JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.49.123.74

68.49.123.74 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 24%: ?

24%

ISP	Comcast Cable Communications, Inc.
Usage Type	Fixed Line ISP
ASN	AS33668
Hostname(s)	c-68-49-123-74.hsd1.mi.comcast.net
Domain Name	comcast.net
Country	🇺🇸 United States of America
City	Waverly, Michigan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.49.123.74

Whois 68.49.123.74

IP Abuse Reports for 68.49.123.74:

This IP address has been reported a total of 8 times from 8 distinct sources. 68.49.123.74 was first reported on July 28th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Stara	2026-10-13 18:01:22 (1 week ago)	Distributed smtpauth, imapd and ftp login attacks or more than 2 temp blocks in the last 259200 secs	Brute-Force DDoS Attack
🇳🇱 Mangelot Hosting	2026-09-30 13:11:47 (3 weeks ago)	(dovecot_invalid_user) srv201 Dovecot login on non-existent account 68.49.123.74 (US/United States/c ... show more (dovecot_invalid_user) srv201 Dovecot login on non-existent account 68.49.123.74 (US/United States/c-68-49-123-74.hsd1.mi.comcast.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Sep 30 15:11:44 dovecot[938]: imap-login: Login aborted: Logged out (auth failed, 2 attempts in 8 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=68.49.123.74, lip=0.0.0.x, TLS, session=<wATqCbNcBIhEMXtK> show less	Web App Attack
🇺🇸 kosada.com	2026-09-16 18:42:12 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B10% ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B10%5D=70&topics%5B11%5D=57&topics%5B12%5D=51&topics%5B9%5D=58 ?topics%5B10%5D=70&topics%5B11%5D=57&topics%5B12%5D=51&topics%5B9%5D=58 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581") show less	DDoS Attack Bad Web Bot
🇨🇦 Mediashaker	2026-09-15 04:46:45 (1 month ago)	(pop3d) Failed POP3 login from 68.49.123.74 (US/United States/c-68-49-123-74.hsd1.mi.comcast.net)	Brute-Force
🇺🇸 TPI-Abuse	2026-09-05 00:18:10 (1 month ago)	(mod_security) mod_security (id:220150) triggered by 68.49.123.74 (c-68-49-123-74.hsd1.mi.comcast.ne ... show more (mod_security) mod_security (id:220150) triggered by 68.49.123.74 (c-68-49-123-74.hsd1.mi.comcast.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 20:18:03.479296 2026] [security2:error] [pid 29432:tid 29432] [client 68.49.123.74:33982] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\.{0,399}\\\\\\\\/)?select)" at ARGS:page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)\|\|jamesclarklaw.com\|F\|2"] [data "')//and//('kcylgz'='kcylgz'//union//all//select//'dcpvjmgabpslmhhjqmmhouuwedwsxguo'--/*/j5t0y7"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jamesclarklaw.com"] [uri "/"] [unique_id "aptfuzWHtJyzuBsj_csUhQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Active8	2026-08-29 08:14:19 (1 month ago)	68.49.123.74 (US/United States/c-68-49-123-74.hsd1.mi.comcast.net), 5 distributed imapd attacks on a ... show more 68.49.123.74 (US/United States/c-68-49-123-74.hsd1.mi.comcast.net), 5 distributed imapd attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
Anonymous	2026-08-17 23:37:31 (2 months ago)	Distributed scraper residential proxy pool — www.barrelchestwineandbeer.com /store/filtered/ (WineCo ... show more Distributed scraper residential proxy pool — www.barrelchestwineandbeer.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-07-28 18:00:50 (2 months ago)	Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/11262/form_key/QkQ8tyhuaCCNZ4xM/ \| UA: Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/7272-01-20 05:12:49.095612 Firefox/3.6.18 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.136.15.111

🇺🇸 70.184.183.238

🇩🇪 35.159.241.117

🇮🇩 210.79.142.203

🇦🇷 207.248.126.135

🇧🇪 207.175.143.36

🇵🇰 203.128.6.159

🇵🇱 193.254.247.10

🇨🇿 193.165.0.65

🇺🇸 187.40.235.152

🇺🇸 185.64.181.243

🇺🇸 142.111.152.142

🇺🇸 142.111.152.141

🇺🇸 142.111.152.33

🇳🇱 138.226.239.91

🇺🇸 119.13.221.70

🇸🇬 107.155.56.47

🇸🇪 104.23.223.170

🇸🇪 104.23.221.120

🇻🇳 103.28.36.91