JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.96.139.230

195.96.139.230 was found in our database!

This IP was reported 190 times. Confidence of Abuse is 100%: ?

100%

ISP	Driftnet Ltd
Usage Type	Commercial
ASN	AS211298
Hostname(s)	r5-230-e6.monitoring.internet-measurement.com
Domain Name	driftnet.io
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Salford, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.96.139.230

Whois 195.96.139.230

IP Abuse Reports for 195.96.139.230:

This IP address has been reported a total of 190 times from 83 distinct sources. 195.96.139.230 was first reported on May 14th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 sandra361	2026-07-10 09:24:02 (2 hours ago)	Port scan detected: 8 attempts across 1 port (21). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=195.96.139 ... show more Port scan detected: 8 attempts across 1 port (21). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=195.96.139.230 LEN=40 TOS=0x00 PREC=0x00 TTL=60 ID=61981 DF PROTO=TCP SPT=52359 DPT=21 WINDOW=64240 RES=0x00 ACK RST URGP=0 show less	Port Scan
🇧🇬 MazenHost	2026-07-10 03:48:15 (8 hours ago)	1783655294 - 07/10/2026 06:48:14 Host: 195.96.139.230/195.96.139.230 Port: 6667 TCP Blocked ...	Port Scan
🇧🇷 maviei	2026-07-08 22:06:21 (1 day ago)	2026-07-08T19:06:20.910038-03:00 srv01 kernel: [626904.720904] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43 ... show more 2026-07-08T19:06:20.910038-03:00 srv01 kernel: [626904.720904] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=195.96.139.230 DST=177.19.138.245 LEN=1228 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=16387 DPT=443 LEN=1208 2026-07-08T19:06:21.109798-03:00 srv01 kernel: [626904.921123] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=195.96.139.230 DST=177.19.138.245 LEN=1228 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=16387 DPT=443 LEN=1208 2026-07-08T19:06:21.109905-03:00 srv01 kernel: [626904.921188] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=195.96.139.230 DST=177.19.138.245 LEN=1228 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=16387 DPT=443 LEN=1208 ... show less	Port Scan
🇬🇧 sandra361	2026-07-08 19:30:34 (1 day ago)	Port scan detected: 10 attempts across 1 port (80). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=195.9 ... show more Port scan detected: 10 attempts across 1 port (80). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=195.96.139.230 LEN=42 TOS=0x00 PREC=0x00 TTL=51 ID=48701 DF PROTO=TCP SPT=57759 DPT=80 WINDOW=64240 RES=0x00 ACK PSH FIN URGP=0 show less	Port Scan
🇺🇸 LotPhantom	2026-07-08 14:23:36 (1 day ago)	195.96.139.230 - - [08/Jul/2026:14:22:36 +0000] "GET / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatibl ... show more 195.96.139.230 - - [08/Jul/2026:14:22:36 +0000] "GET / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" "0" ... show less	Web App Attack
🇮🇳 Parth Maniar	2026-07-08 11:24:50 (2 days ago)	This IP address carried out 6 port scanning attempts on 07-07-2026. For more information or to repor ... show more This IP address carried out 6 port scanning attempts on 07-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
Anonymous	2026-07-08 11:15:25 (2 days ago)	Port Scan detected from 195.96.139.230 (IR/Iran/r5-230-e6.monitoring.internet-measurement.com). 5 ... show more Port Scan detected from 195.96.139.230 (IR/Iran/r5-230-e6.monitoring.internet-measurement.com). 5 hits in the last 50 seconds show less	Brute-Force Port Scan
🇧🇬 MazenHost	2026-07-08 06:22:23 (2 days ago)	1783491742 - 07/08/2026 08:22:22 Host: 195.96.139.230/195.96.139.230 Port: 1080 TCP Blocked ...	Port Scan
🇦🇺 FEWA	2026-07-08 01:19:17 (2 days ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
🇮🇹 eliosbrocchi	2026-07-08 00:31:54 (2 days ago)	2026-07-08 02:31:53 195.96.139.230:33477 Connection reset, restarting [0] ...	VPN IP
🇩🇪 Kreisausschuss des Odenwaldkreises	2026-07-07 23:34:49 (2 days ago)	HAProxy NOSRV or BADREQ	Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-07-07 13:57:09 (2 days ago)	[Wed Jul 01 21:13:23.942901 2026] [authz_core:error] [pid 67216:tid 140360654972480] [client 195.96. ... show more [Wed Jul 01 21:13:23.942901 2026] [authz_core:error] [pid 67216:tid 140360654972480] [client 195.96.139.230:51367] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/img/icons/RMBS-apple-touch-icon-144x144.png [Wed Jul 01 21:13:23.945534 2026] [authz_core:error] [pid 67216:tid 140360654972480] [client 195.96.139.230:51367] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html [Tue Jul 07 07:57:08.710855 2026] [authz_core:error] [pid 251404:tid 140360831219264] [client 195.96.139.230:39389] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/img/icons/RMBS-mstile-144x144.png ... show less	Bad Web Bot
Anonymous	2026-07-07 09:36:41 (3 days ago)	Fail2Ban Log Report 195.96.139.230 - [07/Jul/2026:11:36:38 +0200] "\x01\x00\x00\x00\x01" 403 146 "-" ... show more Fail2Ban Log Report 195.96.139.230 - [07/Jul/2026:11:36:38 +0200] "\x01\x00\x00\x00\x01" 403 146 "-" "-" "-" "-" ... show less	Port Scan Hacking
🇧🇷 diego	2026-07-07 04:53:48 (3 days ago)	[probe-44-49] 2026-07-07 04:36:07, Client: 195.96.139.230, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-07-07 04:36:07, Client: 195.96.139.230, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇫🇮 as211431.net	2026-07-06 10:57:08 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from GB. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from GB. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 190 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 45.135.141.15

🇸🇪 2.16.56.46

🇳🇱 217.60.96.89

🇮🇳 203.192.227.146

🇧🇷 187.45.95.66

🇺🇸 170.106.143.20

🇺🇸 162.216.150.67

🇻🇳 152.32.250.36

🇻🇳 103.90.227.203

🇱🇺 64.89.161.77

🇯🇵 47.74.44.196

🇳🇱 45.198.224.120

🇺🇸 40.76.124.118

🇿🇦 20.87.219.67

🇹🇼 198.235.24.117

🇺🇸 91.230.168.56

🇫🇷 85.217.140.52

🇬🇧 85.203.46.34

🇮🇳 49.37.170.8

🇨🇳 36.144.74.39