JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.220.61.199

68.220.61.199 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 67%: ?

67%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.220.61.199

Whois 68.220.61.199

IP Abuse Reports for 68.220.61.199:

This IP address has been reported a total of 17 times from 15 distinct sources. 68.220.61.199 was first reported on August 30th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-07-27 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 ghostwarriors	2026-07-27 06:20:22 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 cloudmax	2026-07-27 06:18:52 (2 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇩🇪 Trapper67	2026-07-27 06:16:04 (2 days ago)	Port Scan detected from 68.220.61.199 (Unknown). 11 hits in the last 50 seconds; Ports: ; Directi ... show more Port Scan* detected from 68.220.61.199 (Unknown). 11 hits in the last 50 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Jul 27 07:09:14 kernel: Firewa show less	Port Scan
🇩🇪 iNetWorker	2026-07-27 06:02:50 (2 days ago)	trying to access non-authorized port	Port Scan
🇩🇪 marcel-knorr.de	2026-07-27 05:58:50 (2 days ago)	[MK-Root1] Blocked by UFW	Brute-Force Port Scan
🇩🇪 mailox	2026-07-27 05:58:11 (2 days ago)	SSH Unauthorized connection attempt ...	Brute-Force SSH
🇩🇪 EDSL	2026-07-27 05:54:54 (2 days ago)	[monit.edsl.fr] Blocked by SysWarden Firewall (Web Attack)	Hacking Port Scan Web App Attack
🇩🇪 polido	2026-07-27 05:54:27 (2 days ago)	[debian-4gb-nbg1-1] Unauthorized connection attempt to port 80 from 68.220.61.199	Port Scan
🇩🇪 crnpekgoz	2026-07-27 05:42:57 (2 days ago)	[PortScan] Risk=100 ASN=8075 (portscan) Port=22 HoneypotTrap=true \| Reported by WardenIPS: https://g ... show more [PortScan] Risk=100 ASN=8075 (portscan) Port=22 HoneypotTrap=true \| Reported by WardenIPS: https://github.com/msncakma/WardenIPS show less	Port Scan
🇯🇵 demonsword	2026-07-11 10:13:05 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: fapi.binance.com:443 show less	Open Proxy Port Scan
🇬🇧 2048	2026-05-23 04:46:33 (2 months ago)	2026-05-23T06:46:29.903053+02:00 machodeer kernel: [2219507.180844] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-23T06:46:29.903053+02:00 machodeer kernel: [2219507.180844] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=68.220.61.199 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=2934 DF PROTO=TCP SPT=2072 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-23T06:46:30.959782+02:00 machodeer kernel: [2219508.237237] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=68.220.61.199 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=2935 DF PROTO=TCP SPT=2072 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-23T06:46:31.982504+02:00 machodeer kernel: [2219509.260322] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=68.220.61.199 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=2936 DF PROTO=TCP SPT=2072 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇯🇵 demonsword	2026-05-16 19:01:28 (2 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: fapi.binance.com:443 show less	Open Proxy Port Scan
🇺🇸 TPI-Abuse	2026-04-09 01:14:22 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 68.220.61.199 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 68.220.61.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 21:14:16.193595 2026] [security2:error] [pid 2707033:tid 2707033] [client 68.220.61.199:57368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "networkzone.org.convoyforkids.com"] [uri "/.git/config"] [unique_id "adb9aOhrvs51nhOSl5a1jgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 2048	2026-01-26 01:24:13 (6 months ago)	2026-01-26T02:24:09.799102+01:00 machodeer kernel: [1422881.690358] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-01-26T02:24:09.799102+01:00 machodeer kernel: [1422881.690358] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=68.220.61.199 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=8783 DF PROTO=TCP SPT=26821 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-01-26T02:24:10.822046+01:00 machodeer kernel: [1422882.712805] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=68.220.61.199 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=8784 DF PROTO=TCP SPT=26821 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-01-26T02:24:11.846269+01:00 machodeer kernel: [1422883.736801] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=68.220.61.199 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=8785 DF PROTO=TCP SPT=26821 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.7.52.149

🇺🇸 47.77.233.21

🇸🇬 2a04:c607:33:4:9999::133

🇺🇸 2607:f8b0:4001:c54::12d

🇮🇳 223.181.127.105

🇺🇿 213.230.88.148

🇬🇧 194.50.235.145

🇩🇪 172.217.33.221

🇺🇸 172.202.95.21

🇺🇸 136.70.132.135

🇨🇳 117.164.191.217

🇫🇷 85.217.140.46

🇸🇬 47.84.122.139

🇦🇱 193.104.143.42

🇯🇵 150.230.214.236

🇭🇰 103.210.21.242

🇺🇸 71.6.233.206

🇨🇳 36.108.214.78

🇰🇷 210.114.22.126

🇳🇱 204.76.203.49