JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.220.61.166

68.220.61.166 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 60%: ?

60%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.220.61.166

Whois 68.220.61.166

IP Abuse Reports for 68.220.61.166:

This IP address has been reported a total of 34 times from 33 distinct sources. 68.220.61.166 was first reported on April 22nd 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 zerodaysystemde	2026-08-31 17:49:30 (16 hours ago)	Port (80 tcp) Scanner - WEB - HoneyPot	Port Scan
🇩🇪 Dominik Lysiak	2026-08-31 17:31:44 (17 hours ago)	68.220.61.166 - - [31/Aug/2026:19:31:40 +0200] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11 ... show more 68.220.61.166 - - [31/Aug/2026:19:31:40 +0200] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 68.220.61.166 - - [31/Aug/2026:19:31:42 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 68.220.61.166 - - [31/Aug/2026:19:31:43 +0200] "GET /.git/logs/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Web App Attack
Anonymous	2026-08-31 16:33:18 (18 hours ago)	Repeated inbound connection attempts blocked by firewall. Observed at least twice within 24 hours.	Hacking
🇺🇸 solantex	2026-08-31 14:57:56 (19 hours ago)	HTTP reconnaissance: 4xx flood probing for exposed config/state files (fail2ban)	Web App Attack
🇨🇭 pingusurmars	2026-08-31 14:52:29 (19 hours ago)	Blocked by UFW on amperetwo [2078/tcp] Source port: 24081 TTL: 51 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [2078/tcp] Source port: 24081 TTL: 51 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-31 14:44:27 (19 hours ago)	SIEM ALERT AUTO REPORT	Email Spam
🇩🇪 hmt	2026-08-31 14:21:04 (20 hours ago)	[31/Aug/2026:16:20:08 +0200] DROP 68.220.61.166 SNI="-" [31/Aug/2026:16:20:11 +0200] DROP 68.220.61. ... show more [31/Aug/2026:16:20:08 +0200] DROP 68.220.61.166 SNI="-" [31/Aug/2026:16:20:11 +0200] DROP 68.220.61.166 SNI="-" [31/Aug/2026:16:20:12 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:13 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:15 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:17 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:18 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:21 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:24 +0200] DROP 68.220.61.166 SNI="-" [31/Aug/2026:16:20:27 +0200] DROP 68.220.61.166 SNI="-" [31/Aug/2026:16:20:28 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:30 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:32 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:34 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:37 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:39 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:41 +0200] DROP 68.220.61.166 SNI="" [31/Aug/2026:16:20:42 +0200] DROP 68.220.61.166 SNI="" [31/Au ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-08-31 14:09:10 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 68.220.61.166 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 68.220.61.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:09:05.605771 2026] [security2:error] [pid 26494:tid 26494] [client 68.220.61.166:24079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.218"] [uri "/.git/HEAD"] [unique_id "apWLATP4NwrIXyxN46cPmwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-08-31 13:36:07 (21 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇨🇱 CTMAN dev	2026-08-23 17:31:16 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /products/klip-xtreme-headphones-para-phone-para-cellular-phone-para-tablet \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 ipoac.nl	2026-08-23 15:51:17 (1 week ago)	ipoac.nl:443 68.220.61.166 - - [23/Aug/2026:17:51:16 +0200] 203.26.133.254 "GET /.git/HEAD HTTP/1.1" ... show more ipoac.nl:443 68.220.61.166 - - [23/Aug/2026:17:51:16 +0200] 203.26.133.254 "GET /.git/HEAD HTTP/1.1" 404 7382 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" show less	Bad Web Bot
🇵🇱 Wepted	2026-06-23 05:17:26 (2 months ago)	Port scan detected by honeypot	Port Scan Hacking
🇷🇸 Scan	2026-06-23 01:19:54 (2 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-02 21:09:04 (2 months ago)	Hit honeypot r.	Port Scan Hacking Exploited Host
🇬🇧 Andrew	2026-06-02 20:54:08 (2 months ago)	Blocked by UFW (TCP on port 80). Source port: 17621 TTL: 36 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW (TCP on port 80). Source port: 17621 TTL: 36 Packet length: 60 TOS: 0x00 This report (for 68.220.61.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.152.226.55

🇱🇻 62.60.130.242

🇳🇱 204.76.203.4

🇧🇪 198.235.24.242

🇺🇦 194.39.224.184

🇪🇸 165.231.227.189

🇺🇸 162.216.150.145

🇻🇳 42.96.20.16

🇹🇼 198.235.24.82

🇹🇼 198.235.24.8

🇺🇸 192.129.135.51

🇻🇳 171.244.143.209

🇨🇳 118.145.237.236

🇨🇳 114.98.177.170

🇻🇳 103.28.37.12

🇸🇬 101.47.19.128

🇳🇱 89.21.67.182

🇫🇷 85.217.140.6

🇮🇳 49.43.133.38

🇸🇬 43.159.39.203