.140.170

🇺🇸 129.121.102.198

🇸🇬 101.47.18.212