AbuseIPDB » 172.168.41.1

172.168.41.1 was found in our database!

This IP was reported 2,217 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 172.168.41.1

Whois 172.168.41.1

IP Abuse Reports for 172.168.41.1:

This IP address has been reported a total of 2,217 times from 291 distinct sources. 172.168.41.1 was first reported on May 17th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-02-27 16:49:24 (2 weeks ago)	list.rtbh.com.tr report: tcp/5222, tcp/9200	Brute-Force
Anonymous	2025-02-27 16:03:41 (2 weeks ago)	2025-02-27T17:03:39.519439+01:00 vps kernel: [2412794.665601] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more2025-02-27T17:03:39.519439+01:00 vps kernel: [2412794.665601] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=172.168.41.1 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=54321 PROTO=TCP SPT=57681 DPT=139 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Study Bitcoin 🤗	2025-02-27 10:11:00 (3 weeks ago)	3 port probes: 3x tcp/5222 (jabber) [srv136,srv135,srv127]	Port Scan
Tokolosh	2025-02-27 10:09:28 (3 weeks ago)	2025-01-16 19:38:16 IPS Alert 3: Detection of a Network Scan. Signature ET SCAN Zmap User-Agent (Inb ... show more2025-01-16 19:38:16 IPS Alert 3: Detection of a Network Scan. Signature ET SCAN Zmap User-Agent (Inbound). From: 172.168.41.1:42764, to: x.x.x.102:80, protocol: TCP show less	Hacking Brute-Force Web App Attack
diego	2025-02-27 06:44:18 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 18 times in the last 10800 seconds	DDoS Attack
security.rdmc.fr	2025-02-27 04:42:46 (3 weeks ago)	IP in Malicious Database	Web App Attack
Pingger Shikkoken	2025-02-27 03:35:57 (3 weeks ago)	2025-02-27T03:35:57+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more2025-02-27T03:35:57+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=172.168.41.1 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=54321 PROTO=TCP SPT=38403 DPT=9000 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Hacking
drewf.ink	2025-02-27 03:25:07 (3 weeks ago)	[03:25] Port scanning. Port(s) scanned: TCP/25565	Port Scan
anon333	2025-02-27 02:34:31 (3 weeks ago)	Hacker syslog review 1740623671	Hacking
spamverify.com	2025-02-27 00:36:47 (3 weeks ago)	Honeypot Hit: Port Scan (21) FTP	Web Spam Blog Spam Bad Web Bot Web App Attack
Pingger Shikkoken	2025-02-27 00:30:00 (3 weeks ago)	2025-02-27T00:30:00+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more2025-02-27T00:30:00+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=172.168.41.1 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=54321 PROTO=TCP SPT=57559 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 show less	FTP Brute-Force Hacking
diego	2025-02-26 21:03:37 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 15 times in the last 10800 seconds	DDoS Attack
MPL	2025-02-26 20:51:36 (3 weeks ago)	tcp/7443	Port Scan
MPL	2025-02-26 20:51:36 (3 weeks ago)	tcp/7443 (2 or more attempts)	Port Scan
rtbh.com.tr	2025-02-26 20:49:26 (3 weeks ago)	list.rtbh.com.tr report: tcp/31337, tcp/8443	Brute-Force