City: unknown
Region: unknown
Country: United Kingdom
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '195.96.139.0 - 195.96.139.255'
% Abuse contact for '195.96.139.0 - 195.96.139.255' is 'network-abuse@driftnet.io'
inetnum: 195.96.139.0 - 195.96.139.255
netname: UK-DRIFTNET-20260127
remarks: +-----------------------------------------------------------
remarks: | This IP range is not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
org: ORG-DL595-RIPE
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
status: ALLOCATED PA
mnt-by: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2026-01-27T15:37:46Z
last-modified: 2026-05-12T14:16:48Z
source: RIPE
organisation: ORG-DL595-RIPE
org-name: Driftnet Ltd
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
reg-nr: 15588031
org-type: LIR
address: 1140 Avenue of the Americas, 19th Floor
address: 10036
address: New York
address: UNITED STATES
phone: +442037450350
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
abuse-c: AR77106-RIPE
mnt-ref: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:20Z
last-modified: 2026-06-02T10:02:58Z
source: RIPE # Filtered
role: Driftnet Hostmaster
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
address: 1140 Avenue of the Americas, 19th Floor
address: New York, NY 10036
address: UNITED STATES
phone: +442037450350
abuse-mailbox: network-abuse@driftnet.io
nic-hdl: DH9005-RIPE
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:18Z
last-modified: 2026-06-02T10:04:23Z
source: RIPE # Filtered
% Information related to '195.96.139.0/24AS211298'
route: 195.96.139.0/24
origin: AS211298
created: 2026-05-12T14:06:44Z
last-modified: 2026-05-12T14:06:44Z
source: RIPE
mnt-by: lir-uk-driftnet-1-MNT
% This query was served by the RIPE Database Query Service version 1.123 (SHETLAND); <<>> DiG 9.10.3-P4-Ubuntu <<>> 195.96.139.227
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51696
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;195.96.139.227. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026080201 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 03 10:00:45 CST 2026
;; MSG SIZE rcvd: 107227.139.96.195.in-addr.arpa domain name pointer r5-227-e3.monitoring.internet-measurement.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
227.139.96.195.in-addr.arpa name = r5-227-e3.monitoring.internet-measurement.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 128.199.55.13 | attackbots | 3x Failed Password |
2020-01-20 17:27:20 |
| 222.186.175.216 | attackspam | Jan 19 23:41:05 wbs sshd\[13926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root Jan 19 23:41:07 wbs sshd\[13926\]: Failed password for root from 222.186.175.216 port 53144 ssh2 Jan 19 23:41:24 wbs sshd\[13944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root Jan 19 23:41:27 wbs sshd\[13944\]: Failed password for root from 222.186.175.216 port 5138 ssh2 Jan 19 23:41:46 wbs sshd\[13970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root |
2020-01-20 17:42:32 |
| 141.98.81.84 | attack | Unauthorized connection attempt detected from IP address 141.98.81.84 to port 7020 [T] |
2020-01-20 17:44:06 |
| 136.49.77.39 | attackspam | Jan 20 05:51:12 mout sshd[28500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.49.77.39 user=pi Jan 20 05:51:14 mout sshd[28500]: Failed password for pi from 136.49.77.39 port 52184 ssh2 Jan 20 05:51:14 mout sshd[28500]: Connection closed by 136.49.77.39 port 52184 [preauth] |
2020-01-20 17:44:26 |
| 92.242.240.34 | attackbots | IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking. |
2020-01-20 17:16:47 |
| 171.60.186.166 | attack | Jan 20 06:21:44 MK-Soft-VM4 sshd[1928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.60.186.166 Jan 20 06:21:46 MK-Soft-VM4 sshd[1928]: Failed password for invalid user admin from 171.60.186.166 port 12619 ssh2 ... |
2020-01-20 17:23:49 |
| 112.85.42.176 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Failed password for root from 112.85.42.176 port 24144 ssh2 Failed password for root from 112.85.42.176 port 24144 ssh2 Failed password for root from 112.85.42.176 port 24144 ssh2 Failed password for root from 112.85.42.176 port 24144 ssh2 |
2020-01-20 17:29:27 |
| 124.129.30.246 | attackspambots | 'IP reached maximum auth failures for a one day block' |
2020-01-20 17:22:40 |
| 193.83.24.188 | attack | 2020-01-20T05:52:01.087392centos sshd\[7678\]: Invalid user pi from 193.83.24.188 port 46644 2020-01-20T05:52:01.087393centos sshd\[7676\]: Invalid user pi from 193.83.24.188 port 46638 2020-01-20T05:52:01.150236centos sshd\[7678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193-83-24-188.adsl.highway.telekom.at 2020-01-20T05:52:01.150245centos sshd\[7676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193-83-24-188.adsl.highway.telekom.at |
2020-01-20 17:24:12 |
| 175.183.76.126 | attackbotsspam | Unauthorized connection attempt detected from IP address 175.183.76.126 to port 5555 [J] |
2020-01-20 17:54:05 |
| 167.71.98.73 | attack | WordPress wp-login brute force :: 167.71.98.73 0.164 - [20/Jan/2020:04:52:07 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1806 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1" |
2020-01-20 17:21:24 |
| 2001:41d0:1000:647:: | attackspam | WordPress login Brute force / Web App Attack on client site. |
2020-01-20 17:28:19 |
| 82.64.140.9 | attackbots | Unauthorized connection attempt detected from IP address 82.64.140.9 to port 22 [J] |
2020-01-20 17:23:08 |
| 106.12.18.248 | attack | Unauthorized connection attempt detected from IP address 106.12.18.248 to port 2220 [J] |
2020-01-20 17:45:19 |
| 106.13.135.156 | attack | Jan 20 06:51:22 ncomp sshd[30779]: Invalid user foto from 106.13.135.156 Jan 20 06:51:22 ncomp sshd[30779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.135.156 Jan 20 06:51:22 ncomp sshd[30779]: Invalid user foto from 106.13.135.156 Jan 20 06:51:24 ncomp sshd[30779]: Failed password for invalid user foto from 106.13.135.156 port 49464 ssh2 |
2020-01-20 17:38:59 |