This IP address has been reported a total of
39
times from
28 distinct
sources.
114.244.223.68 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 10
reports;
Indonesia
with 6
reports;
Poland
with 3
reports.
The most common categories in these recent reports were:
Brute-Force
21
times;
DDoS Attack
10
times;
Web App Attack
6
times;
Port Scan
4
times;
Bad Web Bot
4
times;
Other
16
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-04T13:10:43.453736+02:00 mail postfix/smtpd[772230]: lost connection after CONNECT from unkn ...
show more2026-10-04T13:10:43.453736+02:00 mail postfix/smtpd[772230]: lost connection after CONNECT from unknown[114.244.223.68]
2026-10-04T13:10:43.464468+02:00 mail postfix/smtpd[772232]: lost connection after CONNECT from unknown[114.244.223.68]
2026-10-04T13:10:43.465342+02:00 mail postfix/smtpd[772229]: lost connection after CONNECT from unknown[114.244.223.68]
...
show less
Automated web request flooding / DDoS (EdgeShield WAF).
DDoS Attack
Anonymous
Repeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shi ...
show moreRepeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shield HTTP event export; 86 requests from this client IP between 2026-10-03T01:51:12.888+00:00 and 2026-10-03T01:52:03.022+00:00; peak 20 requests in one UTC calendar second. Methods: POST=86. Top paths (host and payment IDs redacted): /<uuid> (86). JA4: t13d1515h2_8daaf6152771_e4c2b8c727f2. CDN actions: Blocked=86. Counts refer to the supplied log window.
show less
Participated in a distributed HTTP flood (L7 DDoS) against 10x.gg on 2026-10-02 08:19:25-08:20:09 UT ...
show moreParticipated in a distributed HTTP flood (L7 DDoS) against 10x.gg on 2026-10-02 08:19:25-08:20:09 UTC. 1 requests from this IP to a single API endpoint (GET .../funding), HTTP/2 via Cloudflare (CF-Connecting-IP), spoofed browser UA + rotated referrers. nginx rate-limited (HTTP 429). First seen 2026-10-02T08:19:28+00:00. Part of a 1,572-IP rented-proxy pool; this IP had no other traffic to the site that day.
show less
