JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.67.112.176

68.67.112.176 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 28%: ?

28%

ISP	You.com
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	youbot-68-67-112-176.search.you.com
Domain Name	you.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.67.112.176

Whois 68.67.112.176

IP Abuse Reports for 68.67.112.176:

This IP address has been reported a total of 36 times from 9 distinct sources. 68.67.112.176 was first reported on March 21st 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 YF	2026-07-02 20:00:40 (5 days ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇳🇱 BlueWire Hosting	2026-07-02 06:08:27 (6 days ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇮🇩 hermawan	2026-07-01 13:27:46 (6 days ago)	[Wed Jul 01 20:27:41.260162 2026] [security2:error] [pid 387217:tid 139637333833408] [client 68.67.1 ... show more [Wed Jul 01 20:27:41.260162 2026] [security2:error] [pid 387217:tid 139637333833408] [client 68.67.112.176:20379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36 request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "akUVzal4FRI8VFHF4Mxg3gAAAkE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[387245] [sSnnp4wWUAw] [akUVzal4FRI8VFHF4Mxg3gAAAkE] keep_alive=[0] [2026-07-01 20:27:41.260168] [R:akUVzal4FRI8VFHF4Mxg3gAAAkE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-30 05:32:22 (1 week ago)	[Tue Jun 30 12:32:18.662903 2026] [security2:error] [pid 488613:tid 140589744928448] [client 68.67.1 ... show more [Tue Jun 30 12:32:18.662903 2026] [security2:error] [pid 488613:tid 140589744928448] [client 68.67.112.176:6228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36 request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "akNU4muej1S6O3VN2dKqtQAAAIE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[488641] [PJT75XGircI] [akNU4muej1S6O3VN2dKqtQAAAIE] keep_alive=[0] [2026-06-30 12:32:18.662911] [R:akNU4muej1S6O3VN2dKqtQAAAIE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-29 11:41:13 (1 week ago)	[Mon Jun 29 18:41:07.956597 2026] [security2:error] [pid 1353841:tid 139911101408960] [client 68.67. ... show more [Mon Jun 29 18:41:07.956597 2026] [security2:error] [pid 1353841:tid 139911101408960] [client 68.67.112.176:51218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36 request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "akJZ055h3tNd_0L_2Az_jQAAAMo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1353878] [A5gm7yLwovU] [akJZ055h3tNd_0L_2Az_jQAAAMo] keep_alive=[0] [2026-06-29 18:41:07.956601] [R:akJZ055h3tNd_0L_2Az_jQAAAMo] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatibl ... show less	Email Spam Hacking
🇺🇸 kosada.com	2026-06-27 13:34:08 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-26 20:16:16 (1 week ago)	[Sat Jun 27 03:16:16.059803 2026] [security2:error] [pid 496694:tid 139694104880832] [client 68.67.1 ... show more [Sat Jun 27 03:16:16.059803 2026] [security2:error] [pid 496694:tid 139694104880832] [client 68.67.112.176:10770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36 request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aj7eECVKp9b4wM2Jg99HQAAAAJU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[496742] [2U/kxy2UUnw] [aj7eECVKp9b4wM2Jg99HQAAAAJU] keep_alive=[0] [2026-06-27 03:16:16.059809] [R:aj7eECVKp9b4wM2Jg99HQAAAAJU] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ... show less	Email Spam Hacking
🇩🇪 BlueWire Hosting	2026-06-26 18:44:04 (1 week ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-06-23 22:28:50 (2 weeks ago)	Bad bot ignoring robot.txt	Bad Web Bot
Anonymous	2026-04-29 12:21:41 (2 months ago)	XSS Attempt	Hacking
🇮🇩 hermawan	2026-04-28 05:09:08 (2 months ago)	04/28/2026-11:57:53.103435 [Drop] [] [1:2100001461:0] Suricata match TLS JA4 scan Uniq Zeek no 14 ... show more 04/28/2026-11:57:53.103435 [Drop] [] [1:2100001461:0] Suricata match TLS JA4 scan Uniq Zeek no 1461 with hash_t13d1713h1_ab0a1bf427ad_ecd0401ec68b [**] [Classification: (null)] [Priority: 3] {TCP} 68.67.112.176:26565 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇳🇱 BlueWire Hosting	2026-04-27 23:25:34 (2 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇮🇩 hermawan	2026-04-22 04:27:44 (2 months ago)	04/22/2026-11:27:40.823892 [Drop] [] [1:2100000861:0] Suricata match TLS JA4 scan Uniq Zeek no 86 ... show more 04/22/2026-11:27:40.823892 [Drop] [] [1:2100000861:0] Suricata match TLS JA4 scan Uniq Zeek no 861 with hash_t13d1713h1_ab0a1bf427ad_ecd0401ec68b [**] [Classification: (null)] [Priority: 3] {TCP} 68.67.112.176:24208 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇺🇸 ipblock.com	2026-04-20 19:35:00 (2 months ago)	IPBlock protected site ID [3192-af][s=02]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-04-15 15:46:00 (2 months ago)	IPBlock protected site ID [3192-af][s=02]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 192.163.162.199

🇿🇦 173.194.171.212

🇸🇬 139.99.74.35

🇫🇷 91.196.152.0

🇳🇱 89.248.168.36

🇧🇬 84.252.66.152

🇺🇸 66.132.172.130

🇲🇾 47.250.95.66

🇳🇱 46.29.25.105

🇧🇷 45.230.27.117

🇸🇬 45.78.201.248

🇨🇳 36.250.73.3

🇸🇦 2.90.83.32

🇵🇪 181.64.4.20

🇩🇪 141.11.32.54

🇨🇳 124.221.67.67

🇨🇳 121.43.116.245

🇺🇸 100.29.192.71

🇱🇹 62.60.130.219

🇳🇱 45.156.128.79