103.68.192.239

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
85% Critical
20 reports
17 reporters · latest 5 days ago
ISP
Zhenjiang District of Dantu City Hengshun Road No. 105
Usage Type
Data Center/Web Hosting/Transit
ASN
AS62468
Domain Name
vpsquan.com
Country
🇭🇰 Hong Kong
City
Kwai Chung, Kwai Tsing District
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
20 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇹🇷 Turkey 4 🇫🇷 France 3 🇳🇱 Netherlands 3
Most common categories Port Scan 17 Web App Attack 3 Hacking 3 Email Spam 1 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 mixnet
Port scan: SYN-only probes to 318 hosts / 6 ports (8080, 8092, 8787, 8788, 8789, 9000) in 10 minutes. Detected by Mixnet network flow monitoring.
Port Scan
🇹🇷 mixnet
Port scan: SYN-only probes to 123 hosts / 1 port (8788) in 10 minutes. Detected by Mixnet network flow monitoring.
Port Scan
🇹🇷 alastyr
Port scan: probes to 3 unused addresses of AS3188 within 60 s. 15 further packets from this source blocked during the following ban. Ports: 8788. Detected by Alastyr network sensor (XDP).
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 8788) Source port: 57663 TTL: 244 Packet length: 40 TOS: 0x00 This report (for 103.68.192.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 Petre 21_ip
Port Scan
🇺🇸 Cherryh4ck
Blocked by UFW [8788/tcp] | SPT: 51613 | TTL: 248 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 uthul
T-Pot honeypot: 9 hits on ports [8788] (automated)
Port Scan
🇩🇪 xserverx.ru
[UFW SCAN!!!!] SRC=103.68.192.239 LEN=40 TOS=0x08 PREC=0x40 TTL=230 PROTO=TCP SPT=48674 DPT=8788 WINDOW=1024 RES=0x00 SYN URGP=0 ...
Port Scan
🇨🇿 kronos
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:45 | alerts5m:45
Port Scan
🇳🇱 donarev419
Connection to port 8788 with data transfer. Data preview: GET /health HTTP/1.1 Host: 109.110.170.76:8788 Accept-Encoding: identity User-Agent: Mozilla/5.0
Port Scan Hacking
🇺🇸 HamSammich
Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-11-05T04:49Z).
Port Scan Web App Attack
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇳🇱 donarev419
Connection to port 8788 with data transfer. Data preview: GET /panel/status HTTP/1.1 Host: 109.110.170.76:8788 Connection: close
Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: HTTP/1.1 request on 8788 GET /panel/status; 8788 [1] TCP
Web App Attack
🇦🇺 LiftUp Hosting
Honeypot hit: HTTP/1.1 request on 8788 GET /panel/status; 8788 [1] TCP
Hacking Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇲 116.206.192.146
🇩🇪 69.5.169.88
🇺🇸 216.36.67.136
🇺🇸 199.165.159.38
🇧🇷 177.104.199.191
🇵🇪 170.246.58.109
🇯🇵 150.109.197.225
🇩🇴 45.172.153.100
🇮🇩 36.66.162.3
🇩🇪 195.230.103.246
🇹🇷 193.35.155.173
🇲🇽 187.188.224.46
🇷🇺 176.114.41.34
🇵🇱 176.53.159.198
🇳🇬 102.209.29.131
🇷🇴 80.94.95.115
🇬🇧 45.133.173.40
🇬🇧 35.203.211.94
🇬🇧 35.203.211.26
🇺🇸 9.234.10.218
feedback