AbuseIPDB » 115.68.95.92
115.68.95.92
This IP was reported 5 times. Confidence of
Abuse
is 34% : ?
ISP
SMILESERV
Usage Type
Data Center/Web Hosting/Transit
ASN
AS38700
Domain Name
smileserv.com
Country
🇰🇷
Korea (the Republic of)
City
Incheon, Incheon
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 115.68.95.92 :
This IP address has been reported a total of
5
times from
5 distinct
sources.
115.68.95.92 was first reported on
July 11th 2026 , and the most recent report was
5 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-11 23:56:29
(5 hours ago)
Persistent scanner: 10 UFW blocks. Ports: 5956, 5900, 5925, 5976, 5960, 5984, 5950, 5906, 5954, 5946
Port Scan
🇬🇧
OptimusGO
2026-07-11 20:25:43
(9 hours ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-07-11 21:25:43 UTC
Log evidence:
07/11/2026-21:25:42.190300 [**] [1:9000060:2] AUTONOMOUS Long-term Reconnaissance [**] [Classification: (null)] [Priority: 2] {TCP} 115.68.95.92:61000 -> 185.127.18.66:5947
show less
Port Scan
Brute-Force
🇬🇧
gbzret4d
2026-07-11 20:15:49
(9 hours ago)
Honeypot [uk-production01]: Empty payload (likely service probe); 5975 [1], 5923 [1], 5928 [1], 5939 ...
show more
Honeypot [uk-production01]: Empty payload (likely service probe); 5975 [1], 5923 [1], 5928 [1], 5939 [1], 5932 [1], 5941 [1] TCP
show less
Port Scan
🇫🇮
Ticlem
2026-07-11 08:24:23
(21 hours ago)
2026-07-11T10:14:26.270515+02:00 clement-turlure kernel: [4763862.899632] [UFW BLOCK] IN=enp0s31f6 O ...
show more
2026-07-11T10:14:26.270515+02:00 clement-turlure kernel: [4763862.899632] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=115.68.95.92 DST=95.216.21.136 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=2302 PROTO=TCP SPT=61000 DPT=5978 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-11T10:18:43.906215+02:00 clement-turlure kernel: [4764120.537422] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=115.68.95.92 DST=95.216.21.136 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=58477 PROTO=TCP SPT=61000 DPT=5919 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-11T10:24:23.640398+02:00 clement-turlure kernel: [4764460.274311] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=115.68.95.92 DST=95.216.21.136 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=10474 PROTO=TCP SPT=61000 DPT=5903 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇹🇷
Threat.live
2026-07-11 08:15:02
(21 hours ago)
Suspicious Connection Attempts
Brute-Force
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: