JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.148.68.54

135.148.68.54 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovhcloud.com
Country	🇺🇸 United States of America
City	Warrenton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.148.68.54

Whois 135.148.68.54

IP Abuse Reports for 135.148.68.54:

This IP address has been reported a total of 37 times from 31 distinct sources. 135.148.68.54 was first reported on March 24th 2021, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 en0	2026-06-15 05:52:48 (5 days ago)	135.148.68.54 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident coun ... show more 135.148.68.54 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 3 show less	Port Scan
🇺🇸 arc21	2026-06-15 05:51:38 (5 days ago)	2026-06-15T05:51:37.896343+00:00 ENGL-NYC-5 kernel: [3441692.398087] [UFW BLOCK] IN=br0 OUT= PHYSIN= ... show more 2026-06-15T05:51:37.896343+00:00 ENGL-NYC-5 kernel: [3441692.398087] [UFW BLOCK] IN=br0 OUT= PHYSIN=enp5s0 MAC=c6:28:62:bb:6a:37:44:4c:a8:25:16:b1:08:00 SRC=135.148.68.54 DST=130.12.156.66 LEN=40 TOS=0x00 PREC=0x60 TTL=52 ID=0 DF PROTO=TCP SPT=80 DPT=8329 WINDOW=17520 RES=0x00 ACK SYN URGP=0 2026-06-15T05:51:37.896448+00:00 ENGL-NYC-5 kernel: [3441692.398096] [UFW BLOCK] IN=br0 OUT= PHYSIN=enp5s0 MAC=c6:28:62:bb:6a:37:44:4c:a8:25:16:b1:08:00 SRC=135.148.68.54 DST=130.12.156.66 LEN=40 TOS=0x00 PREC=0x60 TTL=52 ID=0 DF PROTO=TCP SPT=80 DPT=60852 WINDOW=17520 RES=0x00 ACK SYN URGP=0 2026-06-15T05:51:37.896459+00:00 ENGL-NYC-5 kernel: [3441692.398123] [UFW BLOCK] IN=br0 OUT= PHYSIN=enp5s0 MAC=c6:28:62:bb:6a:37:44:4c:a8:25:16:b1:08:00 SRC=135.148.68.54 DST=130.12.156.66 LEN=40 TOS=0x00 PREC=0x60 TTL=52 ID=0 DF PROTO=TCP SPT=80 DPT=7314 WINDOW=17520 RES=0x00 ACK SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-06-14 15:31:43 (5 days ago)	Jun 14 17:31:32 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jun 14 17:31:32 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=135.148.68.54 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=53 ID=15115 DF PROTO=TCP SPT=54883 DPT=1194 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 14 17:31:32 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=135.148.68.54 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=53 ID=13835 DF PROTO=TCP SPT=54878 DPT=1194 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 14 17:31:37 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=135.148.68.54 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=53 ID=46991 DF PROTO=TCP SPT=55379 DPT=1194 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 14 17:31:37 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=135.148.68.54 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=53 ID=49039 DF PROTO=TCP SPT=55387 DPT=1194 WINDOW ... show less	Port Scan
🇮🇹 Fusty	2026-06-14 15:31:37 (5 days ago)	Unauthorized attempt on (TCP on port 1194). Source port: 18557 TTL: 51 Packet length: 60 Timestamp: ... show more Unauthorized attempt on (TCP on port 1194). Source port: 18557 TTL: 51 Packet length: 60 Timestamp: 2026-06-14 17:31:37 show less	Port Scan
🇩🇪 bescared	2026-06-14 15:31:32 (5 days ago)	F2B - Malicious activity detected. Excessive port scans. -c23856ef-	Port Scan
🇺🇸 mutebot.net	2026-06-14 15:31:32 (5 days ago)	SRC=135.148.68.54, PROTO=TCP, SPT=58815, DPT=1194 SRC=135.148.68.54, PROTO=TCP, SPT=58809, DPT=1194 ... show more SRC=135.148.68.54, PROTO=TCP, SPT=58815, DPT=1194 SRC=135.148.68.54, PROTO=TCP, SPT=58809, DPT=1194 SRC=135.148.68.54, PROTO=TCP, SPT=58814, DPT=1194 SRC=135.148.68.54, PROTO=TCP, SPT=58816, DPT=1194 SRC=135.148.68.54, PROTO=TCP, SPT=58810, DPT=1194 show less	Port Scan
🇩🇪 excill	2026-06-14 03:10:55 (6 days ago)	Honeypot mesh observed 713 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇩🇪 zupan	2026-06-13 16:00:54 (6 days ago)	Blocked by UFW on vps [1194/tcp] \| SPT: 40467 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [1194/tcp] \| SPT: 40467 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-06-13 15:18:16 (6 days ago)	[rede-164-29] 06/13/2026-12:18:16.412922, 135.148.68.54, Protocol: 6, SURICATA TCP option invalid le ... show more [rede-164-29] 06/13/2026-12:18:16.412922, 135.148.68.54, Protocol: 6, SURICATA TCP option invalid length show less	Hacking
🇩🇪 ITSNF	2026-06-13 13:40:10 (6 days ago)	Blocked by OPNsense firewall; 213 hits, proto=tcp, ports=1194	Port Scan Hacking
🇩🇪 london2038.com	2026-06-13 13:38:52 (6 days ago)	Connection atttempts against closed TCP ports Jun 13 15:31:00 BLOCK SRC=135.148.68.54 LEN=60 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 13 15:31:00 BLOCK SRC=135.148.68.54 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=40534 DF PROTO=TCP SPT=8646 DPT=1194 WINDOW=65535 RES=0x00 SYN Jun 13 15:31:15 BLOCK SRC=135.148.68.54 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=5604 DF PROTO=TCP SPT=10137 DPT=1194 WINDOW=65535 RES=0x00 SYN Jun 13 15:32:33 BLOCK SRC=135.148.68.54 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=27364 DF PROTO=TCP SPT=10222 DPT=1194 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇧🇷 diego	2026-06-13 13:37:41 (6 days ago)	[rede-164-29] Port Scan detected from 135.148.68.54 (US/United States/-). 11 hits in the last 120 ... show more [rede-164-29] Port Scan detected from 135.148.68.54 (US/United States/-). 11 hits in the last 120 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 13 10:37:20 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=135.148.68.54 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=2194 DF PROTO=TCP SPT=39396 DPT=1194 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 13 10:37:20 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=135.148.68.54 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=2706 DF PROTO=TCP SPT=39398 DPT=1194 WINDOW=65535 RES=0x00 SYN URGP show less	Port Scan
🇧🇷 diego	2026-06-13 12:59:59 (6 days ago)	[rede-164-29] 06/13/2026-09:59:59.384887, 135.148.68.54, Protocol: 6, SURICATA TCP option invalid le ... show more [rede-164-29] 06/13/2026-09:59:59.384887, 135.148.68.54, Protocol: 6, SURICATA TCP option invalid length show less	Hacking
🇺🇸 scoooter	2026-06-13 05:02:02 (1 week ago)	SSH (port 22) brute-force attack. 255 login attempts in the last 24 hours.	Brute-Force SSH
🇨🇭 Elysium Security	2026-06-13 04:38:27 (1 week ago)	Mass port scanning on a whole network	Port Scan

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇼 188.71.221.181

🇧🇷 186.243.13.146

🇳🇱 45.148.10.230

🇺🇸 44.72.232.221

🇩🇪 213.209.159.236

🇬🇧 198.244.240.18

🇧🇷 186.239.41.102

🇺🇸 184.105.247.251

🇩🇪 155.117.127.214

🇯🇵 153.139.27.141

🇺🇸 153.66.209.70

🇨🇳 121.229.210.188

🇮🇳 117.99.229.71

🇳🇱 45.148.10.157

🇺🇸 44.112.168.26

🇮🇩 36.68.186.7

🇺🇸 34.70.21.37

🇰🇷 14.206.12.13

🇨🇳 218.13.26.42

🇪🇸 212.227.235.203