JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.154.118.242

68.154.118.242 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 30%: ?

30%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.154.118.242

Whois 68.154.118.242

IP Abuse Reports for 68.154.118.242:

This IP address has been reported a total of 51 times from 46 distinct sources. 68.154.118.242 was first reported on July 29th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 demonsword	2026-07-01 11:37:33 (11 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cloudflare.com:443 show less	Open Proxy Port Scan
🇻🇪 LUISE	2026-06-17 02:00:10 (2 weeks ago)	Vulnerability scanning for Web files on server 5-9VE.	Hacking Bad Web Bot
🇺🇸 Axel	2026-06-16 21:12:24 (2 weeks ago)	Blocked by UFW on MVI [2078/tcp] \| SPT: 43969 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2078/tcp] \| SPT: 43969 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 Countryman	2026-06-16 20:29:55 (2 weeks ago)	IPS detection: Spring.Boot.Actuator.Unauthorized.Access	Hacking
🇨🇿 Countryman	2026-06-16 20:29:55 (2 weeks ago)	IPS detection: Spring.Boot.Actuator.Unauthorized.Access	Hacking
🇨🇿 Countryman	2026-06-16 20:29:55 (2 weeks ago)	IPS detection: Spring.Boot.Actuator.Unauthorized.Access	Hacking
🇺🇸 MPL	2026-06-16 19:23:45 (2 weeks ago)	tcp port scan (10 or more attempts)	Port Scan
🇺🇸 Rayulcifer	2026-04-02 13:43:14 (2 months ago)	68.154.118.242 - - [02/Apr/2026:08:41:18 -0500] "CONNECT www.emailondeck.com:443 HTTP/1.1" 502 488 " ... show more 68.154.118.242 - - [02/Apr/2026:08:41:18 -0500] "CONNECT www.emailondeck.com:443 HTTP/1.1" 502 488 "-" "-" 68.154.118.242 - - [02/Apr/2026:08:43:14 -0500] "CONNECT graph.vshield.pro:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2026-03-04 20:11:53 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2026-03-02 22:06:36 (3 months ago)	ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/68.154.118.242 2026-03-0 ... show more ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/68.154.118.242 2026-03-02 17:41:06 ["pwd"] 2026-03-02 17:54:39 ["mount \| head -5"] 2026-03-02 17:44:51 ["hostname"] 2026-03-02 17:48:45 ["uname -a"] 2026-03-02 17:55:18 ["history \| tail -5"] 2026-03-02 17:51:58 ["whoami"] show less	Brute-Force
🇰🇷 i553041	2026-03-02 13:50:20 (3 months ago)	SSH brute force attack: multiple invalid user attempts.	Brute-Force SSH
Anonymous	2026-03-02 11:05:08 (3 months ago)	SSH abuse or brute force attack detected by Fail2Ban	Brute-Force SSH
🇬🇧 tpguy825	2026-03-02 10:09:52 (3 months ago)	SSH bruteforce from 68.154.118.242 port 37888, stuck in tarpit for 180.124 secs	Hacking Brute-Force SSH
Anonymous	2026-03-02 10:01:40 (3 months ago)	2026-03-02T09:46:32.289820+00:00 ephialtes2 sshd[3396946]: Failed password for root from 68.154.118. ... show more 2026-03-02T09:46:32.289820+00:00 ephialtes2 sshd[3396946]: Failed password for root from 68.154.118.242 port 37888 ssh2 2026-03-02T09:53:55.549874+00:00 ephialtes2 sshd[3399119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.154.118.242 user=root 2026-03-02T09:53:57.884577+00:00 ephialtes2 sshd[3399119]: Failed password for root from 68.154.118.242 port 37888 ssh2 2026-03-02T10:01:29.888332+00:00 ephialtes2 sshd[3401421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.154.118.242 user=root 2026-03-02T10:01:31.881977+00:00 ephialtes2 sshd[3401421]: Failed password for root from 68.154.118.242 port 37888 ssh2 ... show less	Brute-Force SSH
🇫🇮 Antti	2026-03-02 10:00:37 (3 months ago)	2026-03-02T09:45:39.152114+00:00 melon sshd[1619575]: User root from 68.154.118.242 not allowed beca ... show more 2026-03-02T09:45:39.152114+00:00 melon sshd[1619575]: User root from 68.154.118.242 not allowed because none of user's groups are listed in AllowGroups 2026-03-02T09:53:24.591141+00:00 melon sshd[1628465]: Connection from 68.154.118.242 port 37888 on 65.108.201.187 port 22 rdomain "" 2026-03-02T09:53:25.073873+00:00 melon sshd[1628465]: User root from 68.154.118.242 not allowed because none of user's groups are listed in AllowGroups 2026-03-02T10:00:36.270651+00:00 melon sshd[1637460]: Connection from 68.154.118.242 port 37888 on 65.108.201.187 port 22 rdomain "" 2026-03-02T10:00:36.752227+00:00 melon sshd[1637460]: User root from 68.154.118.242 not allowed because none of user's groups are listed in AllowGroups show less	Brute-Force SSH

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.76.158.107

🇺🇸 162.216.150.225

🇺🇸 162.216.150.112

🇺🇸 162.216.149.38

🇪🇸 149.91.97.132

🇺🇸 143.198.150.150

🇨🇳 123.163.52.74

🇺🇸 44.121.94.195

🇬🇧 35.203.210.139

🇺🇸 2607:f8b0:4001:c19::120

🇨🇳 171.217.92.33

🇫🇮 147.185.133.132

🇸🇬 47.236.203.85

🇳🇱 45.148.10.151

🇨🇦 4.204.189.82

🇺🇸 162.216.149.112

🇨🇳 111.228.54.209

🇳🇱 91.92.40.13

🇹🇷 88.249.195.23

🇨🇦 85.217.149.13