68.34.107.159

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
81% Critical
30 reports
19 reporters · latest 1 day ago
ISP
Comcast Cable Communications, Inc.
Usage Type
Fixed Line ISP
ASN
AS33668
Hostname(s)
c-68-34-107-159.hsd1.mi.comcast.net
Domain Name
comcast.net
Country
🇺🇸 United States of America
City
Holland, Michigan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
30 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 9 🇨🇿 Czechia 6 🇺🇸 United States of America 5
Most common categories Web App Attack 24 Brute-Force 14 Exploited Host 4 Bad Web Bot 3 Hacking 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 LRob
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Mobile Safari/537.36 | 2026-11-08 14:52 UTC
Web App Attack Hacking
🇺🇸 mnsf
Abuse Detected (9)
Brute-Force Web App Attack
🇩🇪 LRob
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15 | src_port: 39077
Bad Web Bot
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host Web App Attack
🇮🇩 IndoAbuse
Wordfence 503 block: Repeated malicious requests and bot attacks blocked by WAF.
Brute-Force Web App Attack
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 68.34.107.159 2026-11-04T23:21:59+0100 vpn Access-Reject station: 68.34.107.159
Brute-Force Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 68.34.107.159 2026-11-04T01:37:26+0100 vpn Access-Reject station: 68.34.107.159
Brute-Force Web App Attack
Anonymous
WordPress login / xmlrpc probing across multiple sites
Web App Attack
🇬🇧 Aetherweb Ark
(mod_security) mod_security (id:35002) triggered by 68.34.107.159 (US/United States/c-68-34-107-159.hsd1.mi.comcast.net): N in the last X secs
Web App Attack
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 100100. Observed at: 2026-11-02T02:33:48.000Z.
Web App Attack
🇳🇱 maxxsense
(wordpress) Failed wordpress login from 68.34.107.159 (US/United States/c-68-34-107-159.hsd1.mi.comcast.net)
Brute-Force
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host Web App Attack
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 213.209.159.241
🇨🇳 210.13.99.66
🇮🇹 162.158.129.66
🇧🇷 138.118.204.50
🇩🇪 69.5.169.160
🇺🇸 40.80.204.121
🇬🇧 193.163.125.220
🇳🇱 193.47.62.69
🇨🇳 124.207.165.138
🇨🇳 120.48.127.169
🇨🇳 118.145.239.129
🇮🇩 103.162.68.191
🇺🇸 98.224.102.190
🇳🇱 86.38.187.116
🇵🇹 82.154.196.206
🇫🇮 46.29.26.205
🇳🇱 45.74.31.168
🇺🇸 35.231.203.93
🇺🇸 34.83.56.172
feedback