195.96.139.219

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
574 reports
188 reporters · latest 2 hours ago
ISP
Driftnet Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS211298
Hostname(s)
r5-219-db.monitoring.internet-measurement.com
Domain Name
driftnet.io
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
Manchester, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
574 from 188 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 59 🇩🇪 Germany 23 🇳🇱 Netherlands 18
Most common categories Port Scan 92 Brute-Force 77 Hacking 74 SSH 38 Web App Attack 22
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 sefinek.net
Honeypot hit: Empty payload (likely service probe); 6012 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan
🇵🇷 HRCOM
Port Scan
🇮🇪 AutosOnShow
blocked for webapp attack | path requested: / | seen at 2026-11-07 18:33:19.860 |
Web App Attack
🇩🇪 Kitki30.com
Entered Telnet Tarpit (endlessh, server 3). Log: 2026-11-07T06:28:35.616Z ACCEPT host=::ffff:195.96.139.219 port=41223 fd=137 n=516/1020
IoT Targeted Port Scan Brute-Force
🇺🇸 donarev419
Connection to port 8443 with data transfer. Data preview: 
Port Scan Hacking
🇺🇸 donarev419
Connection to port 443 with data transfer. Data preview:
Port Scan Hacking
🇷🇺 OK
SMTP
Email Spam Hacking Brute-Force
🇩🇰 swrlly
2 unauthorized webserver connections (30d)
Web App Attack
🇷🇺 Panamaaa
Port scan detected; Brute-force attack detected
Port Scan Brute-Force
Anonymous
Tried our host z.
Port Scan Hacking Exploited Host
🇳🇱 donarev419
Connection to port 8443 with data transfer. Data preview: 
Port Scan Hacking
🇫🇷 thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 1521 (Oracle) on a host running no such service. Automated port-scan detection at 2026-11-05T08:10:52Z.
Port Scan
🇳🇱 donarev419
Connection to port 443 with data transfer. Data preview: /multistream/1.0.0
Port Scan Hacking
🇨🇳 yiyan
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-03T23:14:24.849Z ACCEPT host=195.96.139.219 port=46411 fd=5 n=5/8192
Brute-Force SSH
🇩🇪 Luhte
Unsolicited TCP connection from 195.96.139.219 to port 0 at 2026-11-03T20:48:12Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇾 202.165.25.8
🇵🇱 162.158.172.33
🇵🇱 162.158.172.32
🇫🇮 45.147.8.207
🇸🇬 35.187.231.181
🇳🇱 200.138.46.130
🇧🇷 187.49.63.41
🇺🇸 134.33.65.47
🇺🇸 134.33.65.13
🇰🇷 125.142.53.165
🇨🇳 116.179.37.95
🇳🇱 109.160.32.46
🇰🇪 102.0.21.218
🇳🇱 77.67.26.183
🇺🇸 54.87.33.79
🇬🇧 31.14.254.43
🇧🇩 223.25.252.84
🇺🇦 134.249.14.132
🇸🇦 87.109.142.19
🇺🇸 57.141.24.33
feedback