City: unknown
Region: unknown
Country: United Kingdom
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '195.96.139.0 - 195.96.139.255'
% Abuse contact for '195.96.139.0 - 195.96.139.255' is 'network-abuse@driftnet.io'
inetnum: 195.96.139.0 - 195.96.139.255
netname: UK-DRIFTNET-20260127
remarks: +-----------------------------------------------------------
remarks: | This IP range is not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
org: ORG-DL595-RIPE
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
status: ALLOCATED PA
mnt-by: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2026-01-27T15:37:46Z
last-modified: 2026-05-12T14:16:48Z
source: RIPE
organisation: ORG-DL595-RIPE
org-name: Driftnet Ltd
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
reg-nr: 15588031
org-type: LIR
address: 1140 Avenue of the Americas, 19th Floor
address: 10036
address: New York
address: UNITED STATES
phone: +442037450350
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
abuse-c: AR77106-RIPE
mnt-ref: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:20Z
last-modified: 2026-06-02T10:02:58Z
source: RIPE # Filtered
role: Driftnet Hostmaster
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
address: 1140 Avenue of the Americas, 19th Floor
address: New York, NY 10036
address: UNITED STATES
phone: +442037450350
abuse-mailbox: network-abuse@driftnet.io
nic-hdl: DH9005-RIPE
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:18Z
last-modified: 2026-06-02T10:04:23Z
source: RIPE # Filtered
% Information related to '195.96.139.0/24AS211298'
route: 195.96.139.0/24
origin: AS211298
created: 2026-05-12T14:06:44Z
last-modified: 2026-05-12T14:06:44Z
source: RIPE
mnt-by: lir-uk-driftnet-1-MNT
% This query was served by the RIPE Database Query Service version 1.124.1 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 195.96.139.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55931
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;195.96.139.106. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101401 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 15 04:30:51 CST 2026
;; MSG SIZE rcvd: 107106.139.96.195.in-addr.arpa domain name pointer r5-106-6a.monitoring.internet-measurement.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
106.139.96.195.in-addr.arpa name = r5-106-6a.monitoring.internet-measurement.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.67.194.59 | attack | Jul 7 04:03:08 hcbbdb sshd\[13328\]: Invalid user bg from 111.67.194.59 Jul 7 04:03:08 hcbbdb sshd\[13328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.194.59 Jul 7 04:03:10 hcbbdb sshd\[13328\]: Failed password for invalid user bg from 111.67.194.59 port 44332 ssh2 Jul 7 04:05:56 hcbbdb sshd\[13638\]: Invalid user postgres from 111.67.194.59 Jul 7 04:05:56 hcbbdb sshd\[13638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.194.59 |
2020-07-07 19:06:32 |
| 103.242.56.174 | attackspambots | Jul 7 11:34:57 [host] sshd[21179]: Invalid user m Jul 7 11:34:57 [host] sshd[21179]: pam_unix(sshd: Jul 7 11:34:59 [host] sshd[21179]: Failed passwor |
2020-07-07 19:28:18 |
| 5.9.107.211 | attackspam | 20 attempts against mh-misbehave-ban on twig |
2020-07-07 19:28:31 |
| 217.182.206.121 | attack | Jul 7 13:16:53 vps647732 sshd[28054]: Failed password for mysql from 217.182.206.121 port 55522 ssh2 ... |
2020-07-07 19:29:11 |
| 117.247.226.29 | attackspam | 2020-07-07T02:27:22.221274devel sshd[19747]: Failed password for invalid user admin from 117.247.226.29 port 55954 ssh2 2020-07-07T02:32:13.277683devel sshd[20099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.247.226.29 user=root 2020-07-07T02:32:15.382851devel sshd[20099]: Failed password for root from 117.247.226.29 port 51212 ssh2 |
2020-07-07 19:48:04 |
| 120.131.11.49 | attack | $f2bV_matches |
2020-07-07 19:38:45 |
| 112.85.42.181 | attackbotsspam | Jul 7 13:14:04 vps sshd[713422]: Failed password for root from 112.85.42.181 port 35837 ssh2 Jul 7 13:14:07 vps sshd[713422]: Failed password for root from 112.85.42.181 port 35837 ssh2 Jul 7 13:14:10 vps sshd[713422]: Failed password for root from 112.85.42.181 port 35837 ssh2 Jul 7 13:14:13 vps sshd[713422]: Failed password for root from 112.85.42.181 port 35837 ssh2 Jul 7 13:14:16 vps sshd[713422]: Failed password for root from 112.85.42.181 port 35837 ssh2 ... |
2020-07-07 19:26:36 |
| 218.92.0.175 | attack | 2020-07-07T13:00:41.695564amanda2.illicoweb.com sshd\[17429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root 2020-07-07T13:00:44.482793amanda2.illicoweb.com sshd\[17429\]: Failed password for root from 218.92.0.175 port 21310 ssh2 2020-07-07T13:00:47.511652amanda2.illicoweb.com sshd\[17429\]: Failed password for root from 218.92.0.175 port 21310 ssh2 2020-07-07T13:00:50.284326amanda2.illicoweb.com sshd\[17429\]: Failed password for root from 218.92.0.175 port 21310 ssh2 2020-07-07T13:00:54.591468amanda2.illicoweb.com sshd\[17429\]: Failed password for root from 218.92.0.175 port 21310 ssh2 ... |
2020-07-07 19:21:49 |
| 176.31.31.185 | attackspambots | Jul 7 05:52:08 ip-172-31-61-156 sshd[22254]: Failed password for root from 176.31.31.185 port 51263 ssh2 Jul 7 05:55:32 ip-172-31-61-156 sshd[22389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.31.185 user=root Jul 7 05:55:34 ip-172-31-61-156 sshd[22389]: Failed password for root from 176.31.31.185 port 49895 ssh2 Jul 7 05:55:32 ip-172-31-61-156 sshd[22389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.31.185 user=root Jul 7 05:55:34 ip-172-31-61-156 sshd[22389]: Failed password for root from 176.31.31.185 port 49895 ssh2 ... |
2020-07-07 19:10:42 |
| 14.187.127.49 | attackbots | 2020-07-0705:46:531jseZI-0005Xr-0G\<=info@whatsup2013.chH=\(localhost\)[14.184.186.98]:37408P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2988id=80cf792a210a2028b4b107ab4c3812076f1140@whatsup2013.chT="Wanttobonesomeladiesnearyou\?"forjoechambers218@gmail.comdchae69@gmail.commhmdmhmd26.6q@gmail.com2020-07-0705:43:381jseWA-0005Mm-Lq\<=info@whatsup2013.chH=\(localhost\)[185.129.113.197]:34826P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2954id=860d8db9b2994cbf9c6294c7cc18218dae4d5f5ef0@whatsup2013.chT="Needone-timehookuptonite\?"forstewgebb@gmail.comdjrunzo@yahoo.comvxacraig@hotmail.com2020-07-0705:47:071jseZV-0005Z6-24\<=info@whatsup2013.chH=\(localhost\)[14.187.127.49]:46627P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2955id=a5951f4c476cb9b592d76132c6018b87bd4a254e@whatsup2013.chT="Doyouwanttohumpsomegalsaroundyou\?"forhendersonrodney618@gmail.comeric22.moran@gmail.comar |
2020-07-07 19:42:39 |
| 162.223.89.142 | attack | Jul 7 11:02:42 plex-server sshd[505045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.223.89.142 Jul 7 11:02:42 plex-server sshd[505045]: Invalid user ubnt from 162.223.89.142 port 59102 Jul 7 11:02:44 plex-server sshd[505045]: Failed password for invalid user ubnt from 162.223.89.142 port 59102 ssh2 Jul 7 11:07:00 plex-server sshd[505358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.223.89.142 user=root Jul 7 11:07:02 plex-server sshd[505358]: Failed password for root from 162.223.89.142 port 57800 ssh2 ... |
2020-07-07 19:11:19 |
| 222.186.180.8 | attack | 2020-07-07T07:27:58.309097na-vps210223 sshd[32634]: Failed password for root from 222.186.180.8 port 16786 ssh2 2020-07-07T07:28:01.152359na-vps210223 sshd[32634]: Failed password for root from 222.186.180.8 port 16786 ssh2 2020-07-07T07:28:03.740412na-vps210223 sshd[32634]: Failed password for root from 222.186.180.8 port 16786 ssh2 2020-07-07T07:28:03.740617na-vps210223 sshd[32634]: error: maximum authentication attempts exceeded for root from 222.186.180.8 port 16786 ssh2 [preauth] 2020-07-07T07:28:03.740636na-vps210223 sshd[32634]: Disconnecting: Too many authentication failures [preauth] ... |
2020-07-07 19:34:47 |
| 192.254.207.43 | attackbots | 192.254.207.43 - - [07/Jul/2020:06:07:10 +0200] "GET /wp-login.php HTTP/1.1" 200 5990 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 192.254.207.43 - - [07/Jul/2020:06:07:13 +0200] "POST /wp-login.php HTTP/1.1" 200 6220 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 192.254.207.43 - - [07/Jul/2020:06:07:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-07-07 19:33:21 |
| 201.148.100.190 | attack | 1594093653 - 07/07/2020 05:47:33 Host: 201.148.100.190/201.148.100.190 Port: 445 TCP Blocked |
2020-07-07 19:23:52 |
| 185.221.216.4 | attackbots | 185.221.216.4 - - [07/Jul/2020:12:13:17 +0100] "POST /wp-login.php HTTP/1.1" 200 2018 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.221.216.4 - - [07/Jul/2020:12:13:18 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.221.216.4 - - [07/Jul/2020:12:13:19 +0100] "POST /wp-login.php HTTP/1.1" 200 1953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-07 19:43:56 |