JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.155.146.130

68.155.146.130 was found in our database!

This IP was reported 877 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇲🇽 Mexico
City	Santiago de Queretaro, Queretaro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.155.146.130

Whois 68.155.146.130

IP Abuse Reports for 68.155.146.130:

This IP address has been reported a total of 877 times from 519 distinct sources. 68.155.146.130 was first reported on August 15th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 auridh	2026-08-19 00:03:21 (1 minute ago)	Ip 68.155.146.130 performed 'crowdsecurity/http-wordpress-scan' (4 events over 2.046204465s) at 2026 ... show more Ip 68.155.146.130 performed 'crowdsecurity/http-wordpress-scan' (4 events over 2.046204465s) at 2026-08-18 22:23:30.680573745 +0000 UTC show less	Web App Attack
🇵🇱 alianet	2026-08-19 00:01:58 (2 minutes ago)	[Wed Aug 19 00:01:54.317750 2026] [proxy_fcgi:error] [pid 1932947:tid 1932983] [client 68.155.146.13 ... show more [Wed Aug 19 00:01:54.317750 2026] [proxy_fcgi:error] [pid 1932947:tid 1932983] [client 68.155.146.130:17060] AH01071: Got error 'Primary script unknown' [Wed Aug 19 00:01:54.627296 2026] [proxy_fcgi:error] [pid 1932947:tid 1932988] [client 68.155.146.130:17060] AH01071: Got error 'Primary script unknown' [Wed Aug 19 00:01:54.947756 2026] [proxy_fcgi:error] [pid 1932947:tid 1932986] [client 68.155.146.130:17060] AH01071: Got error 'Primary script unknown' [Wed Aug 19 00:01:55.442222 2026] [proxy_fcgi:error] [pid 1932947:tid 1932990] [client 68.155.146.130:17060] AH01071: Got error 'Primary script unknown' [Wed Aug 19 00:01:55.860171 2026] [proxy_fcgi:error] [pid 1932947:tid 1932976] [client 68.155.146.130:17060] AH01071: Got error 'Primary script unknown' [Wed Aug 19 00:01:56.344808 2026] [proxy_fcgi:error] [pid 1932947:tid 1932996] [client 68.155.146.130:17060] AH01071: Got error 'Primary script unknown' [Wed Aug 19 00:01:56.654834 2026] [proxy_fcgi:error] [pid 1932947:tid 1932995] [cl ... show less	Port Scan Web App Attack
🇺🇸 Player Unknown	2026-08-18 23:56:29 (8 minutes ago)	68.155.146.130 - - [18/Aug/2026:16:56:27 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 68.155.146.130 - - [18/Aug/2026:16:56:27 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" 68.155.146.130 - - [18/Aug/2026:16:56:27 -0700] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 27 "-" "-" 68.155.146.130 - - [18/Aug/2026:16:56:27 -0700] "GET /admin.php HTTP/1.1" 404 27 "-" "-" 68.155.146.130 - - [18/Aug/2026:16:56:27 -0700] "GET /edit.php HTTP/1.1" 404 27 "-" "-" 68.155.146.130 - - [18/Aug/2026:16:56:28 -0700] "GET /w.php HTTP/1.1" 404 27 "-" "-" 68.155.146.130 - - [18/Aug/2026:16:56:28 -0700] "GET /file.php HTTP/1.1" 404 27 "-" "-" 68.155.146.130 - - [18/Aug/2026:16:56:28 -0700] "GET /adminfuns.php HTTP/1.1" 404 27 "-" "-" 68.155.146.130 - - [18/Aug/2026:16:56:28 -0700] "GET /aa.php HTTP/1.1" 404 27 "-" "-" 68.155.146.130 - - [18/Aug/2026:16:56:28 -0700] "GET /classwithtostring.php HTTP/1.1" 404 27 "-" "-" 68.155.146.130 - - [18/Aug/2026:16:56:28 -0700] "GET /about.php HTTP/1.1" 404 27 "-" "-" ... show less	Brute-Force SSH
🇫🇷 Lunix	2026-08-18 23:30:57 (33 minutes ago)		Brute-Force Web App Attack
🇬🇧 Mendip_Defender	2026-08-18 23:30:47 (33 minutes ago)	68.155.146.130 - - [19/Aug/2026:00:30:53 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 68.155.146.130 - - [19/Aug/2026:00:30:53 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 6355 "-" "-" 68.155.146.130 - - [19/Aug/2026:00:30:53 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5526 "-" "-" 68.155.146.130 - - [19/Aug/2026:00:30:54 +0100] "GET /admin.php HTTP/1.1" 404 5526 "-" "-" ... show less	Hacking Web App Attack
🇵🇱 lns.bz	2026-08-18 23:16:50 (47 minutes ago)	Too many 404 requests [BY]	Web App Attack
🇦🇺 paulshipley.com.au	2026-08-18 23:07:40 (56 minutes ago)	furst.com.au:443 68.155.146.130 - - [19/Aug/2026:09:07:39 +1000] "GET /admin.php HTTP/1.1" 404 76533 ... show more furst.com.au:443 68.155.146.130 - - [19/Aug/2026:09:07:39 +1000] "GET /admin.php HTTP/1.1" 404 76533 "-" "-" ... show less	Web App Attack
🇬🇧 ISPLtd	2026-08-18 23:06:46 (57 minutes ago)	68.155.146.130 [18/Aug/2026:20:06:42 -0300] target.domain:80 URL:/wp-content/plugins/hellopress/wp_f ... show more 68.155.146.130 [18/Aug/2026:20:06:42 -0300] target.domain:80 URL:/wp-content/plugins/hellopress/wp_filemanager.php "GET /wp-content/plugins/hellopress/wp_filemanager.php 68.155.146.130 [18/Aug/2026:20:06:45 -0300] target.domain:80 URL:/wp-PII "GET /wp-PII ... show less	Hacking Web App Attack
🇩🇪 auridh	2026-08-18 23:02:39 (1 hour ago)	Ip 68.155.146.130 performed 'crowdsecurity/http-crawl-non_statics' (78 events over 18.74705331s) at ... show more Ip 68.155.146.130 performed 'crowdsecurity/http-crawl-non_statics' (78 events over 18.74705331s) at 2026-08-18 22:23:41.216520689 +0000 UTC show less	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-08-18 23:00:00 (1 hour ago)	IPBlock protected site ID [3390-wh]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇫🇷 PacketFilter	2026-08-18 22:26:20 (1 hour ago)	Fail2Ban	Hacking Web App Attack
🇳🇱 Brict IT	2026-08-18 22:25:47 (1 hour ago)		Bad Web Bot Web App Attack
🇩🇪 rhofas	2026-08-18 22:20:30 (1 hour ago)	Automated PHP shell scanner - 404 flood on hofas.net	Web App Attack Hacking
🇳🇱 Jos Moonen	2026-08-18 22:12:07 (1 hour ago)	68.155.146.130 - - [19/Aug/2026:00:12:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 68.155.146.130 - - [19/Aug/2026:00:12:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 3 "-" "-" 68.155.146.130 - - [19/Aug/2026:00:12:07 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 3 "-" "-" ... show less	Web App Attack Brute-Force
🇩🇪 BlueWire Hosting	2026-08-18 21:57:17 (2 hours ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection

Showing 1 to 15 of 877 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:14d:78a5:4cc3:f0b6:e470:83c3:6d8b

🇧🇴 190.129.122.12

🇬🇧 185.247.137.70

🇺🇸 172.112.56.88

🇧🇷 170.82.105.214

🇺🇸 144.225.6.182

🇨🇳 125.77.73.145

🇵🇭 112.203.69.83

🇫🇷 104.23.225.144

🇻🇳 103.146.23.195

🇨🇳 101.91.114.194

🇷🇴 92.118.39.202

🇱🇻 81.30.98.77

🇬🇧 77.239.124.102

🇺🇸 20.171.23.113

🇺🇸 20.118.133.132

🇯🇵 18.179.204.158

🇺🇸 198.74.58.130

🇬🇧 193.163.125.238

🇻🇪 181.225.32.82