103.68.192.67

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
90% Critical
19 reports
19 reporters · latest 1 week ago
ISP
Zhenjiang District of Dantu City Hengshun Road No. 105
Usage Type
Data Center/Web Hosting/Transit
ASN
AS62468
Domain Name
vpsquan.com
Country
🇭🇰 Hong Kong
City
Kwai Chung, Kwai Tsing District
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
19 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇫🇷 France 4 🇺🇸 United States of America 4
Most common categories Port Scan 16 Brute-Force 2 Hacking 2 Web App Attack 2 Email Spam 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (9000/tcp) [non-standard port]
Web App Attack
🇩🇪 _ArminS_
SP-Scan 40205:9000 detected 2026.11.07 04:05:39 blocked until 2026.12.26 21:08:26
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇵🇱 mkey
Source IP from blacklist is still actively scanning our network. (8 hits in last hour, last seen 2026-11-05 14:35:24)
Port Scan
🇩🇪 klaus_ph
103.68.192.67 - - [05/Nov/2026:14:43:05 +0100] "GET / HTTP/1.0" 400 694 "-" "-" ...
Bad Web Bot
🇯🇵 knock
Knock-Knock honeypot brute-force: HTTP (1 total hits)
Web App Attack
🇺🇸 sandra361
Port scan detected: 7 attempts across 1 port (8788). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=103.68.192.67 LEN=115 TOS=0x00 PREC=0x00 TTL=49 ID=49002 DF PROTO=TCP SPT=37622 DPT=8788 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Port Scan
🇳🇱 VMHeaven.io
Blocked by UFW [8788/tcp] Source port: 50538 TTL: 238 Packet length: 40
Port Scan
🇫🇷 EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
Port Scan
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection/event(s), 298 payload byte(s) total, maximum payload 76 byte(s). Target port(s): 8788.
Port Scan Hacking
🇫🇷 uthul
T-Pot honeypot: 16 hits on ports [8788] (automated)
Port Scan
Anonymous
8788/tcp (1 or more attempts)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 8788) Source port: 56453 TTL: 243 Packet length: 40 TOS: 0x00 This report (for 103.68.192.67) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
Port Scan
Port Scan
🇨🇭 Elysium Security
Mass port scanning on a whole network
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 66.116.250.154
🇧🇷 190.115.84.25
🇸🇬 118.194.235.16
🇧🇷 104.28.254.133
🇭🇰 103.43.191.43
🇺🇸 40.76.120.87
🇺🇸 34.186.252.192
🇯🇵 8.216.5.111
🇯🇵 8.216.5.21
🇬🇧 5.226.140.52
🇬🇹 213.173.52.196
🇹🇼 198.235.24.119
🇨🇳 183.232.212.207
🇺🇸 173.211.33.55
🇩🇪 144.76.32.188
🇨🇭 104.244.79.113
🇧🇬 91.191.209.118
🇨🇳 52.81.37.72
🇸🇪 46.59.109.199
🇬🇧 35.203.210.110
feedback