JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.218.20.72

68.218.20.72 was found in our database!

This IP was reported 609 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.218.20.72

Whois 68.218.20.72

IP Abuse Reports for 68.218.20.72:

This IP address has been reported a total of 609 times from 357 distinct sources. 68.218.20.72 was first reported on December 25th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 GEDAL	2026-01-14 16:07:24 (7 months ago)	Fail2ban webexploits @ <hostname> : 68.218.20.72 - - [26/Dec/2025:08:52:55 +0100] "GET /.well-known/ ... show more Fail2ban webexploits @ <hostname> : 68.218.20.72 - - [26/Dec/2025:08:52:55 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" show less	Brute-Force SSH
🇳🇱 Nrbrtkls	2026-01-09 05:47:24 (7 months ago)	SSH honeypot (endlessh tarpit) connection from 68.218.20.72	Port Scan SSH
Anonymous	2026-01-04 19:48:23 (7 months ago)	$f2bV_matches	Brute-Force
🇪🇸 Gem	2025-12-31 07:18:43 (7 months ago)	Unauthorized web scan.	Web App Attack
🇳🇱 Site.eu	2025-12-31 05:02:41 (7 months ago)	Excessive multi-domain requests	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-28 20:10:42 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-12-28 19:48:41 (7 months ago)	$f2bV_matches	Brute-Force
🇪🇸 adalbertoreyes.org	2025-12-28 09:18:58 (7 months ago)	CategoryPortScan	Port Scan
🇬🇧 AvonleaConsulting	2025-12-27 23:59:49 (7 months ago)	Brute force attack stopped by firewall	Web Spam Brute-Force Web App Attack
🇫🇷 Murazaki	2025-12-27 23:10:54 (7 months ago)	smtp.benadel.fr 68.218.20.72 - - [27/Dec/2025:00:23:24 +0100] "GET /cgi-bin/file.php HTTP/1.1" 404 5 ... show more smtp.benadel.fr 68.218.20.72 - - [27/Dec/2025:00:23:24 +0100] "GET /cgi-bin/file.php HTTP/1.1" 404 555 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "172.22.0.46:80" smtp.benadel.fr 68.218.20.72 - - [27/Dec/2025:00:23:25 +0100] "GET /cgi-bin/index.php HTTP/1.1" 404 555 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "172.22.0.46:80" smtp.benadel.fr 68.218.20.72 - - [27/Dec/2025:00:24:10 +0100] "GET /wp-login.php HTTP/1.1" 404 555 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" "172.22.0.46:80" balamb.studio 68.218.20.72 - - [27/Dec/2025:00:55:24 +0100] "GET /cgi-bin/file.php HTTP/1.1" 404 153 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605 ... show less	Bad Web Bot
🇫🇷 tecnicorioja	2025-12-27 23:01:27 (7 months ago)	wp-login attack [27/Dec/2025:14:02:55	Brute-Force Web App Attack
🇪🇸 librebit	2025-12-27 20:22:02 (7 months ago)	Bad guys doing bad things, bad crawling	Bad Web Bot
🇬🇧 Greg Poulson	2025-12-27 16:26:01 (7 months ago)	Our website was hit by this DDOS at a rate of 114 in 5 minutes.	DDoS Attack Web Spam Brute-Force
Anonymous	2025-12-27 16:18:52 (7 months ago)	68.218.20.72 - - [27/Dec/2025:17:18:00 +0100] "GET /index.php HTTP/1.1" 404 12311 "-" "-" 68.218.20. ... show more 68.218.20.72 - - [27/Dec/2025:17:18:00 +0100] "GET /index.php HTTP/1.1" 404 12311 "-" "-" 68.218.20.72 - - [27/Dec/2025:17:18:00 +0100] "GET /wp-content/themes/ HTTP/1.1" 404 4835 "-" "-" 68.218.20.72 - - [27/Dec/2025:17:18:01 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 404 4835 "-" "-" 68.218.20.72 - - [27/Dec/2025:17:18:01 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 404 4835 "-" "-" 68.218.20.72 - - [27/Dec/2025:17:18:02 +0100] "GET /assets/images/ HTTP/1.1" 404 4835 "-" "-" 68.218.20.72 - - [27/Dec/2025:17:18:02 +0100] "GET /cc.php HTTP/1.1" 404 4835 "-" "-" 68.218.20.72 - - [27/Dec/2025:17:18:03 +0100] "GET /cgi-bin/ HTTP/1.1" 404 4835 "-" "-" 68.218.20.72 - - [27/Dec/2025:17:18:03 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 404 4835 "-" "-" 68.218.20.72 - - [27/Dec/2025:17:18:04 +0100] "GET /classwithtostring.php HTTP/1.1" 404 4835 "-" "-" 68.218.20.72 - - [27/Dec/2025:17:18:04 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 404 4835 "-" "-" 68.218.20.72 - - [27/D ... show less	DDoS Attack
🇬🇧 Artelis	2025-12-27 16:17:30 (7 months ago)	68.218.20.72 - - [27/Dec/2025:16:17:26 +0000] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 40 ... show more 68.218.20.72 - - [27/Dec/2025:16:17:26 +0000] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 404 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 68.218.20.72 - - [27/Dec/2025:16:17:26 +0000] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 404 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 68.218.20.72 - - [27/Dec/2025:16:17:26 +0000] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 404 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 68.218.20.72 - - [27/Dec/2025:16:17:28 +0000] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 564 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) Appl ... show less	Web App Attack

Showing 1 to 15 of 609 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 43.160.219.206

🇯🇵 118.107.13.11

🇮🇳 106.201.76.203

🇲🇽 104.28.230.94

🇨🇦 85.217.149.62

🇧🇬 79.124.59.182

🇺🇸 74.114.29.222

🇺🇸 45.131.193.64

🇨🇳 220.168.118.133

🇺🇦 188.163.24.63

🇺🇸 181.214.83.147

🇺🇸 152.232.100.21

🇮🇹 130.25.91.242

🇮🇷 80.191.253.228

🇺🇸 66.132.172.150

🇭🇰 43.240.14.35

🇵🇰 39.38.123.8

🇮🇩 36.64.131.68

🇺🇦 213.59.165.127

🇫🇷 91.231.89.157