JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.220.101.68

Neutral Activity

Abuse confidence score ?

0% Low Risk

1,894 reports

367 reporters · latest 7 months ago

ISP	CCC-Stuttgart-e-V
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	tor-exit-68.cccs.de
Domain Name	cccs.de
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

185.220.101.68 has been reported 1,894 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 185.220.101.68

This IP address has been reported a total of 1,894 times from 367 distinct sources. 185.220.101.68 was first reported on February 18th 2021, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 cheatmaster.store	2026-02-16 09:53:19 (7 months ago)	ModSecurity: Access denied with code 403. Pattern match 'sqli' at ARGS:id. [client 185.220.101.68]	Hacking Web App Attack
🇮🇹 LTM	2025-10-11 06:20:01 (11 months ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇮🇹 VHosting	2025-09-17 12:18:15 (1 year ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-05-30 20:08:29 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇦🇹 Pingger Shikkoken	2025-05-30 02:58:02 (1 year ago)	2025-05-30T02:58:02+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2025-05-30T02:58:02+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=185.220.101.68 DST=10.1.1.11 LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=37713 DF PROTO=TCP SPT=21857 DPT=8443 WINDOW=42340 RES=0x00 SYN URGP=0 2025-05-30T02:58:02+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=185.220.101.68 DST=10.1.1.11 LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=24677 DF PROTO=TCP SPT=21867 DPT=8443 WINDOW=42340 RES=0x00 SYN URGP=0 2025-05-30T02:58:03+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=185.220.101.68 DST=10.1.1.11 LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=37714 DF PROTO=TCP SPT=21857 DPT=8443 WINDOW=42340 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇹🇷 Threat.live	2025-05-29 18:57:38 (1 year ago)	DDoS Attack TCP/UDP	DDoS Attack
🇩🇪 Roper123	2025-05-29 17:38:04 (1 year ago)	Web exploits	Web App Attack
🇵🇱 sefinek.net	2025-05-29 13:08:08 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 dot.mg	2025-05-29 08:03:16 (1 year ago)	"Low quality URL in comment spam"	Web Spam Blog Spam
🇪🇸 el-brujo	2025-05-29 05:44:19 (1 year ago)	Cloudflare WAF: Request Path: /silentsigils/apdos_test_2 Request Query: Host: elhacker.net userAgen ... show more Cloudflare WAF: Request Path: /silentsigils/apdos_test_2 Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Action: block Source: ratelimit ASN Description: TORSERVERS-NET Country: T1 Method: GET Timestamp: 2025-05-29T05:44:19Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-05-29 02:58:48 (1 year ago)	Cloudflare WAF: Request Path: /silentsigils/apdos_test_2 Request Query: Host: elhacker.net userAgen ... show more Cloudflare WAF: Request Path: /silentsigils/apdos_test_2 Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:50.0) Gecko/20100101 Firefox/50.0 Action: block Source: ratelimit ASN Description: TORSERVERS-NET Country: T1 Method: GET Timestamp: 2025-05-29T02:58:48Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-05-28 15:40:42 (1 year ago)	Cloudflare WAF: Request Path: /silentsigils/apdos_test_2 Request Query: Host: elhacker.net userAgen ... show more Cloudflare WAF: Request Path: /silentsigils/apdos_test_2 Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2906.72 Safari/537.36 Action: block Source: ratelimit ASN Description: TORSERVERS-NET Country: T1 Method: GET Timestamp: 2025-05-28T15:40:42Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-05-28 14:44:33 (1 year ago)	Cloudflare WAF: Request Path: /silentsigils/apdos_test_2 Request Query: Host: elhacker.net userAgen ... show more Cloudflare WAF: Request Path: /silentsigils/apdos_test_2 Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:49.0) Gecko/20100101 Firefox/49.0 Action: block Source: ratelimit ASN Description: TORSERVERS-NET Country: T1 Method: GET Timestamp: 2025-05-28T14:44:33Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 VMHeaven.io	2025-05-27 00:30:44 (1 year ago)	Blocked by UFW [80/tcp] Source port: 22115 TTL: 58 Packet length: 52	Port Scan Web App Attack
🇩🇪 VMHeaven.io	2025-05-27 00:30:44 (1 year ago)	Blocked by UFW [8080/tcp] Source port: 26541 TTL: 58 Packet length: 52	Port Scan Web App Attack

Showing 1 to 15 of 1894 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇮 212.44.120.10

🇨🇳 124.222.229.150

🇨🇳 118.145.155.165

🇸🇬 47.236.93.38

🇧🇷 190.83.123.116

🇮🇹 151.56.82.54

🇳🇱 109.160.32.65

🇫🇷 91.196.152.29

🇺🇸 46.110.204.51

🇺🇸 20.12.242.123

🇭🇰 219.77.169.219

🇲🇽 205.147.22.31

🇦🇷 190.16.111.238

🇳🇱 185.242.226.58

🇺🇸 147.185.132.54

🇺🇸 144.126.220.216

🇬🇧 118.193.64.15

🇩🇪 91.246.51.198

🇺🇸 91.230.168.47

🇺🇸 69.41.94.237