Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 172.69.150.196
This IP address has been reported a total of
147
times from
38 distinct
sources.
172.69.150.196 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Belgium
with 2
reports;
Mexico
with 1
report.
The only category in these recent reports was:
Web App Attack
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show moreTriggered Cloudflare WAF (firewallManaged) from DE.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /js/config.js
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
(mod_security) mod_security (id:210492) triggered by 172.69.150.196 (-): 1 in the last 300 secs; Por ...
show more(mod_security) mod_security (id:210492) triggered by 172.69.150.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 18:19:09.368240 2026] [security2:error] [pid 23405:tid 23405] [client 172.69.150.196:12049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "izloto.com"] [uri "/.git/config"] [unique_id "aiCoXYoYJYi3IKOwbvEokQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-15T11:16:23.974165+02:00 nimbus sshd[178904]: Failed password for root from 172.69.150.196 p ...
show more2026-05-15T11:16:23.974165+02:00 nimbus sshd[178904]: Failed password for root from 172.69.150.196 port 23084 ssh2
2026-05-15T11:18:37.484728+02:00 nimbus sshd[179034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.69.150.196 user=root
2026-05-15T11:18:39.648091+02:00 nimbus sshd[179034]: Failed password for root from 172.69.150.196 port 34462 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-05-15T02:47:36.211814+02:00 nimbus sshd[146356]: Invalid user wlf from 172.69.150.196 port 1205 ...
show more2026-05-15T02:47:36.211814+02:00 nimbus sshd[146356]: Invalid user wlf from 172.69.150.196 port 12052
2026-05-15T02:47:36.383713+02:00 nimbus sshd[146356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.69.150.196
2026-05-15T02:47:38.992156+02:00 nimbus sshd[146356]: Failed password for invalid user wlf from 172.69.150.196 port 12052 ssh2
...
show less
