JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.54.123.192

68.54.123.192 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 58%: ?

58%

ISP	Comcast Cable Communications, LLC
Usage Type	Fixed Line ISP
ASN	AS33491
Hostname(s)	c-68-54-123-192.hsd1.in.comcast.net
Domain Name	comcast.net
Country	🇺🇸 United States of America
City	Indianapolis, Indiana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.54.123.192

Whois 68.54.123.192

IP Abuse Reports for 68.54.123.192:

This IP address has been reported a total of 27 times from 20 distinct sources. 68.54.123.192 was first reported on June 20th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-10-23 18:15:32 (3 days ago)	(wordpress) Failed wordpress login from 68.54.123.192 (US/United States/Indiana/Anderson/c-68-54-123 ... show more (wordpress) Failed wordpress login from 68.54.123.192 (US/United States/Indiana/Anderson/c-68-54-123-192.hsd1.in.comcast.net/[redacted]): (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-10-22 11:38:41 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 68.54.123.192 (c-68-54-123-192.hsd1.in.comcast. ... show more (mod_security) mod_security (id:225170) triggered by 68.54.123.192 (c-68-54-123-192.hsd1.in.comcast.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:38:37.123536 2026] [security2:error] [pid 26923:tid 26923] [client 68.54.123.192:42808] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nivotrol.innovacionesnimba.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nivotrol.innovacionesnimba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atn1veyoJt8XqwWec5ZMRAAAABY"], referer: https://nivotrol.innovacionesnimba.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 00:22:43 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 68.54.123.192 (c-68-54-123-192.hsd1.in.comcast. ... show more (mod_security) mod_security (id:225170) triggered by 68.54.123.192 (c-68-54-123-192.hsd1.in.comcast.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 20:22:36.541734 2026] [security2:error] [pid 18957:tid 18957] [client 68.54.123.192:49678] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sooperare.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sooperare.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atlXTL6FNq4wB917nmVnggAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 gigatech	2026-10-20 20:25:06 (6 days ago)	Webserver Probing	Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 04:16:53 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 68.54.123.192 (c-68-54-123-192.hsd1.in.comcast. ... show more (mod_security) mod_security (id:225170) triggered by 68.54.123.192 (c-68-54-123-192.hsd1.in.comcast.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:16:45.457395 2026] [security2:error] [pid 16454:tid 16454] [client 68.54.123.192:33862] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|phalanxemail.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "phalanxemail.net"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "atBTrbOmnn-U5qRod2uiQQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 brechtr	2026-10-13 15:56:13 (2 weeks ago)	[Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login. ... show more [Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login.php show less	Brute-Force
🇺🇸 SX Communications	2026-10-12 16:15:34 (2 weeks ago)	HTTP application-layer DoS / botnet traffic from 68.54.123.192: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 68.54.123.192: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-10-11 10:09:49 (2 weeks ago)	68.54.123.192 (US/United States/c-68-54-123-192.hsd1.in.comcast.net), 10 distributed imapd attacks o ... show more 68.54.123.192 (US/United States/c-68-54-123-192.hsd1.in.comcast.net), 10 distributed imapd attacks on account [redacted] show less	Brute-Force
🇩🇪 neckaralb-admin.de	2026-10-11 05:35:40 (2 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 neckaralb-admin.de	2026-10-09 14:51:13 (2 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-10-09 03:36:19 (2 weeks ago)	🔥 Web application attack detected. Vulnerability scanning and exploitation attempts identified.	Web App Attack
🇨🇦 Mediashaker	2026-10-08 03:20:03 (2 weeks ago)	(imapd) Failed IMAP login from 68.54.123.192 (US/United States/c-68-54-123-192.hsd1.in.comcast.net)	Brute-Force
🇨🇿 lp	2026-10-01 13:51:48 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 68.54.123.192 2026-10-01T14:30:47+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 68.54.123.192 2026-10-01T14:30:47+02:00 vpn Access-Reject 'xcizk05' station: 68.54.123.192 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-09-30 22:52:42 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 68.54.123.192 2026-09-30T23:38:07+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 68.54.123.192 2026-09-30T23:38:07+02:00 vpn Access-Reject 'xpeta16' station: 68.54.123.192 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 Countryman	2026-09-29 00:10:02 (4 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.109.255.233

🇩🇪 69.5.169.62

🇰🇷 218.148.17.156

🇵🇰 182.188.24.243

🇧🇷 130.49.115.111

🇩🇪 109.160.32.113

🇯🇵 107.155.15.218

🇫🇷 85.217.140.35

🇹🇷 46.2.171.125

🇮🇩 203.145.35.161

🇳🇱 193.47.62.69

🇵🇾 190.112.210.251

🇮🇶 91.106.34.211

🇵🇹 81.84.132.249

🇺🇸 74.235.187.112

🇺🇸 70.183.226.9

🇺🇸 67.21.89.44

🇳🇱 195.178.110.228

🇲🇽 187.190.215.150

🇲🇽 187.170.163.138