JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.65.122.194

68.65.122.194 was found in our database!

This IP was reported 210 times. Confidence of Abuse is 99%: ?

99%

ISP	Namecheap, Inc.
Usage Type	Content Delivery Network
ASN	AS22612
Hostname(s)	premium23.web-hosting.com
Domain Name	namecheap.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.65.122.194

Whois 68.65.122.194

IP Abuse Reports for 68.65.122.194:

This IP address has been reported a total of 210 times from 82 distinct sources. 68.65.122.194 was first reported on December 1st 2020, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-08-28 07:41:21 (1 hour ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 68.65.122.194 (US/United States/premium23.web ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 68.65.122.194 (US/United States/premium23.web-hosting.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 wordpresshosting.solutions	2026-08-28 06:25:55 (2 hours ago)	WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 68.65.122.194 - - [28/Aug/2026: ... show more WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 68.65.122.194 - - [28/Aug/2026:06:25:54 +0000] "GET /wp-login.php HTTP/1.1" 200 9835 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 68.65.122.194 - - [28/Aug/2026:06:25:54 +0000] "POST /wp-login.php HTTP/1.1" 503 21510 "https://[DOMAIN]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 04:43:05 (4 hours ago)	(mod_security) mod_security (id:225170) triggered by 68.65.122.194 (premium23.web-hosting.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 68.65.122.194 (premium23.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 00:43:00.460914 2026] [security2:error] [pid 26853:tid 26853] [client 68.65.122.194:33068] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|415test.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "415test.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apER1BzfnU52lkLVEQ2N4wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-08-28 04:16:21 (4 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 Marc	2026-08-28 01:49:24 (7 hours ago)	68.65.122.194 - - [28/Aug/2026:01:23:44 +0200] "GET /wp-login.php HTTP/2.0" 200 3453 "-" "Mozilla/5. ... show more 68.65.122.194 - - [28/Aug/2026:01:23:44 +0200] "GET /wp-login.php HTTP/2.0" 200 3453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 68.65.122.194 - - [28/Aug/2026:01:23:47 +0200] "POST /wp-login.php HTTP/2.0" 200 3291 "https://alsarnsberg.eu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 68.65.122.194 - - [28/Aug/2026:03:09:19 +0200] "GET /wp-login.php HTTP/2.0" 200 4257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 68.65.122.194 - - [28/Aug/2026:03:09:20 +0200] "POST /wp-login.php HTTP/2.0" 403 11945 "https://www.saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 68.65.122.194 - - [28/Aug/2026:03:49:23 +0200] "GET /wp-login.php HTTP/2.0" 200 4257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 00:48:36 (8 hours ago)	(mod_security) mod_security (id:225170) triggered by 68.65.122.194 (premium23.web-hosting.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 68.65.122.194 (premium23.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 20:48:28.458052 2026] [security2:error] [pid 5908:tid 5908] [client 68.65.122.194:36002] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|eatcakecup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eatcakecup.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apDa3PnT_O1CpWdR5bPXWgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 www.winos.me	2026-08-27 22:14:24 (10 hours ago)	Scanning for sensitive files/paths: /wp-login.php	Hacking Web App Attack
🇫🇷 tecnicorioja	2026-08-27 22:01:33 (10 hours ago)	wp-login attack [27/Aug/2026:13:46:40	Brute-Force Web App Attack
Anonymous	2026-08-27 20:31:58 (12 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-08-27 20:04:08 (12 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-login.php \| 2026-08-27 20:04 UTC show less	Hacking Web App Attack
Anonymous	2026-08-27 18:23:31 (14 hours ago)	WordPress Brute Force	Brute-Force
🇺🇸 TPI-Abuse	2026-08-27 14:09:20 (18 hours ago)	(mod_security) mod_security (id:225170) triggered by 68.65.122.194 (premium23.web-hosting.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 68.65.122.194 (premium23.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 10:09:12.791689 2026] [security2:error] [pid 4487:tid 4487] [client 68.65.122.194:59472] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|airdriedrivingschool.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "airdriedrivingschool.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apBFCITSrNAvRM87XgGuewAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 oalver	2026-08-27 13:28:50 (19 hours ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-27. Risk score: 30/100. show less	Web App Attack
🇩🇪 FeG Deutschland	2026-08-27 10:40:56 (22 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇺🇸 lostswordfish.com	2026-08-27 10:24:04 (22 hours ago)	Wordfence waf block on jestrellafoundation	Web App Attack

Showing 1 to 15 of 210 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 195.201.204.139

🇦🇷 181.118.64.171

🇧🇷 177.130.250.31

🇮🇳 122.168.194.41

🇨🇳 113.120.146.35

🇩🇪 93.152.224.9

🇳🇱 80.242.246.50

🇳🇱 45.148.10.151

🇮🇷 37.32.22.70

🇺🇸 35.229.54.242

🇬🇧 2a06:4880:6000::87

🇺🇾 200.40.204.66

🇺🇦 178.151.143.2

🇬🇧 154.16.44.170

🇻🇪 153.51.233.26

🇧🇫 102.179.213.24

🇺🇸 20.127.220.213

🇰🇷 14.37.206.42

🇬🇧 193.176.29.27

🇮🇹 178.236.172.146