JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.168.161.172

68.168.161.172 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 23%: ?

23%

ISP	US Internet Corp
Usage Type	Fixed Line ISP
ASN	AS10242
Hostname(s)	68-168-161-172.fttp.usinternet.com
Domain Name	usinternet.com
Country	🇺🇸 United States of America
City	Minneapolis, Minnesota

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.168.161.172

Whois 68.168.161.172

IP Abuse Reports for 68.168.161.172:

This IP address has been reported a total of 10 times from 8 distinct sources. 68.168.161.172 was first reported on May 25th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-10-12 02:57:01 (4 days ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 17:13:09 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇿 unhfree.net	2026-09-20 12:59:33 (3 weeks ago)	Sep 20 14:59:32 canopus postfix/smtpd[1765853]: NOQUEUE: reject: RCPT from 68-168-161-172.fttp.usint ... show more Sep 20 14:59:32 canopus postfix/smtpd[1765853]: NOQUEUE: reject: RCPT from 68-168-161-172.fttp.usinternet.com[68.168.161.172]: 554 5.7.1 Service unavailable; Client host [68.168.161.172] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/68.168.161.172; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<googlemail.com> Sep 20 14:59:32 canopus postfix/smtpd[1765853]: NOQUEUE: reject: RCPT from 68-168-161-172.fttp.usinternet.com[68.168.161.172]: 554 5.7.1 Service unavailable; Client host [68.168.161.172] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/68.168.161.172; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<googlemail.com> Sep 20 14:59:32 canopus postfix/smtpd[1765853]: NOQUEUE: reject: RCPT from 68-168-161-172.fttp.usinternet.com[68.168.161.172]: 554 5.7.1 Service unavailable; Client host [68.168.161.172] ... show less	Brute-Force Exploited Host
🇺🇸 鬼影233	2026-09-15 23:01:50 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-09-02 03:30:23 (1 month ago)	Large-scale coordinated botnet (3M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (3M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/10452/form_key/friRRWGCTrolj1yY/ \| UA: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.01; Trident/3.1) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-08-18 11:05:33 (1 month ago)	Distributed scraper residential proxy pool — www.pearlriverwines.com /store/filtered/ (WineCommerce ... show more Distributed scraper residential proxy pool — www.pearlriverwines.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
🇩🇪 Vegascosmetics	2026-08-16 02:01:32 (2 months ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇺🇸 kosada.com	2026-07-13 10:26:55 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-06-18 00:01:54 (3 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 ipblock.com	2026-05-25 06:31:00 (4 months ago)	IPBlock protected site ID [3192-af][s=02]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.142

🇦🇷 190.105.160.5

🇩🇪 94.26.106.31

🇮🇳 82.180.147.135

🇬🇧 64.205.72.244

🇧🇪 34.34.163.51

🇬🇧 5.226.140.100

🇪🇸 212.30.33.198

🇪🇸 212.30.33.187

🇦🇷 186.58.106.161

🇧🇷 177.152.81.193

🇭🇰 154.83.16.14

🇺🇸 140.248.31.45

🇮🇳 122.170.203.49

🇱🇹 62.60.130.193

🇺🇸 34.59.15.171

🇺🇸 149.28.79.210

🇵🇰 110.38.14.207

🇧🇷 108.174.145.192

🇮🇩 103.67.244.26