城市(city): unknown
省份(region): unknown
国家(country): United Kingdom
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '195.96.139.0 - 195.96.139.255'
% Abuse contact for '195.96.139.0 - 195.96.139.255' is 'network-abuse@driftnet.io'
inetnum: 195.96.139.0 - 195.96.139.255
netname: UK-DRIFTNET-20260127
remarks: +-----------------------------------------------------------
remarks: | This IP range is not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
org: ORG-DL595-RIPE
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
status: ALLOCATED PA
mnt-by: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2026-01-27T15:37:46Z
last-modified: 2026-05-12T14:16:48Z
source: RIPE
organisation: ORG-DL595-RIPE
org-name: Driftnet Ltd
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
reg-nr: 15588031
org-type: LIR
address: 1140 Avenue of the Americas, 19th Floor
address: 10036
address: New York
address: UNITED STATES
phone: +442037450350
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
abuse-c: AR77106-RIPE
mnt-ref: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:20Z
last-modified: 2026-06-02T10:02:58Z
source: RIPE # Filtered
role: Driftnet Hostmaster
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
address: 1140 Avenue of the Americas, 19th Floor
address: New York, NY 10036
address: UNITED STATES
phone: +442037450350
abuse-mailbox: network-abuse@driftnet.io
nic-hdl: DH9005-RIPE
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:18Z
last-modified: 2026-06-02T10:04:23Z
source: RIPE # Filtered
% Information related to '195.96.139.0/24AS211298'
route: 195.96.139.0/24
origin: AS211298
created: 2026-05-12T14:06:44Z
last-modified: 2026-05-12T14:06:44Z
source: RIPE
mnt-by: lir-uk-driftnet-1-MNT
% This query was served by the RIPE Database Query Service version 1.124.1 (DEXTER); <<>> DiG 9.10.3-P4-Ubuntu <<>> 195.96.139.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4062
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;195.96.139.161. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026092001 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 21 13:00:47 CST 2026
;; MSG SIZE rcvd: 107161.139.96.195.in-addr.arpa domain name pointer r5-161-a1.monitoring.internet-measurement.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
161.139.96.195.in-addr.arpa name = r5-161-a1.monitoring.internet-measurement.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 118.25.27.67 | attackbots | Oct 26 22:22:08 root sshd[11444]: Failed password for root from 118.25.27.67 port 56332 ssh2 Oct 26 22:26:34 root sshd[11536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.27.67 Oct 26 22:26:36 root sshd[11536]: Failed password for invalid user irman from 118.25.27.67 port 37742 ssh2 ... |
2019-10-27 06:22:57 |
| 164.132.81.106 | attackbots | Invalid user aguirre from 164.132.81.106 port 33494 |
2019-10-27 06:04:17 |
| 192.144.174.51 | attackbotsspam | Invalid user sa from 192.144.174.51 port 57768 |
2019-10-27 06:11:22 |
| 46.38.144.32 | attackbotsspam | Oct 26 23:28:03 mail postfix/smtpd\[13710\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 26 23:58:47 mail postfix/smtpd\[14737\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 26 23:59:46 mail postfix/smtpd\[14737\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 27 00:00:47 mail postfix/smtpd\[14852\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2019-10-27 06:02:16 |
| 71.6.199.23 | attackbots | port scan and connect, tcp 23 (telnet) |
2019-10-27 06:22:45 |
| 181.118.94.57 | attackbotsspam | $f2bV_matches |
2019-10-27 05:49:34 |
| 103.58.92.5 | attackbots | Oct 26 21:19:30 thevastnessof sshd[12857]: Failed password for root from 103.58.92.5 port 55746 ssh2 ... |
2019-10-27 06:07:27 |
| 106.13.86.12 | attackspam | Oct 24 17:59:45 cumulus sshd[9018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.86.12 user=r.r Oct 24 17:59:47 cumulus sshd[9018]: Failed password for r.r from 106.13.86.12 port 37752 ssh2 Oct 24 17:59:47 cumulus sshd[9018]: Received disconnect from 106.13.86.12 port 37752:11: Bye Bye [preauth] Oct 24 17:59:47 cumulus sshd[9018]: Disconnected from 106.13.86.12 port 37752 [preauth] Oct 24 18:21:05 cumulus sshd[9834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.86.12 user=r.r Oct 24 18:21:06 cumulus sshd[9834]: Failed password for r.r from 106.13.86.12 port 41752 ssh2 Oct 24 18:21:07 cumulus sshd[9834]: Received disconnect from 106.13.86.12 port 41752:11: Bye Bye [preauth] Oct 24 18:21:07 cumulus sshd[9834]: Disconnected from 106.13.86.12 port 41752 [preauth] Oct 24 18:28:25 cumulus sshd[10088]: Invalid user db2inst from 106.13.86.12 port 41676 Oct 24 18:28:25 cumulus s........ ------------------------------- |
2019-10-27 06:23:15 |
| 222.186.180.17 | attackbots | Oct 26 23:47:24 dedicated sshd[31750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Oct 26 23:47:27 dedicated sshd[31750]: Failed password for root from 222.186.180.17 port 29492 ssh2 |
2019-10-27 06:01:08 |
| 119.28.84.97 | attackspam | Oct 26 10:22:43 sachi sshd\[15313\]: Invalid user penis123 from 119.28.84.97 Oct 26 10:22:43 sachi sshd\[15313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.84.97 Oct 26 10:22:45 sachi sshd\[15313\]: Failed password for invalid user penis123 from 119.28.84.97 port 33320 ssh2 Oct 26 10:27:12 sachi sshd\[15659\]: Invalid user quasar from 119.28.84.97 Oct 26 10:27:12 sachi sshd\[15659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.84.97 |
2019-10-27 06:00:45 |
| 79.0.181.149 | attackbotsspam | Oct 26 23:10:41 SilenceServices sshd[5949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.0.181.149 Oct 26 23:10:42 SilenceServices sshd[5949]: Failed password for invalid user luis from 79.0.181.149 port 62013 ssh2 Oct 26 23:16:55 SilenceServices sshd[9949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.0.181.149 |
2019-10-27 05:46:07 |
| 2.228.163.157 | attack | ssh failed login |
2019-10-27 05:50:43 |
| 78.154.190.124 | attackbotsspam | ET EXPLOIT Linksys E-Series Device RCE Attempt. ET WORM TheMoon.linksys.router 2 |
2019-10-27 05:53:01 |
| 118.68.168.4 | attackspam | Invalid user desliga from 118.68.168.4 port 60978 |
2019-10-27 06:03:50 |
| 37.187.71.202 | attackspambots | WordPress wp-login brute force :: 37.187.71.202 0.120 BYPASS [27/Oct/2019:07:27:21 1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3770 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-27 05:56:40 |