City: unknown
Region: unknown
Country: United Kingdom
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '195.96.139.0 - 195.96.139.255'
% Abuse contact for '195.96.139.0 - 195.96.139.255' is 'network-abuse@driftnet.io'
inetnum: 195.96.139.0 - 195.96.139.255
netname: UK-DRIFTNET-20260127
remarks: +-----------------------------------------------------------
remarks: | This IP range is not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
org: ORG-DL595-RIPE
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
status: ALLOCATED PA
mnt-by: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2026-01-27T15:37:46Z
last-modified: 2026-05-12T14:16:48Z
source: RIPE
organisation: ORG-DL595-RIPE
org-name: Driftnet Ltd
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
reg-nr: 15588031
org-type: LIR
address: 1140 Avenue of the Americas, 19th Floor
address: 10036
address: New York
address: UNITED STATES
phone: +442037450350
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
abuse-c: AR77106-RIPE
mnt-ref: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:20Z
last-modified: 2026-06-02T10:02:58Z
source: RIPE # Filtered
role: Driftnet Hostmaster
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
address: 1140 Avenue of the Americas, 19th Floor
address: New York, NY 10036
address: UNITED STATES
phone: +442037450350
abuse-mailbox: network-abuse@driftnet.io
nic-hdl: DH9005-RIPE
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:18Z
last-modified: 2026-06-02T10:04:23Z
source: RIPE # Filtered
% Information related to '195.96.139.0/24AS211298'
route: 195.96.139.0/24
origin: AS211298
created: 2026-05-12T14:06:44Z
last-modified: 2026-05-12T14:06:44Z
source: RIPE
mnt-by: lir-uk-driftnet-1-MNT
% This query was served by the RIPE Database Query Service version 1.122.1 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 195.96.139.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2975
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;195.96.139.195. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070202 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 03 10:30:45 CST 2026
;; MSG SIZE rcvd: 107195.139.96.195.in-addr.arpa domain name pointer r5-195-c3.monitoring.internet-measurement.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
195.139.96.195.in-addr.arpa name = r5-195-c3.monitoring.internet-measurement.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 186.221.33.63 | attack | Autoban 186.221.33.63 AUTH/CONNECT |
2019-06-25 08:08:02 |
| 40.127.106.50 | attackspam | Jun 25 06:04:53 localhost sshd[3407]: Invalid user git from 40.127.106.50 port 33242 Jun 25 06:04:53 localhost sshd[3407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.127.106.50 Jun 25 06:04:53 localhost sshd[3407]: Invalid user git from 40.127.106.50 port 33242 Jun 25 06:04:56 localhost sshd[3407]: Failed password for invalid user git from 40.127.106.50 port 33242 ssh2 ... |
2019-06-25 07:58:55 |
| 168.196.150.72 | attack | SMTP-sasl brute force ... |
2019-06-25 07:51:03 |
| 103.115.227.2 | attackbotsspam | Jun 25 00:03:15 OPSO sshd\[10431\]: Invalid user display from 103.115.227.2 port 39942 Jun 25 00:03:15 OPSO sshd\[10431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.115.227.2 Jun 25 00:03:17 OPSO sshd\[10431\]: Failed password for invalid user display from 103.115.227.2 port 39942 ssh2 Jun 25 00:05:09 OPSO sshd\[10724\]: Invalid user cecile from 103.115.227.2 port 56824 Jun 25 00:05:09 OPSO sshd\[10724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.115.227.2 |
2019-06-25 07:36:09 |
| 54.180.122.87 | attack | Jun 24 19:18:49 TORMINT sshd\[738\]: Invalid user docker from 54.180.122.87 Jun 24 19:18:49 TORMINT sshd\[738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.180.122.87 Jun 24 19:18:50 TORMINT sshd\[738\]: Failed password for invalid user docker from 54.180.122.87 port 38034 ssh2 ... |
2019-06-25 08:01:33 |
| 186.226.190.34 | attackspam | Autoban 186.226.190.34 AUTH/CONNECT |
2019-06-25 08:06:21 |
| 186.251.208.148 | attackspambots | Autoban 186.251.208.148 AUTH/CONNECT |
2019-06-25 07:57:40 |
| 186.72.74.70 | attack | Autoban 186.72.74.70 AUTH/CONNECT |
2019-06-25 07:50:29 |
| 193.70.6.197 | attackbotsspam | Jun 24 19:46:54 vps200512 sshd\[7267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.6.197 user=root Jun 24 19:46:56 vps200512 sshd\[7267\]: Failed password for root from 193.70.6.197 port 38631 ssh2 Jun 24 19:47:45 vps200512 sshd\[7287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.6.197 user=root Jun 24 19:47:47 vps200512 sshd\[7287\]: Failed password for root from 193.70.6.197 port 59898 ssh2 Jun 24 19:47:53 vps200512 sshd\[7289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.6.197 user=root |
2019-06-25 08:09:48 |
| 186.176.214.66 | attackspambots | Autoban 186.176.214.66 AUTH/CONNECT |
2019-06-25 08:17:09 |
| 113.203.237.86 | attack | Jun 24 23:54:55 debian sshd\[6761\]: Invalid user sha from 113.203.237.86 port 50419 Jun 24 23:54:55 debian sshd\[6761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.203.237.86 ... |
2019-06-25 08:08:46 |
| 186.21.159.156 | attackspambots | Autoban 186.21.159.156 AUTH/CONNECT |
2019-06-25 08:12:59 |
| 104.248.7.24 | attackbots | 24.06.2019 22:54:39 SSH access blocked by firewall |
2019-06-25 08:09:15 |
| 186.67.130.162 | attackbotsspam | Autoban 186.67.130.162 AUTH/CONNECT |
2019-06-25 07:53:00 |
| 186.192.29.223 | attackbots | Autoban 186.192.29.223 AUTH/CONNECT |
2019-06-25 08:14:33 |