JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.96.139.128

195.96.139.128 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 100%: ?

100%

ISP	Driftnet Ltd
Usage Type	Commercial
ASN	AS211298
Hostname(s)	r5-128-80.monitoring.internet-measurement.com
Domain Name	driftnet.io
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Salford, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.96.139.128

Whois 195.96.139.128

IP Abuse Reports for 195.96.139.128:

This IP address has been reported a total of 155 times from 72 distinct sources. 195.96.139.128 was first reported on May 15th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 donarev419	2026-06-29 10:03:05 (2 hours ago)	Connection to port 8080 with data transfer. Data preview: �\|	Port Scan Hacking
🇺🇸 donarev419	2026-06-29 09:39:29 (3 hours ago)	Connection to port 21 with data transfer. Data preview: �	Port Scan Hacking
🇩🇪 NetShield-DE	2026-06-29 09:07:56 (3 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T11:07:02+0200. Last: 2026-06-29T11:07:02+0200. Samples: - 2026-06-28 07:36:31,974 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 195.96.139.128 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-29 04:07:56 (8 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T06:07:02+0200. Last: 2026-06-29T06:07:02+0200. Samples: - 2026-06-28 07:36:31,974 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 195.96.139.128 show less	Web App Attack
🇺🇸 sandra361	2026-06-29 01:22:55 (11 hours ago)	Port scan detected: 8 attempts across 1 ports (443). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=195.96 ... show more Port scan detected: 8 attempts across 1 ports (443). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=195.96.139.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=60208 DF PROTO=TCP SPT=41553 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 NetShield-DE	2026-06-28 23:07:54 (13 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T01:07:01+0200. Last: 2026-06-29T01:07:01+0200. Samples: - 2026-06-28 07:36:31,974 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 195.96.139.128 show less	Web App Attack
🇵🇱 genokrad	2026-06-28 20:43:55 (16 hours ago)	Direct ip access to website TCP 80/443 [Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://i ... show more Direct ip access to website TCP 80/443 [Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://inter]. show less	Port Scan Web App Attack
🇩🇪 NetShield-DE	2026-06-28 19:07:57 (17 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T21:07:02+0200. Last: 2026-06-28T21:07:02+0200. Samples: - 2026-06-28 07:36:31,974 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 195.96.139.128 show less	Web App Attack
🇯🇵 ki3	2026-06-28 18:48:39 (18 hours ago)	Fail2Ban: Dovecot Attack 195.96.139.128 1782672518.0(JST)	Brute-Force SSH
🇩🇪 NetShield-DE	2026-06-28 14:07:57 (22 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T16:07:01+0200. Last: 2026-06-28T16:07:01+0200. Samples: - 2026-06-28 07:36:31,974 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 195.96.139.128 show less	Web App Attack
🇭🇰 sandra361	2026-06-28 12:50:22 (1 day ago)	Port scan detected: 11 attempts across 1 ports (443). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=195.96. ... show more Port scan detected: 11 attempts across 1 ports (443). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=195.96.139.128 LEN=60 TOS=0x14 PREC=0x00 TTL=51 ID=49844 DF PROTO=TCP SPT=58689 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇧🇬 MazenHost	2026-06-28 12:04:59 (1 day ago)	1782648298 - 06/28/2026 15:04:58 Host: 195.96.139.128/195.96.139.128 Port: 1524 TCP Blocked ...	Port Scan
🇩🇪 NetShield-DE	2026-06-28 09:07:56 (1 day ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T11:07:01+0200. Last: 2026-06-28T11:07:01+0200. Samples: - 2026-06-28 07:36:31,974 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 195.96.139.128 show less	Web App Attack
Anonymous	2026-06-28 05:12:52 (1 day ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇫🇷 GoodOldTOS	2026-06-28 03:32:37 (1 day ago)	Connection to SSHTarpit	Hacking SSH

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.99.6.151

🇧🇷 138.255.179.104

🇩🇪 128.1.121.201

🇫🇷 91.196.152.120

🇬🇧 87.106.65.126

🇰🇷 1.214.214.114

🇯🇵 218.219.193.151

🇻🇪 201.249.87.201

🇩🇴 190.167.237.191

🇧🇷 190.8.175.6

🇪🇸 185.72.113.118

🇮🇳 183.82.145.55

🇨🇳 182.244.0.150

🇵🇰 182.180.57.212

🇫🇷 173.212.226.152

🇸🇬 172.104.186.150

🇧🇷 170.239.108.21

🇺🇸 167.99.231.247

🇺🇸 167.99.229.88

🇳🇱 167.99.44.136