Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 195.96.139.49:
This IP address has been reported a total of
438
times from
156 distinct
sources.
195.96.139.49 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 77
reports;
United States of America
with 37
reports;
France
with 16
reports.
The most common categories in these recent reports were:
Port Scan
108
times;
Brute-Force
83
times;
Hacking
70
times;
SSH
65
times;
Web App Attack
50
times;
Other
44
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-08 17:40:26.648 5555/TCP connection CID-22876 failed from 195.96.139.49 (r5-49-31.monitoring ...
show more2026-09-08 17:40:26.648 5555/TCP connection CID-22876 failed from 195.96.139.49 (r5-49-31.monitoring.internet-measurement.com), port 51405
show less
Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5 ...
show moreAbusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/) | path: /wp-content/uploads/2023/04/cropped-favicon-cuivres-32x32.png (+1 more) | 2026-09-08 06:00 UTC
show less
Honeypot trap triggered: unsolicited TCP connection(s) to unused port(s) 445 on a host running no su ...
show moreHoneypot trap triggered: unsolicited TCP connection(s) to unused port(s) 445 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-09-08T00:31:29Z to 2026-09-08T00:31:29Z UTC.
2026-09-08T00:31:29Z tcp/445 data: \x00\x0e8w\xfd\xfd\xfd\xfd\x05\xfd'\x00\x00\x00\x00\x00 (non-printable bytes hex-escaped)
Connection was blocked automatically at the firewall. Reported by an automated honeypot.
show less
Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5 ...
show moreAbusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/) | path: /wp-content/uploads/2020/08/bed-1839184_1280-75x75.jpg | 2026-09-06 11:16 UTC
show less
*Port Scan* detected from 195.96.139.49 (GB/United Kingdom/r5-49-31.monitoring.internet-measurement. ...
show more*Port Scan* detected from 195.96.139.49 (GB/United Kingdom/r5-49-31.monitoring.internet-measurement.com).
show less
2026-09-06T06:29:53.167Z, an unauthorized SSH access attempt was detected from source IP address 195 ...
show more2026-09-06T06:29:53.167Z, an unauthorized SSH access attempt was detected from source IP address 195.96.139.49 by our NetFlow-based intrusion detection.
show less
