68.155.153.29

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
599 reports
423 reporters · latest 6 hours ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇲🇽 Mexico
City
Santiago de Queretaro, Queretaro
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
599 from 423 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 151 🇺🇸 United States of America 122 🇫🇷 France 61
Most common categories Web App Attack 480 Bad Web Bot 161 Hacking 136 Brute-Force 125 Port Scan 35
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Web App Attack Port Scan
🇺🇸 Rayulcifer
Brute-Force SSH
🇪🇸 Gem
Unauthorized web scan.
Web App Attack
🇬🇧 sc user
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot Web App Attack Port Scan
🇫🇮 ☠|ʂɧąɖơῳ|☠
[2026-11-13 14:22:37 UTC] Malicious User-Agent/scanning tool detected from 68.155.153.29 () UA: unknown PATHS: unknown
Bad Web Bot Web App Attack
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇨🇦 skunkworks_ca
Automated security event: High-frequency malicious probing and scanner activity across fleet WordPress installations (2862 blocked/challenged hits).
Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk
293 attacks on PHP URLs: GET /wp-includes/blocks/gallery/JedAV2QSJ1.php HTTP/1.1
Web App Attack
🇨🇱 Fernando Soto
WAF propio vps1 (CL): sensx7 score 20 en 1h. sondeo rutas sensibles.
Web App Attack
🇹🇷 eryilmaz
Automated attack blocked by eryilmaz WAF/fail2ban: 4 event(s) [waf.autoban,waf.block] in the last 1 days, e.g. /wp-content/plugins/hellopress/wp_filemanager.php
Web App Attack Hacking
🇬🇧 sc user
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot Web App Attack Port Scan
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: MX, Attack patterns: WordPress scanning, Webshell probing
Bad Web Bot Web App Attack
🇺🇸 mw
GET /wp-admin/includes/class-theme-upgrader-firewall.php HTTP/1.1
Web App Attack
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
🇫🇷 tecnicorioja
wp-login attack [11/Nov/2026:13:32:23
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.102
🇺🇸 154.83.197.211
🇺🇸 147.185.132.97
🇺🇸 136.87.197.185
🇷🇺 80.66.79.217
🇫🇷 213.32.24.214
🇳🇱 195.178.110.30
🇳🇱 193.47.62.69
🇷🇴 193.32.162.15
🇧🇷 186.238.89.142
🇳🇴 185.12.59.118
🇺🇸 147.185.132.60
🇺🇸 136.66.133.58
🇺🇸 136.65.241.42
🇹🇭 118.193.57.59
🇻🇳 115.79.192.73
🇳🇱 93.123.109.77
🇨🇦 85.217.149.60
🇺🇸 57.141.20.20
feedback