138.68.156.95
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇬🇧 United Kingdom of Great Britain and Northern Ireland
- City
- London, England
No reports in the last 60 days
138.68.156.95 has been reported 565 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
565 from
333 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 4449)
Source port: 61000
TTL: 239
Packet length: 44
TOS: 0x08
This report (for 138.68.156.95) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 1337.
|
Port Scan Hacking | |
| 🇫🇷 Hiigara |
connection attempt : 138.68.156.95 on port : tcp/8888 (Unknown)
|
Port Scan | |
| 🇨🇦 celestialcity |
Blocked by UFW on celestialcityna [2000/tcp] | SPT: 61012 | TTL: 238 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/6931
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/138.68.156.95
2026-05-14 14:19:03 /
2026-05-14 14:59:24 /
|
Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3389)
Source port: 61013
TTL: 240
Packet length: 44
TOS: 0x08
This report (for 138.68.156.95) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 MPL |
tcp/1000
|
Port Scan | |
| 🇺🇸 LotPhantom |
138.68.156.95 - - [19/Mar/2026:04:27:38 +0000] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "0"
...
|
Web App Attack | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.68.156.95 (GB/United Kingdom/-): 1 in the last 3600 secs (0-195)
|
Hacking | |
| 🇺🇸 MPL |
tcp/8082
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 8000,8082 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8001
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8001 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 8080)
Source port: 61010
TTL: 239
Packet length: 44
TOS: 0x08
This report (for 138.68.156.95) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown