68.183.222.194

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
102 reports
47 reporters ยท latest 1 day ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
๐Ÿ‡ฉ๐Ÿ‡ช Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
102 from 47 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 11 ๐Ÿ‡ซ๐Ÿ‡ท France 8 ๐Ÿ‡ฆ๐Ÿ‡ช United Arab Emirates 2
Most common categories Port Scan 25 Brute-Force 9 Web App Attack 5 Hacking 5 Bad Web Bot 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ wk5h
Honeypot (T-Pot), last 24h: 13 hits. Services: Honeytrap.
Port Scan
๐Ÿ‡ง๐Ÿ‡ท radardatelecom
Blocked by Radar da Telecom firewall โ€” abuseipdb
Bad Web Bot Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ HamSammich
Automated sensor: 2 SSH connection/probe attempts over the last 24h (latest 2026-11-12T15:18Z).
Port Scan SSH
๐Ÿ‡ง๐Ÿ‡ท ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking, Brute-Force. Last observed 2026-11-12 UTC.
Hacking Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 13 payload-bearing connection/event(s), 866 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 8086.
Port Scan Hacking
Anonymous
$f2bV_matches
Brute-Force SSH
๐Ÿ‡จ๐Ÿ‡ญ GAS
Direct IP access. 68.183.222.194 - - [12/Nov/2026:12:52:11 +0100] "GET / HTTP/1.0" 402 409 "-" "-" "-" "" 68.183.222.194 - - [12/Nov/2026:12:52:11 +0100] "GET / HTTP/1.0" 402 818 "-" "-" "-" "" ...
Port Scan Web App Attack
Anonymous
Postfix SASL brute-force authentication attempt
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ wristhulk
Honeypot: 5 SMB/RPC connection probes in 1 hour on Dionaea honeypot (port 445). Windows SMB worm / exploit scanner behaviour. (10 attempts)
Port Scan
๐Ÿ‡ญ๐Ÿ‡ท bubausluge
Blocked by https://aegis.hr โ€” Aegis Single-Hit โ€” Gibberish URL probe - (MITRE T1595.003), 5 attempts, Period: 2026-11-12 07:18:42 to 2026-11-12 07:18:42
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: SMB activity on TCP/445; 14 Dionaea events.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ gu-alvareza
Nmap.Script.Scanner
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: repeated TCP service probing on TCP/21 (FTP); 3 application-level events across 3 source port(s). Sensor(s): Dionaea.
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ณ nadnitin
Automated block via Nginx Police. Detected: IP-SCANNER attempting probe 'GET /'.
Port Scan
๐Ÿ‡ฆ๐Ÿ‡ช abusiveIntelligence
RDP connect attempt: Nmap Scanner
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 195.178.110.30
๐Ÿ‡ซ๐Ÿ‡ฎ 155.212.109.142
๐Ÿ‡ง๐Ÿ‡ช 35.210.166.45
๐Ÿ‡ณ๐Ÿ‡ฑ 193.176.31.243
๐Ÿ‡จ๐Ÿ‡ณ 125.124.226.217
๐Ÿ‡จ๐Ÿ‡ณ 117.15.189.5
๐Ÿ‡ป๐Ÿ‡ณ 103.154.62.14
๐Ÿ‡บ๐Ÿ‡ธ 98.122.215.23
๐Ÿ‡ท๐Ÿ‡ด 92.118.39.75
๐Ÿ‡ณ๐Ÿ‡ฑ 86.38.187.143
๐Ÿ‡ท๐Ÿ‡บ 81.163.248.3
๐Ÿ‡ธ๐Ÿ‡ช 78.72.198.77
๐Ÿ‡บ๐Ÿ‡ธ 75.186.107.193
๐Ÿ‡ง๐Ÿ‡ช 35.210.191.203
๐Ÿ‡บ๐Ÿ‡ธ 20.83.154.110
๐Ÿ‡ป๐Ÿ‡ณ 14.224.238.73
๐Ÿ‡ฉ๐Ÿ‡ฐ 2a00:1450:4025:c03::5f
๐Ÿ‡ณ๐Ÿ‡ฑ 204.76.203.40
๐Ÿ‡บ๐Ÿ‡ธ 192.3.50.121
๐Ÿ‡ฌ๐Ÿ‡ง 123.58.207.81
feedback