JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 12.68.228.244

12.68.228.244 was found in our database!

This IP was reported 148 times. Confidence of Abuse is 100%: ?

100%

ISP	AT&T Enterprises, LLC
Usage Type	Fixed Line ISP
ASN	AS7018
Hostname(s)	244.240/28.228.68.12.in-addr.arpa
Domain Name	att.com
Country	🇺🇸 United States of America
City	Gatlinburg, Tennessee

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 12.68.228.244

Whois 12.68.228.244

IP Abuse Reports for 12.68.228.244:

This IP address has been reported a total of 148 times from 77 distinct sources. 12.68.228.244 was first reported on May 28th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Fusty	2026-06-07 02:37:48 (7 hours ago)	Unauthorized attempt on (TCP on port 522). Source port: 60002 TTL: 238 Packet length: 40 Timestamp: ... show more Unauthorized attempt on (TCP on port 522). Source port: 60002 TTL: 238 Packet length: 40 Timestamp: 2026-06-07 04:37:48 show less	Port Scan
🇦🇹 centurion	2026-06-07 01:30:47 (8 hours ago)	Unauthorized attempt on coresecret [50006/tcp] Source port: 60002 TTL: 237 Packet length: 40 TOS: 0x ... show more Unauthorized attempt on coresecret [50006/tcp] Source port: 60002 TTL: 237 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-07 01:22:41 (8 hours ago)	2026-06-07T03:22:39.278801+02:00 veracash-nfs sshd[1016439]: Invalid user backenderm from 12.68.228. ... show more 2026-06-07T03:22:39.278801+02:00 veracash-nfs sshd[1016439]: Invalid user backenderm from 12.68.228.244 port 44258 2026-06-07T03:22:40.243129+02:00 veracash-nfs sshd[1016445]: Invalid user derrickml from 12.68.228.244 port 48800 2026-06-07T03:22:40.745484+02:00 veracash-nfs sshd[1016440]: Invalid user zkagent from 12.68.228.244 port 44652 ... show less	Brute-Force SSH
Anonymous	2026-06-06 23:27:30 (10 hours ago)	Repeated unauthorized connection attempts to restricted service observed.	Port Scan Hacking Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-06-06 23:04:20 (10 hours ago)	Honeypot hit: Empty payload (likely service probe); 13000 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 13000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 StopAbuse	2026-06-06 20:48:45 (13 hours ago)	tcp/449	Port Scan
🇫🇷 Soncraft	2026-06-06 14:05:56 (19 hours ago)	Blocked by UFW on Jellyfin [990/tcp] Source port: 60002 TTL: 237 Packet length: 44 TOS: 0x08 This r ... show more Blocked by UFW on Jellyfin [990/tcp] Source port: 60002 TTL: 237 Packet length: 44 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-06 13:07:37 (20 hours ago)	tcp/993 (2 or more attempts)	Port Scan
🇩🇪 ValtonTahiri	2026-06-06 12:35:33 (21 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=12.68.228.244; proto=TCP; source_port=60002; target_port=2379; flags=SYN show less	Port Scan
🇩🇪 phil2k	2026-06-06 11:53:29 (21 hours ago)	portscan on multiple TCP ports : Firewall: Within 2026-05-28 04:27:34 - 2026-06-04 17:35:38 CEST(+02 ... show more portscan on multiple TCP ports : Firewall: Within 2026-05-28 04:27:34 - 2026-06-04 17:35:38 CEST(+0200) identified: port scan from 12.68.228.244/32 on uncommon port/s: 10500(tcp:10500),10001(tcp:10001),2319(tcp:2319),2500(tcp:2500),16100(tcp:16100),10022(tcp:10022) (6 trials) Fail2ban: Within 2026-05-28 04:27:34 - 2026-06-04 17:35:38 CEST(+0200) banned: 6 times by fail2ban[firewall] show less	Port Scan
🇬🇧 gbzret4d	2026-06-06 07:57:55 (1 day ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 2200 [1] TCP	Port Scan
🇹🇼 taiwanfrp.me	2026-06-06 06:55:40 (1 day ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, target=proxy:kiwicanary.MinecraftJava5fidfdsfdfew\|port:- show less	Port Scan Hacking
🇩🇪 iNetWorker	2026-06-06 06:00:49 (1 day ago)	firewall-block, port(s): 50003/tcp	Port Scan
🇩🇪 Admins@FBN	2026-06-06 05:56:44 (1 day ago)	FW-PortScan: Traffic Blocked srcport=60002 dstport=50003	Port Scan
🇬🇧 Andrew	2026-06-06 05:55:44 (1 day ago)	Blocked by UFW (TCP on port 50003). Source port: 60002 TTL: 238 Packet length: 40 TOS: 0x00 This re ... show more Blocked by UFW (TCP on port 50003). Source port: 60002 TTL: 238 Packet length: 40 TOS: 0x00 This report (for 12.68.228.244) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 143.20.49.38

🇧🇩 103.177.125.62

🇸🇬 47.82.53.55

🇹🇭 223.24.95.34

🇳🇱 216.57.110.81

🇵🇰 203.81.236.171

🇳🇱 185.93.89.79

🇧🇷 177.136.220.152

🇮🇶 169.224.9.149

🇭🇰 165.154.41.50

🇸🇬 152.42.221.98

🇻🇳 115.76.51.180

🇺🇸 104.236.229.227

🇵🇭 103.60.170.21

🇺🇸 96.44.160.195

🇬🇧 88.97.245.136

🇺🇸 50.255.62.89

🇳🇱 45.153.34.71

🇬🇧 35.203.211.219

🇮🇪 34.253.77.29