JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.96.139.158

195.96.139.158 was found in our database!

This IP was reported 145 times. Confidence of Abuse is 100%: ?

100%

ISP	Driftnet Ltd
Usage Type	Commercial
ASN	AS211298
Hostname(s)	r5-158-9e.monitoring.internet-measurement.com
Domain Name	driftnet.io
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Salford, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.96.139.158

Whois 195.96.139.158

IP Abuse Reports for 195.96.139.158:

This IP address has been reported a total of 145 times from 75 distinct sources. 195.96.139.158 was first reported on May 15th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-30 10:58:20 (14 hours ago)	postfix	Email Spam Web App Attack
🇩🇪 ut-addicted.com	2026-06-30 07:38:57 (18 hours ago)	Jun 30 09:38:55 www postfix/smtpd\[7770\]: lost connection after CONNECT from r5-158-9e.monitoring.i ... show more Jun 30 09:38:55 www postfix/smtpd\[7770\]: lost connection after CONNECT from r5-158-9e.monitoring.internet-measurement.com\[195.96.139.158\] show less	Brute-Force Hacking
🇺🇸 sandra361	2026-06-29 17:25:44 (1 day ago)	Port scan detected: 7 attempts across 1 ports (3306). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=195.9 ... show more Port scan detected: 7 attempts across 1 ports (3306). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=195.96.139.158 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=24616 DF PROTO=TCP SPT=35667 DPT=3306 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 NetGuard	2026-06-29 12:27:45 (1 day ago)	#honeypot #netguard247 #redishoneypot Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). T ... show more #honeypot #netguard247 #redishoneypot Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-06-29T12:27:45+00:00 Attacker IP: 195.96.139.158 \| Port: 6379 \| Country: United Kingdom Honeypot: redishoneypot \| Attack: unknown Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Web App Attack
🇩🇪 ManagedStack	2026-06-29 12:15:05 (1 day ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇸🇪 SkyDancer	2026-06-29 11:32:25 (1 day ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
🇵🇱 sefinek.net	2026-06-28 23:21:33 (2 days ago)	Honeypot hit: Empty payload (likely service probe); 4444 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 4444 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇨🇦 Luhte	2026-06-28 10:03:20 (2 days ago)	Unsolicited TCP connection from 195.96.139.158 to port 0 at 2026-06-28T10:03:20Z. Source IP complete ... show more Unsolicited TCP connection from 195.96.139.158 to port 0 at 2026-06-28T10:03:20Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 kexol	2026-06-27 00:41:17 (4 days ago)	3306 port scanned	Port Scan
🇵🇱 axiomofchoice.xyz	2026-06-26 15:14:55 (4 days ago)	endlessh trap: attempts=1 total_time_stuck=10.01s	Port Scan SSH Hacking
🇺🇸 ras07	2026-06-26 04:00:18 (4 days ago)	Brute force SSH login attempts.	Brute-Force SSH
🇭🇰 sandra361	2026-06-26 03:01:22 (4 days ago)	Port scan detected: 6 attempts across 1 ports (8080). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=195.96. ... show more Port scan detected: 6 attempts across 1 ports (8080). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=195.96.139.158 LEN=60 TOS=0x14 PREC=0x00 TTL=51 ID=59148 DF PROTO=TCP SPT=56709 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 acadeova	2026-06-26 00:31:15 (5 days ago)	🚨 Recon detected (nft drop) SRC=195.96.139.158 Observed=UDP dpt=9443 in=enp0s6 ttl=56 Time=recent(jo ... show more 🚨 Recon detected (nft drop) SRC=195.96.139.158 Observed=UDP dpt=9443 in=enp0s6 ttl=56 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇩🇪 anycast_ac	2026-06-25 23:52:15 (5 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8443 (generic). Commands captur ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/8443 (generic). Commands captured: $ show less	DDoS Attack IoT Targeted Brute-Force
🇩🇪 anycast_ac	2026-06-25 23:36:33 (5 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8443 (generic). Commands captur ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/8443 (generic). Commands captured: $ show less	DDoS Attack IoT Targeted Brute-Force

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.184

🇫🇷 194.163.185.4

🇸🇬 194.5.82.8

🇺🇸 138.197.87.21

🇺🇸 109.105.210.70

🇸🇦 94.99.193.164

🇺🇸 69.166.3.202

🇺🇸 66.132.172.182

🇺🇸 64.62.197.2

🇧🇷 45.237.60.180

🇺🇸 20.14.89.155

🇷🇴 2.57.122.209

🇧🇷 201.71.192.108

🇨🇳 183.199.180.239

🇺🇸 172.245.225.106

🇸🇬 165.154.200.214

🇺🇸 162.216.150.20

🇸🇬 129.226.195.146

🇰🇷 119.28.161.148

🇸🇬 118.26.111.107