JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.69.150.147

Neutral Activity Whitelisted Subnet

Abuse confidence score ?

0% Low Risk

153 reports

41 reporters · latest 2 weeks ago

172.69.150.147 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 172.69.150.147

This IP address has been reported a total of 153 times from 41 distinct sources. 172.69.150.147 was first reported on July 25th 2023, and the most recent report was 2 weeks ago. In the last 60 days, the top reporter locations were: France with 1 report; Russian Federation with 1 report. The most common categories in these recent reports were: Web App Attack 2 times; Exploited Host 1 time; Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Pays d'Angoulême	2026-09-04 23:38:51 (2 weeks ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/core/install.php	Web App Attack
🇷🇺 DZBOT	2026-08-19 14:42:18 (1 month ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 16:19:34 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 12:19:27.561346 2026] [security2:error] [pid 28225:tid 28225] [client 172.69.150.147:11383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flutetroupeofyakima.org"] [uri "/.git/config"] [unique_id "aiGlj51XdomwBfD-B2ptHQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-06-03 22:50:43 (3 months ago)	web exploits	Hacking Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-05-21 04:08:29 (4 months ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 WellSpring	2026-05-16 06:31:51 (4 months ago)	wordpress scan on 509.today/wp-admin/install.php — WellSpr.ing/NetSentinel civic-AI security layer	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 11:21:37 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 07:21:30.814011 2026] [security2:error] [pid 7970:tid 7970] [client 172.69.150.147:11613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ismaelcavazos.com"] [uri "/.env.development.local"] [unique_id "agcBuufiUebwvYYbU099MwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-11 11:16:59 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 07:16:51.094620 2026] [security2:error] [pid 31516:tid 31530] [client 172.69.150.147:13535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozworkshop.com"] [uri "/.env.vercel"] [unique_id "agG6o6Rdy856dDAWhkMCPgAAAEw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Séfora Srl	2026-05-02 16:01:56 (4 months ago)	Failed attempt detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-04-30 07:31:38 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 03:31:31.750194 2026] [security2:error] [pid 21465:tid 21465] [client 172.69.150.147:13020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kontikimotorcycles.com"] [uri "/.git/config"] [unique_id "afMFU1coYy3ovQcj-iF2YwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-26 16:53:20 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 12:53:15.970823 2026] [security2:error] [pid 10576:tid 10576] [client 172.69.150.147:11176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moonlightmotel.com"] [uri "/.git/config"] [unique_id "ae5C-1fOtTvHyekrCyWMHgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 22:26:34 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 18:26:28.310493 2026] [security2:error] [pid 1988391:tid 1988391] [client 172.69.150.147:10177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.halblog.com"] [uri "/.git/config"] [unique_id "adl5FAJ1of2TdChbWZ9cqgAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-04-09 03:06:08 (5 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 06:05:35 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 02:05:30.309255 2026] [security2:error] [pid 1237210:tid 1237210] [client 172.69.150.147:13334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.loftonboys.com"] [uri "/.git/refs/heads/master"] [unique_id "adSeqrQxk0LnOaExjF51nwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 09:20:03 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.69.150.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 05:19:56.385436 2026] [security2:error] [pid 30532:tid 30532] [client 172.69.150.147:13405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jmwilliamsrealty.com"] [uri "/.env.production.local"] [unique_id "adN6vLl_X4MKjDP2scUPDAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 153 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.105.71.106

🇺🇸 170.106.187.135

🇺🇸 143.110.227.101

🇺🇸 134.209.70.149

🇨🇳 111.44.137.197

🇩🇪 91.239.157.185

🇳🇱 77.239.124.212

🇺🇸 73.159.164.74

🇺🇸 71.6.235.65

🇱🇹 62.60.130.201

🇹🇼 35.194.213.25

🇺🇸 5.253.38.188

🇦🇷 190.221.205.48

🇷🇺 178.66.254.59

🇳🇱 172.211.56.214

🇨🇳 123.165.152.239

🇨🇳 118.113.15.18

🇺🇸 108.30.131.224

🇷🇺 80.234.36.218

🇯🇵 43.163.206.70