AbuseIPDB » 195.96.139.154
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example previewIP Abuse Reports for 195.96.139.154:
This IP address has been reported a total of 407 times from 144 distinct sources. 195.96.139.154 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 50 reports; United States of America with 41 reports; Netherlands with 25 reports. The most common categories in these recent reports were: Port Scan 113 times; Brute-Force 78 times; Hacking 76 times; SSH 50 times; Web App Attack 23 times; Other 47 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇨🇦 alexbfr |
Fail2Ban report from custom-honeypot; automated RDP honeypot detection.
|
Brute-Force | ||
| 🇳🇱 GES |
Honeypot port scan detected. Auto-blocked by XUI Shield.
|
DDoS Attack Port Scan | ||
| 🇺🇸 ras07 |
Brute force SSH login attempts.
|
Brute-Force SSH | ||
| 🇦🇺 FEWA |
Fail2Ban Ban Triggered
|
Hacking Bad Web Bot Web App Attack | ||
| 🇺🇸 azminawwar |
[195.96.139.154] triggered by honeypot on port [3389], Timestamp [2026-09-12T22:13:52Z](no payload)
|
Port Scan Hacking | ||
| Anonymous |
|
Hacking Brute-Force Web App Attack | ||
| 🇩🇪 mist x |
Honeypot SMB Probe: Port 445 SMB scan and exploit handshake probe.
|
Port Scan Hacking | ||
| 🇺🇸 donarev419 |
Connection to port 3306 with data transfer.
Data preview:
|
Port Scan Hacking | ||
| 🇩🇪 andorin |
|
Port Scan Brute-Force SSH | ||
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Unknown Protocol Probe (8007/tcp)
|
Port Scan Hacking | ||
| 🇺🇸 dotnetdork |
|
Brute-Force SSH | ||
| 🇩🇪 Ilop |
[hp-100] 3 unsolicited packets to honeypot ports 7547 (OCI DShield sensor)
|
Port Scan | ||
| 🇵🇱 axiomofchoice.xyz |
endlessh trap: attempts=1 total_time_stuck=20.029s
|
Port Scan SSH Hacking | ||
| 🇳🇱 donarev419 |
Connection to port 21 with data transfer.
Data preview:
|
Port Scan Hacking | ||
| 🇺🇸 SuperCores Hosting |
[2026-09-11 01:19:51.759740] TELNET/8080 Unautorized connection, Suspicious Mirai Botnet.
|
IoT Targeted Brute-Force Hacking Port Scan DDoS Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩