68.221.68.130
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇪🇸 Spain
- City
- Madrid, Madrid
No reports in the last 60 days
68.221.68.130 has been reported 214 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
214 from
191 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇿🇦 conure.sh |
csagent: score 15.5: php 404 x2, 404 noise floor x2, shell drop sweep x1; 1 domain(s) in 0s
|
Web App Attack | |
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇩🇪 Vegascosmetics |
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
|
Hacking Bad Web Bot Web App Attack | |
| 🇪🇸 Gem |
Unauthorized web scan.
|
Web App Attack | |
| 🇩🇪 Vegascosmetics |
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
|
Hacking Bad Web Bot Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: 16 malicious requests on 2026-03-31 (e.g., env/backup probes, brute-force, or error bursts).
|
Web App Attack SSH Hacking | |
| 🇩🇪 Vegascosmetics |
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
|
Hacking Bad Web Bot Web App Attack | |
| 🇳🇱 oisecnet |
Automated report: Unauthorized vulnerability scanning detected on 2026-04-01. 471 requests from this IP.
|
Brute-Force Web App Attack SSH | |
| Anonymous |
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: WordPress scanning, Malicious User-Agent
|
Bad Web Bot Web App Attack | |
| 🇳🇱 Site.eu |
Excessive multi-domain requests
|
Brute-Force | |
| 🇳🇱 JCB |
68.221.68.130 - - [01/Apr/2026:02:57:50 +0300] "GET /xdd.php HTTP/1.1" 404 416 "-" "-"
68.221.68.130 - - [01/Apr/2026:02:57:50 +0300] "GET /wo.php HTTP/1.1" 404 416 "-" "-"
...
|
Web App Attack Hacking | |
| Anonymous |
"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"
|
Hacking Web App Attack | |
| 🇬🇧 openstrike.co.uk |
90 attacks on PHP URLs:
GET /333.php HTTP/1.1
|
Web App Attack | |
| 🇺🇸 octageeks.com |
Wordpress malicious attack:[octascan]
|
Web App Attack | |
| 🇺🇸 infra-monitor |
Automated ban via infra-monitor: webshell-high-confidence, wp-sensitive-paths, wordpress-probe, +2 more
|
Port Scan Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown