JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.154.54.33

68.154.54.33 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.154.54.33

Whois 68.154.54.33

IP Abuse Reports for 68.154.54.33:

This IP address has been reported a total of 49 times from 37 distinct sources. 68.154.54.33 was first reported on October 5th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-27 09:30:22 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 68.154.54.33 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 68.154.54.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 05:30:18.346627 2026] [security2:error] [pid 22256:tid 22256] [client 68.154.54.33:44099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.194"] [uri "/.git/HEAD"] [unique_id "aj-YKsK_QppmyqkpCS_FsQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-27 09:08:07 (2 hours ago)	[PathScanning] Path scanning/probing detected: Sensitive file access: Git repository; Source control ... show more [PathScanning] Path scanning/probing detected: Sensitive file access: Git repository; Source control directory probe (path: /.git/HEAD) show less	Port Scan Hacking
🇩🇪 psauxit	2026-06-27 08:46:47 (2 hours ago)	Fail2Ban - UFW port probing on unauthorized port	Port Scan
🇹🇷 SeczarSecureOps	2026-06-27 07:41:23 (4 hours ago)	Seczar SecureOps — Port Scan Detection (5 events) — quarantined 43200m on optimumofis	Port Scan
🇳🇱 SysAdmin Dylan	2026-06-27 07:14:05 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 68.154.54.33 (US/United States/-): 10 in the la ... show more (mod_security) mod_security (id:210492) triggered by 68.154.54.33 (US/United States/-): 10 in the last 3600 secs show less	Brute-Force
🇺🇸 masterguru	2026-06-27 06:48:16 (4 hours ago)	. Matched phrase "/.git/" at REQUEST_URI. (210492-128)	Web App Attack
Anonymous	2026-06-26 09:31:37 (1 day ago)	WordPress Sensitive System Files Information Disclosure.	Hacking
🇩🇪 ghostwarriors	2026-06-26 08:50:26 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 08:19:11 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 68.154.54.33 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 68.154.54.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 04:19:06.618211 2026] [security2:error] [pid 17417:tid 17436] [client 68.154.54.33:7374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.84"] [uri "/.git/HEAD"] [unique_id "aj41-vs5JN7D6HKwxSRCWQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-06-26 07:49:47 (1 day ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 dynamix	2026-06-26 07:45:46 (1 day ago)	Multiple WAF Violations	Web App Attack
🇳🇱 tpjg	2026-06-26 07:15:33 (1 day ago)	Automated: 15 requests with error status in 120s window from 68.154.54.33. Evidence: /.env.developme ... show more Automated: 15 requests with error status in 120s window from 68.154.54.33. Evidence: /.env.development:301,/.env_production:301,/.env.bak:301,/.env.old:301,/.env.prod:301,/.env.save:301,/.env.backup:301,/.env.production:301,/.env.local:301,/.env:301,/.git/index:301,/.git/refs/heads/master:301,/.git/logs/HEAD:301,/.git/config:301,/.git/HEAD:301 show less	Web App Attack
🇺🇸 gu-alvareza	2026-06-26 07:05:58 (1 day ago)	Spring.Boot.Actuator.Unauthorized.Access	Brute-Force
🇫🇷 applemooz	2026-06-06 19:33:12 (2 weeks ago)	Jun 6 21:33:11 lnxmail62 sshd[2634828]: Invalid user r00t from 68.154.54.33 port 2057 Jun 6 21:33: ... show more Jun 6 21:33:11 lnxmail62 sshd[2634828]: Invalid user r00t from 68.154.54.33 port 2057 Jun 6 21:33:11 lnxmail62 sshd[2634828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.154.54.33 ... show less	Brute-Force SSH
🇫🇷 applemooz	2026-06-06 18:48:49 (2 weeks ago)	Jun 6 20:48:49 lnxmail62 sshd[2615035]: Invalid user r00t from 68.154.54.33 port 2057 Jun 6 20:48: ... show more Jun 6 20:48:49 lnxmail62 sshd[2615035]: Invalid user r00t from 68.154.54.33 port 2057 Jun 6 20:48:49 lnxmail62 sshd[2615035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.154.54.33 Jun 6 20:48:49 lnxmail62 sshd[2615035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.154.54.33 ... show less	Brute-Force SSH

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 118.33.113.91

🇳🇱 45.148.10.230

🇨🇳 221.226.17.34

🇺🇸 192.64.84.92

🇳🇱 185.242.226.11

🇺🇸 185.180.141.38

🇫🇷 185.177.72.53

🇧🇷 181.218.9.86

🇺🇸 166.130.176.136

🇲🇰 79.125.162.32

🇮🇳 49.34.109.151

🇸🇩 41.95.158.161

🇬🇧 35.203.211.5

🇷🇴 2.57.121.25

🇩🇪 212.132.105.121

🇨🇳 183.251.240.177

🇫🇷 46.105.132.55

🇸🇬 43.163.105.123

🇷🇴 193.46.255.86

🇳🇱 192.42.116.45