JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.154.119.208

68.154.119.208 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.154.119.208

Whois 68.154.119.208

IP Abuse Reports for 68.154.119.208:

This IP address has been reported a total of 62 times from 48 distinct sources. 68.154.119.208 was first reported on November 18th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Selckie	2026-06-19 19:59:33 (9 hours ago)	fail2ban: NGINX unusual impact	Web App Attack
🇳🇱 tpjg	2026-06-19 01:29:28 (1 day ago)	Automated: 15 requests with error status in 120s window from 68.154.119.208. Evidence: /wp-config.ph ... show more Automated: 15 requests with error status in 120s window from 68.154.119.208. Evidence: /wp-config.php:301,/.env.development:301,/.env_production:301,/.env.bak:301,/.env.old:301,/.env.save:301,/.env.backup:301,/.env.production:301,/.env:301,/.git/index:301,/.git/refs/heads/main:301,/.git/refs/heads/master:301,/.git/logs/HEAD:301,/.git/config:301,/.git/HEAD:301 show less	Web App Attack
🇺🇸 MPL	2026-06-19 00:23:01 (1 day ago)	tcp port scan (10 or more attempts)	Port Scan
🇷🇸 Scan	2026-06-19 00:17:37 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇳🇱 sernate	2026-06-18 23:51:04 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 68.154.119.208 (US/United States/-): 10 in the ... show more (mod_security) mod_security (id:210492) triggered by 68.154.119.208 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC show less	Brute-Force
🇺🇸 xmission.com	2026-06-18 23:07:07 (1 day ago)	Blocked by UFW (TCP on 2078) Source port: 27913 TTL: 46 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2078) Source port: 27913 TTL: 46 Packet length: 60 TOS: 0x00 This report (for 68.154.119.208) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-18 22:45:35 (1 day ago)	AS8075: 68.154.0.0/16 - Microsoft Corporation (US)	Port Scan
🇺🇸 mschimpf	2026-06-05 12:20:00 (2 weeks ago)	WP scan	Web App Attack
🇬🇧 venus.launch.bz	2026-06-05 03:11:25 (2 weeks ago)	(wpscan) WordPress probe detected from 68.154.119.208 (US/United States/-)	Hacking
🇩🇪 pltcldvlpr	2026-06-05 03:08:52 (2 weeks ago)	CMS/framework probe: 68.154.119.208 - - [05/Jun/2026:05:08:51 +0200] "POST /wp/xmlrpc.php HTTP/1.1" ... show more CMS/framework probe: 68.154.119.208 - - [05/Jun/2026:05:08:51 +0200] "POST /wp/xmlrpc.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" asn=8075 org="Microsoft Corporation" country=US ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 03:00:21 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 68.154.119.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 68.154.119.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 23:00:14.265491 2026] [security2:error] [pid 7551:tid 7579] [client 68.154.119.208:6483] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 68.154.119.208 (+1 hits since last alert)\|oldnorthwestlandco.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "oldnorthwestlandco.com"] [uri "/wp/xmlrpc.php"] [unique_id "aiI7vi53qpdd-dLRLSkpjwAAARc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-05 02:57:52 (2 weeks ago)	68.154.119.208 - - [05/Jun/2026:10:57:52 +0800] "POST /wp/xmlrpc.php HTTP/1.1" 404 196 "-" "Mozilla/ ... show more 68.154.119.208 - - [05/Jun/2026:10:57:52 +0800] "POST /wp/xmlrpc.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 bescared	2026-06-05 02:53:54 (2 weeks ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-05 02:47:23 (2 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 68.154.119.208 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 68.154.119.208 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 kosada.com	2026-06-05 02:16:52 (2 weeks ago)	Web vulnerability probing: /wp/xmlrpc.php	Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.240

🇩🇪 193.124.20.254

🇫🇮 147.185.133.102

🇰🇪 102.210.149.105

🇫🇷 185.182.8.41

🇦🇲 176.32.193.16

🇭🇰 152.32.188.174

🇺🇸 107.150.106.28

🇮🇹 81.57.15.243

🇺🇸 74.7.228.252

🇺🇸 73.130.165.122

🇷🇴 2.57.121.25

🇸🇪 185.246.128.133

🇩🇪 167.94.146.32

🇸🇬 68.183.178.130

🇧🇪 35.189.230.251

🇺🇸 15.204.187.234

🇺🇸 205.210.31.109

🇺🇸 174.138.77.223

🇫🇮 147.185.133.21