Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '195.96.139.0 - 195.96.139.255'

% Abuse contact for '195.96.139.0 - 195.96.139.255' is 'network-abuse@driftnet.io'

inetnum:        195.96.139.0 - 195.96.139.255
netname:        UK-DRIFTNET-20260127
remarks:        +-----------------------------------------------------------
remarks:        | This IP range is not attacking your network.
remarks:        | Visit https://internet-measurement.com for more details.
remarks:        | View data collected at https://driftnet.io.
remarks:        +-----------------------------------------------------------
country:        GB
org:            ORG-DL595-RIPE
admin-c:        DH9005-RIPE
tech-c:         DH9005-RIPE
status:         ALLOCATED PA
mnt-by:         lir-uk-driftnet-1-MNT
mnt-by:         RIPE-NCC-HM-MNT
created:        2026-01-27T15:37:46Z
last-modified:  2026-05-12T14:16:48Z
source:         RIPE

organisation:   ORG-DL595-RIPE
org-name:       Driftnet Ltd
remarks:        +-----------------------------------------------------------
remarks:        | We are not attacking your network.
remarks:        | Visit https://internet-measurement.com for more details.
remarks:        | View data collected at https://driftnet.io.
remarks:        +-----------------------------------------------------------
country:        GB
reg-nr:         15588031
org-type:       LIR
address:        1140 Avenue of the Americas, 19th Floor
address:        10036
address:        New York
address:        UNITED STATES
phone:          +442037450350
admin-c:        DH9005-RIPE
tech-c:         DH9005-RIPE
abuse-c:        AR77106-RIPE
mnt-ref:        lir-uk-driftnet-1-MNT
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         lir-uk-driftnet-1-MNT
created:        2024-10-30T18:00:20Z
last-modified:  2026-06-02T10:02:58Z
source:         RIPE # Filtered

role:           Driftnet Hostmaster
remarks:        +-----------------------------------------------------------
remarks:        | We are not attacking your network.
remarks:        | Visit https://internet-measurement.com for more details.
remarks:        | View data collected at https://driftnet.io.
remarks:        +-----------------------------------------------------------
address:        1140 Avenue of the Americas, 19th Floor
address:        New York, NY 10036
address:        UNITED STATES
phone:          +442037450350
abuse-mailbox:  network-abuse@driftnet.io
nic-hdl:        DH9005-RIPE
mnt-by:         lir-uk-driftnet-1-MNT
created:        2024-10-30T18:00:18Z
last-modified:  2026-06-02T10:04:23Z
source:         RIPE # Filtered

% Information related to '195.96.139.0/24AS211298'

route:          195.96.139.0/24
origin:         AS211298
created:        2026-05-12T14:06:44Z
last-modified:  2026-05-12T14:06:44Z
source:         RIPE
mnt-by:         lir-uk-driftnet-1-MNT

% This query was served by the RIPE Database Query Service version 1.122.1 (DEXTER)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 195.96.139.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28478
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;195.96.139.196.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026061100 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 11 22:31:49 CST 2026
;; MSG SIZE  rcvd: 107
Host info
196.139.96.195.in-addr.arpa domain name pointer r5-196-c4.monitoring.internet-measurement.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
196.139.96.195.in-addr.arpa	name = r5-196-c4.monitoring.internet-measurement.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
104.248.235.16 attackspam
Sep 23 21:08:08 mx sshd[910121]: Failed password for root from 104.248.235.16 port 32872 ssh2
Sep 23 21:11:57 mx sshd[910322]: Invalid user user from 104.248.235.16 port 42560
Sep 23 21:11:57 mx sshd[910322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.235.16 
Sep 23 21:11:57 mx sshd[910322]: Invalid user user from 104.248.235.16 port 42560
Sep 23 21:11:59 mx sshd[910322]: Failed password for invalid user user from 104.248.235.16 port 42560 ssh2
...
2020-09-24 00:35:47
51.83.126.7 attackspam
2020-09-22 23:48:09.279967-0500  localhost smtpd[47545]: NOQUEUE: reject: RCPT from unknown[51.83.126.7]: 450 4.7.25 Client host rejected: cannot find your hostname, [51.83.126.7]; from= to= proto=ESMTP helo=
2020-09-24 00:00:32
200.0.102.2 attackspambots
Unauthorized connection attempt from IP address 200.0.102.2 on Port 445(SMB)
2020-09-24 00:27:50
156.209.149.34 attackbotsspam
Unauthorized connection attempt from IP address 156.209.149.34 on Port 445(SMB)
2020-09-24 00:24:40
51.91.8.222 attackbots
Invalid user li from 51.91.8.222 port 60392
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.ip-51-91-8.eu
Invalid user li from 51.91.8.222 port 60392
Failed password for invalid user li from 51.91.8.222 port 60392 ssh2
Invalid user user from 51.91.8.222 port 40262
2020-09-24 00:05:56
150.136.20.122 attack
E-Mail Spam (RBL) [REJECTED]
2020-09-23 23:57:15
119.29.115.153 attackbots
Sep 23 16:24:23 ns382633 sshd\[20975\]: Invalid user testuser from 119.29.115.153 port 37718
Sep 23 16:24:23 ns382633 sshd\[20975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.115.153
Sep 23 16:24:25 ns382633 sshd\[20975\]: Failed password for invalid user testuser from 119.29.115.153 port 37718 ssh2
Sep 23 16:31:29 ns382633 sshd\[22540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.115.153  user=root
Sep 23 16:31:31 ns382633 sshd\[22540\]: Failed password for root from 119.29.115.153 port 48194 ssh2
2020-09-24 00:15:31
180.151.76.188 attack
Invalid user joe from 180.151.76.188 port 60872
2020-09-24 00:07:44
114.35.44.253 attack
Sep 23 11:21:32 NPSTNNYC01T sshd[19724]: Failed password for proxy from 114.35.44.253 port 39585 ssh2
Sep 23 11:26:27 NPSTNNYC01T sshd[19968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.35.44.253
Sep 23 11:26:29 NPSTNNYC01T sshd[19968]: Failed password for invalid user salman from 114.35.44.253 port 44066 ssh2
...
2020-09-24 00:15:46
118.24.234.79 attackbotsspam
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "setup" at 2020-09-23T11:28:33Z
2020-09-24 00:09:17
14.143.3.30 attackbotsspam
Invalid user mind from 14.143.3.30 port 60212
2020-09-23 23:54:51
180.168.95.234 attackbotsspam
Sep 23 10:26:59 MainVPS sshd[27224]: Invalid user client1 from 180.168.95.234 port 42794
Sep 23 10:26:59 MainVPS sshd[27224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.95.234
Sep 23 10:26:59 MainVPS sshd[27224]: Invalid user client1 from 180.168.95.234 port 42794
Sep 23 10:27:01 MainVPS sshd[27224]: Failed password for invalid user client1 from 180.168.95.234 port 42794 ssh2
Sep 23 10:30:23 MainVPS sshd[31872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.95.234  user=root
Sep 23 10:30:25 MainVPS sshd[31872]: Failed password for root from 180.168.95.234 port 44782 ssh2
...
2020-09-24 00:37:39
68.183.236.92 attackspam
Sep 23 15:32:23 sip sshd[31154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.92
Sep 23 15:32:25 sip sshd[31154]: Failed password for invalid user test from 68.183.236.92 port 42268 ssh2
Sep 23 15:41:10 sip sshd[1171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.92
2020-09-24 00:33:55
103.105.59.80 attackbots
(sshd) Failed SSH login from 103.105.59.80 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 23 08:36:18 idl1-dfw sshd[241373]: Invalid user 12345 from 103.105.59.80 port 37802
Sep 23 08:36:20 idl1-dfw sshd[241373]: Failed password for invalid user 12345 from 103.105.59.80 port 37802 ssh2
Sep 23 08:43:18 idl1-dfw sshd[250798]: Invalid user glenn from 103.105.59.80 port 52458
Sep 23 08:43:20 idl1-dfw sshd[250798]: Failed password for invalid user glenn from 103.105.59.80 port 52458 ssh2
Sep 23 08:45:57 idl1-dfw sshd[258131]: Invalid user usuario from 103.105.59.80 port 52542
2020-09-24 00:11:55
87.236.213.205 attackbots
Unauthorized IMAP connection attempt
2020-09-24 00:41:55

Recently Reported IPs

80.94.92.65 68.183.201.99 205.185.120.156 130.131.162.184
2606:4700:10::6816:697 2606:4700:10::ac43:1578 2606:4700:10::6814:6058 2606:4700:10::6816:3837
58.253.240.23 20.220.167.94 43.165.7.132 116.193.156.54
2606:4700:10::6816:605 61.242.129.127 31.169.79.1 204.77.129.194
18.190.152.20 193.112.106.148 2606:4700:10::ac43:1137 2606:4700:10::6814:4671