城市(city): unknown
省份(region): unknown
国家(country): United Kingdom
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '195.96.139.0 - 195.96.139.255'
% Abuse contact for '195.96.139.0 - 195.96.139.255' is 'network-abuse@driftnet.io'
inetnum: 195.96.139.0 - 195.96.139.255
netname: UK-DRIFTNET-20260127
remarks: +-----------------------------------------------------------
remarks: | This IP range is not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
org: ORG-DL595-RIPE
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
status: ALLOCATED PA
mnt-by: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2026-01-27T15:37:46Z
last-modified: 2026-05-12T14:16:48Z
source: RIPE
organisation: ORG-DL595-RIPE
org-name: Driftnet Ltd
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
country: GB
reg-nr: 15588031
org-type: LIR
address: 1140 Avenue of the Americas, 19th Floor
address: 10036
address: New York
address: UNITED STATES
phone: +442037450350
admin-c: DH9005-RIPE
tech-c: DH9005-RIPE
abuse-c: AR77106-RIPE
mnt-ref: lir-uk-driftnet-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:20Z
last-modified: 2026-06-02T10:02:58Z
source: RIPE # Filtered
role: Driftnet Hostmaster
remarks: +-----------------------------------------------------------
remarks: | We are not attacking your network.
remarks: | Visit https://internet-measurement.com for more details.
remarks: | View data collected at https://driftnet.io.
remarks: +-----------------------------------------------------------
address: 1140 Avenue of the Americas, 19th Floor
address: New York, NY 10036
address: UNITED STATES
phone: +442037450350
abuse-mailbox: network-abuse@driftnet.io
nic-hdl: DH9005-RIPE
mnt-by: lir-uk-driftnet-1-MNT
created: 2024-10-30T18:00:18Z
last-modified: 2026-06-02T10:04:23Z
source: RIPE # Filtered
% Information related to '195.96.139.0/24AS211298'
route: 195.96.139.0/24
origin: AS211298
created: 2026-05-12T14:06:44Z
last-modified: 2026-05-12T14:06:44Z
source: RIPE
mnt-by: lir-uk-driftnet-1-MNT
% This query was served by the RIPE Database Query Service version 1.123 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 195.96.139.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60887
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;195.96.139.243. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081001 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 11 06:30:25 CST 2026
;; MSG SIZE rcvd: 107243.139.96.195.in-addr.arpa domain name pointer r5-243-f3.monitoring.internet-measurement.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
243.139.96.195.in-addr.arpa name = r5-243-f3.monitoring.internet-measurement.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 218.92.0.148 | attackbots | Dec 13 14:39:43 php1 sshd\[22017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root Dec 13 14:39:45 php1 sshd\[22017\]: Failed password for root from 218.92.0.148 port 5127 ssh2 Dec 13 14:39:57 php1 sshd\[22017\]: Failed password for root from 218.92.0.148 port 5127 ssh2 Dec 13 14:40:01 php1 sshd\[22054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root Dec 13 14:40:04 php1 sshd\[22054\]: Failed password for root from 218.92.0.148 port 21325 ssh2 |
2019-12-14 08:40:48 |
| 118.67.219.101 | attackbots | Dec 13 14:47:32 hanapaa sshd\[22668\]: Invalid user passwd1235 from 118.67.219.101 Dec 13 14:47:32 hanapaa sshd\[22668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.67.219.101 Dec 13 14:47:34 hanapaa sshd\[22668\]: Failed password for invalid user passwd1235 from 118.67.219.101 port 39786 ssh2 Dec 13 14:54:24 hanapaa sshd\[23374\]: Invalid user yanzi from 118.67.219.101 Dec 13 14:54:24 hanapaa sshd\[23374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.67.219.101 |
2019-12-14 08:57:19 |
| 42.117.228.91 | attack | Dec 14 00:56:09 mc1 kernel: \[440200.538444\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.117.228.91 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10203 PROTO=TCP SPT=13701 DPT=23 WINDOW=10133 RES=0x00 SYN URGP=0 Dec 14 00:56:09 mc1 kernel: \[440200.561695\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.117.228.91 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10203 PROTO=TCP SPT=13701 DPT=23 WINDOW=10133 RES=0x00 SYN URGP=0 Dec 14 00:56:09 mc1 kernel: \[440200.599860\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.117.228.91 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10203 PROTO=TCP SPT=13701 DPT=23 WINDOW=10133 RES=0x00 SYN URGP=0 ... |
2019-12-14 08:28:06 |
| 165.22.144.206 | attack | Dec 14 00:29:45 pi sshd\[31689\]: Failed password for invalid user saturn from 165.22.144.206 port 33266 ssh2 Dec 14 00:35:39 pi sshd\[32060\]: Invalid user yousuf from 165.22.144.206 port 40160 Dec 14 00:35:40 pi sshd\[32060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.144.206 Dec 14 00:35:41 pi sshd\[32060\]: Failed password for invalid user yousuf from 165.22.144.206 port 40160 ssh2 Dec 14 00:41:40 pi sshd\[32557\]: Invalid user isacson from 165.22.144.206 port 47022 ... |
2019-12-14 08:45:08 |
| 111.231.137.158 | attack | Dec 13 14:23:38 php1 sshd\[20286\]: Invalid user sunder from 111.231.137.158 Dec 13 14:23:38 php1 sshd\[20286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.137.158 Dec 13 14:23:40 php1 sshd\[20286\]: Failed password for invalid user sunder from 111.231.137.158 port 47856 ssh2 Dec 13 14:30:20 php1 sshd\[20979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.137.158 user=root Dec 13 14:30:22 php1 sshd\[20979\]: Failed password for root from 111.231.137.158 port 53224 ssh2 |
2019-12-14 08:38:36 |
| 222.186.15.18 | attackspambots | Dec 13 19:22:32 ny01 sshd[20873]: Failed password for root from 222.186.15.18 port 18950 ssh2 Dec 13 19:28:23 ny01 sshd[22010]: Failed password for root from 222.186.15.18 port 24528 ssh2 |
2019-12-14 08:42:16 |
| 218.25.17.252 | attackbots | 12/13/2019-18:56:13.712128 218.25.17.252 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-12-14 08:24:58 |
| 124.16.139.243 | attack | Dec 14 01:01:18 herz-der-gamer sshd[1307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243 user=mysql Dec 14 01:01:20 herz-der-gamer sshd[1307]: Failed password for mysql from 124.16.139.243 port 59428 ssh2 Dec 14 01:11:16 herz-der-gamer sshd[1491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243 user=root Dec 14 01:11:18 herz-der-gamer sshd[1491]: Failed password for root from 124.16.139.243 port 37106 ssh2 ... |
2019-12-14 09:06:24 |
| 176.235.200.58 | attackspam | Invalid user soft from 176.235.200.58 port 60784 |
2019-12-14 08:55:05 |
| 182.106.237.199 | attackspambots | Dec 14 02:55:45 debian-2gb-vpn-nbg1-1 kernel: [659721.376625] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=182.106.237.199 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=35178 PROTO=TCP SPT=54722 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-14 08:50:34 |
| 45.55.15.134 | attackspam | Dec 13 14:51:36 eddieflores sshd\[10868\]: Invalid user village from 45.55.15.134 Dec 13 14:51:36 eddieflores sshd\[10868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.15.134 Dec 13 14:51:37 eddieflores sshd\[10868\]: Failed password for invalid user village from 45.55.15.134 port 43460 ssh2 Dec 13 14:57:24 eddieflores sshd\[11394\]: Invalid user sunshower from 45.55.15.134 Dec 13 14:57:24 eddieflores sshd\[11394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.15.134 |
2019-12-14 09:02:36 |
| 14.116.187.107 | attackbotsspam | Dec 14 02:52:11 ncomp sshd[29804]: Invalid user vmadmin from 14.116.187.107 Dec 14 02:52:11 ncomp sshd[29804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.187.107 Dec 14 02:52:11 ncomp sshd[29804]: Invalid user vmadmin from 14.116.187.107 Dec 14 02:52:13 ncomp sshd[29804]: Failed password for invalid user vmadmin from 14.116.187.107 port 48560 ssh2 |
2019-12-14 08:52:54 |
| 93.89.128.164 | attack | RDP Brute-Force (Grieskirchen RZ1) |
2019-12-14 09:02:07 |
| 188.162.199.26 | attackspam | failed_logins |
2019-12-14 08:59:24 |
| 5.114.94.7 | spambotsattackproxynormal | Fff |
2019-12-14 08:27:33 |