City: unknown
Region: unknown
Country: United Kingdom
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '195.96.139.0 - 195.96.139.255'
% Abuse contact for '195.96.139.0 - 195.96.139.255' is 'network-abuse@driftnet.io'
inetnum: 195.96.139.0 - 195.96.139.255
netname: UK-DRIFTNET-20260127
remarks: +-----------------------------------------------------------
remarks: | This IP range is not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
org: ORG-DL595-RIPE
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
status: ALLOCATED PA
mnt-by: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2026-01-27T15:37:46Z
last-modified: 2026-05-12T14:16:48Z
source: RIPE
organisation: ORG-DL595-RIPE
org-name: Driftnet Ltd
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
reg-nr: 15588031
org-type: LIR
address: 1140 Avenue of the Americas, 19th Floor
address: 10036
address: New York
address: UNITED STATES
phone: +442037450350
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
abuse-c: AR77106-RIPE
mnt-ref: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:20Z
last-modified: 2026-06-02T10:02:58Z
source: RIPE # Filtered
role: Driftnet Hostmaster
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
address: 1140 Avenue of the Americas, 19th Floor
address: New York, NY 10036
address: UNITED STATES
phone: +442037450350
abuse-mailbox: network-abuse@driftnet.io
nic-hdl: DH9005-RIPE
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:18Z
last-modified: 2026-06-02T10:04:23Z
source: RIPE # Filtered
% Information related to '195.96.139.0/24AS211298'
route: 195.96.139.0/24
origin: AS211298
created: 2026-05-12T14:06:44Z
last-modified: 2026-05-12T14:06:44Z
source: RIPE
mnt-by: lir-uk-driftnet-1-MNT
% This query was served by the RIPE Database Query Service version 1.124.1 (ABERDEEN)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 195.96.139.179
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61033
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;195.96.139.179. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110202 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 03 08:30:47 CST 2026
;; MSG SIZE rcvd: 107
179.139.96.195.in-addr.arpa domain name pointer r5-179-b3.monitoring.internet-measurement.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
179.139.96.195.in-addr.arpa name = r5-179-b3.monitoring.internet-measurement.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.231.89.162 | attackbots | Apr 18 14:58:52 raspberrypi sshd[3924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.89.162 |
2020-04-19 03:41:39 |
| 111.229.28.34 | attackspam | Apr 18 14:04:13 srv01 sshd[28995]: Invalid user eg from 111.229.28.34 port 55234 Apr 18 14:04:13 srv01 sshd[28995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.28.34 Apr 18 14:04:13 srv01 sshd[28995]: Invalid user eg from 111.229.28.34 port 55234 Apr 18 14:04:16 srv01 sshd[28995]: Failed password for invalid user eg from 111.229.28.34 port 55234 ssh2 Apr 18 14:08:22 srv01 sshd[29336]: Invalid user osboxes from 111.229.28.34 port 41066 ... |
2020-04-19 03:42:27 |
| 120.28.109.188 | attackbotsspam | Brute force 60 attempts |
2020-04-19 03:38:12 |
| 113.190.36.114 | attackspam | Invalid user admin from 113.190.36.114 port 58472 |
2020-04-19 03:41:18 |
| 41.46.57.85 | attackbotsspam | Invalid user admin from 41.46.57.85 port 50922 |
2020-04-19 03:49:21 |
| 178.126.238.119 | attackspambots | Brute force attempt |
2020-04-19 03:57:25 |
| 211.253.9.49 | attack | Apr 18 19:08:42 vpn01 sshd[32517]: Failed password for root from 211.253.9.49 port 45274 ssh2 ... |
2020-04-19 03:28:21 |
| 177.1.214.207 | attackbotsspam | Apr 18 21:17:50 MainVPS sshd[4733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.214.207 user=root Apr 18 21:17:52 MainVPS sshd[4733]: Failed password for root from 177.1.214.207 port 26537 ssh2 Apr 18 21:23:13 MainVPS sshd[9273]: Invalid user ftptest from 177.1.214.207 port 57253 Apr 18 21:23:13 MainVPS sshd[9273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.214.207 Apr 18 21:23:13 MainVPS sshd[9273]: Invalid user ftptest from 177.1.214.207 port 57253 Apr 18 21:23:15 MainVPS sshd[9273]: Failed password for invalid user ftptest from 177.1.214.207 port 57253 ssh2 ... |
2020-04-19 03:58:36 |
| 203.147.79.243 | attackspambots | Invalid user admin from 203.147.79.243 port 56831 |
2020-04-19 03:29:36 |
| 217.127.105.21 | attack | Invalid user localadmin from 217.127.105.21 port 9737 |
2020-04-19 03:53:54 |
| 213.32.23.58 | attackspam | (sshd) Failed SSH login from 213.32.23.58 (FR/France/58.ip-213-32-23.eu): 5 in the last 3600 secs |
2020-04-19 03:54:15 |
| 138.197.186.199 | attackspam | Invalid user postgres from 138.197.186.199 port 44130 |
2020-04-19 03:35:27 |
| 106.75.55.123 | attack | Apr 18 15:20:27 DAAP sshd[32049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.55.123 user=root Apr 18 15:20:29 DAAP sshd[32049]: Failed password for root from 106.75.55.123 port 35504 ssh2 Apr 18 15:26:07 DAAP sshd[32152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.55.123 user=root Apr 18 15:26:09 DAAP sshd[32152]: Failed password for root from 106.75.55.123 port 55346 ssh2 Apr 18 15:29:37 DAAP sshd[32239]: Invalid user huawei from 106.75.55.123 port 36638 ... |
2020-04-19 03:42:59 |
| 5.142.204.197 | attackbots | Invalid user admin from 5.142.204.197 port 34119 |
2020-04-19 03:52:08 |
| 43.226.146.134 | attackbotsspam | fail2ban -- 43.226.146.134 ... |
2020-04-19 03:24:16 |