JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.183.197.148

68.183.197.148 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 51%: ?

51%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.183.197.148

Whois 68.183.197.148

IP Abuse Reports for 68.183.197.148:

This IP address has been reported a total of 89 times from 64 distinct sources. 68.183.197.148 was first reported on December 10th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 pipeline.es	2026-06-07 21:33:17 (3 weeks ago)	Web scanning / probing for vulnerable paths	Port Scan Web App Attack
🇳🇱 ipoac.nl	2026-06-07 20:58:56 (3 weeks ago)	ipoac.nl:443 68.183.197.148 - - [07/Jun/2026:22:58:55 +0200] ipoac.nl "GET //wp-includes/wlwmanifest ... show more ipoac.nl:443 68.183.197.148 - - [07/Jun/2026:22:58:55 +0200] ipoac.nl "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 5966 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Bad Web Bot
🇺🇸 TAY	2026-06-07 20:51:07 (3 weeks ago)	68.183.197.148 - - [08/Jun/2026:04:51:04 +0800] "POST //xmlrpc.php HTTP/1.1" 200 623 "-" "Mozilla/5. ... show more 68.183.197.148 - - [08/Jun/2026:04:51:04 +0800] "POST //xmlrpc.php HTTP/1.1" 200 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.183.197.148 - - [08/Jun/2026:04:51:05 +0800] "POST //xmlrpc.php HTTP/1.1" 200 5951 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.183.197.148 - - [08/Jun/2026:04:51:06 +0800] "POST //xmlrpc.php HTTP/1.1" 200 5951 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... show less	Brute-Force
🇫🇷 dynamix	2026-06-07 20:47:13 (3 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇿 Antinson	2026-06-07 20:37:15 (3 weeks ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 lavnet.net	2026-06-07 20:37:00 (3 weeks ago)	68.183.197.148 - - [07/Jun/2026:20:36:59 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 282 ... show more 68.183.197.148 - - [07/Jun/2026:20:36:59 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 2826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.183.197.148 - - [07/Jun/2026:20:36:59 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.183.197.148 - - [07/Jun/2026:20:36:59 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.183.197.148 - - [07/Jun/2026:20:37:00 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.183.197.148 - - [07/Jun/2026:20:37:00 +0000] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 465 ... show less	Brute-Force
🇩🇪 big-cloud.nl	2026-06-07 20:26:25 (3 weeks ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 20:15:13 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 68.183.197.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 68.183.197.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:15:07.033586 2026] [security2:error] [pid 13542:tid 13542] [client 68.183.197.148:52228] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.accommodation-perthairport.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.accommodation-perthairport.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiXRS494Vj5f5EYL61OcHQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 strefapi_com	2026-06-07 20:13:19 (3 weeks ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇳🇱 Savvii	2026-06-07 20:11:21 (3 weeks ago)	15 attempts against mh-modsecurity-ban on ec102932	Brute-Force Web App Attack
🇪🇸 pipeline.es	2026-06-07 20:04:24 (3 weeks ago)	Web scanning / probing for vulnerable paths \| URL: //wp2/wp-includes/wlwmanifest.xml \| Evidence: lan ... show more Web scanning / probing for vulnerable paths \| URL: //wp2/wp-includes/wlwmanifest.xml \| Evidence: landdestination.pt 68.183.197.148 - - [07/Jun/2026:22:03:33 +0200] \"GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 20782 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36\" GEOIP_COUNTRY_CODE=CA \| ASN: DIGITALOCEAN-ASN \| Country: CA show less	Port Scan Web App Attack
Anonymous	2026-06-07 19:44:53 (3 weeks ago)	[ns67.kdns.gr] httpd-suspicious-path: sites=kapaweb.gr; logs=/var/www/vhosts/kapaweb.gr/logs/access_ ... show more [ns67.kdns.gr] httpd-suspicious-path: sites=kapaweb.gr; logs=/var/www/vhosts/kapaweb.gr/logs/access_ssl_log,/var/www/vhosts/system/kapaweb.gr/logs/access_ssl_log; samples=//wp-includes/wlwmanifest.xml \| //blog/wp-includes/wlwmanifest.xml \| //web/wp-includes/wlwmanifest.xml show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 19:44:07 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 68.183.197.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 68.183.197.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 15:44:03.383843 2026] [security2:error] [pid 10422:tid 10422] [client 68.183.197.148:53987] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.abundancecompany.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.abundancecompany.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiXKA_ZGGcrBDMkccKvAtAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2026-06-07 19:41:43 (3 weeks ago)	(wordpress-404) Searching for non-existent wordpress installs from 68.183.197.148 (CA/Canada/Ontario ... show more (wordpress-404) Searching for non-existent wordpress installs from 68.183.197.148 (CA/Canada/Ontario/Toronto/-/[redacted]) show less	Brute-Force
Anonymous	2026-06-07 19:39:29 (3 weeks ago)	68.183.197.148 - - [07/Jun/2026:21:39:27 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 2814 ... show more 68.183.197.148 - - [07/Jun/2026:21:39:27 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 28145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.183.197.148 - - [07/Jun/2026:21:39:27 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 27891 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.183.197.148 - - [07/Jun/2026:21:39:28 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 28145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.183.197.148 - - [07/Jun/2026:21:39:28 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 27891 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.183.197.148 - - [07/Jun/2026:21:39:28 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1 ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.227.209.27

🇺🇸 162.216.149.21

🇰🇷 112.133.127.187

🇰🇷 106.251.244.178

🇮🇩 103.100.175.104

🇷🇺 81.177.101.45

🇦🇹 68.210.200.55

🇺🇸 37.123.192.41

🇺🇸 66.132.172.204

🇺🇸 45.79.207.209

🇰🇷 43.200.178.161

🇻🇳 118.69.226.76

🇬🇧 86.129.53.163

🇺🇸 74.94.234.151

🇧🇷 45.162.104.92

🇳🇱 45.148.10.157

🇬🇧 35.203.210.208

🇺🇸 20.55.119.82

🇺🇸 165.154.172.115

🇺🇸 146.190.164.28