City: Roubaix
Region: Hauts-de-France
Country: France
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 91.196.152.52 | attack | Bad IP |
2025-03-20 22:02:16 |
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '91.196.152.0 - 91.196.152.255'
% Abuse contact for '91.196.152.0 - 91.196.152.255' is 'abuse@onyphe.io'
inetnum: 91.196.152.0 - 91.196.152.255
geofeed: https://www.onyphe.io/geofeed.csv
descr: -----BEGIN TOKEN-----a98a05ac40ade1d4135ddd523e9353074e373301e28e7d88a7e6349edb03e450ee409b1aaa323d36638426dbd62e6793ac822688db8516dac3225ddbf3e04be5-----END TOKEN-----
remarks: We are conducting Internet-scale network scanning to provide information
remarks: for cyber defense purposes. We scan the full IPv4 address space and part
remarks: of IPv6 address space. We are in no way targeting you specifically, you
remarks: are just part of what is connected on the Internet. Our complete list
remarks: of our IP ranges is available here: https://www.onyphe.io/ip-ranges.txt
remarks: Opt-out by sending your IP ranges at: abuse at onyphe dot io
netname: FR-ONYPHE-20221220
country: FR
org: ORG-OS381-RIPE
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
status: ALLOCATED PA
mnt-by: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2025-02-13T11:06:31Z
last-modified: 2025-03-09T09:40:40Z
source: RIPE
organisation: ORG-OS381-RIPE
org-name: ONYPHE SAS
country: FR
reg-nr: 831 540 695 R.C.S Brest
org-type: LIR
address: 5 place Franois Mic
address: 29233
address: Clder
address: FRANCE
phone: +33 (0) 972 66 1884
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
abuse-c: AR77640-RIPE
mnt-ref: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:26Z
last-modified: 2026-05-13T07:03:09Z
source: RIPE # Filtered
role: Admin
address: FRANCE
address: Clder
address: 29233
address: 5 place Franois Mic
phone: +33 (0) 972 66 1884
nic-hdl: AA44525-RIPE
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:25Z
last-modified: 2025-11-26T10:39:42Z
source: RIPE # Filtered
% Information related to '91.196.152.0/24AS213412'
route: 91.196.152.0/24
origin: AS213412
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-14T13:01:03Z
last-modified: 2025-02-14T13:01:03Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.124.1 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.196.152.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59831
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;91.196.152.137. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110600 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 06 16:00:56 CST 2026
;; MSG SIZE rcvd: 107137.152.196.91.in-addr.arpa domain name pointer darci.probe.onyphe.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
137.152.196.91.in-addr.arpa name = darci.probe.onyphe.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 180.245.245.172 | attackbots | Invalid user 666666 from 180.245.245.172 port 42979 |
2019-10-25 00:15:22 |
| 87.66.207.225 | attack | Invalid user adriaan from 87.66.207.225 port 35540 |
2019-10-25 00:39:24 |
| 181.40.73.86 | attack | Invalid user dc from 181.40.73.86 port 10187 |
2019-10-25 00:15:02 |
| 113.161.61.38 | attackspam | Invalid user system from 113.161.61.38 port 49777 |
2019-10-25 00:31:40 |
| 177.73.248.35 | attackspambots | 2019-10-24T12:28:37.505148homeassistant sshd[2284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.73.248.35 user=root 2019-10-24T12:28:38.955104homeassistant sshd[2284]: Failed password for root from 177.73.248.35 port 50544 ssh2 ... |
2019-10-25 00:16:13 |
| 54.38.192.96 | attackbots | Oct 24 17:44:46 vpn01 sshd[19890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.192.96 Oct 24 17:44:48 vpn01 sshd[19890]: Failed password for invalid user kui from 54.38.192.96 port 58886 ssh2 ... |
2019-10-25 00:44:31 |
| 37.59.43.216 | attack | Invalid user test from 37.59.43.216 port 44980 |
2019-10-25 00:50:18 |
| 103.52.145.210 | attackspambots | 2019-10-23 18:27:41 server sshd[89726]: Failed password for invalid user hadoop from 103.52.145.210 port 50664 ssh2 |
2019-10-25 00:36:36 |
| 94.248.125.193 | attackspam | 2019-09-16 14:39:55 1i9qIM-0006Vl-LA SMTP connection from \(\[94.248.125.193\]\) \[94.248.125.193\]:32158 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-09-16 14:40:07 1i9qIX-0006Xw-VR SMTP connection from \(\[94.248.125.193\]\) \[94.248.125.193\]:32263 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-09-16 14:40:19 1i9qIj-0006YJ-NT SMTP connection from \(\[94.248.125.193\]\) \[94.248.125.193\]:32361 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2019-10-25 00:37:40 |
| 132.232.74.106 | attack | Invalid user firefox from 132.232.74.106 port 59250 |
2019-10-25 00:25:46 |
| 81.134.41.100 | attackspambots | Oct 24 17:53:42 MK-Soft-VM4 sshd[5322]: Failed password for root from 81.134.41.100 port 53018 ssh2 ... |
2019-10-25 00:40:12 |
| 160.153.234.236 | attack | Invalid user ubnt from 160.153.234.236 port 45482 |
2019-10-25 00:21:05 |
| 128.1.134.32 | attackbots | Invalid user user from 128.1.134.32 port 50848 |
2019-10-25 00:26:39 |
| 116.6.84.60 | attackspambots | Invalid user nx from 116.6.84.60 port 48983 |
2019-10-25 00:29:58 |
| 51.38.49.140 | attackspambots | 2019-10-24T06:14:42.051249mizuno.rwx.ovh sshd[3402523]: Connection from 51.38.49.140 port 35582 on 78.46.61.178 port 22 rdomain "" 2019-10-24T06:14:42.178659mizuno.rwx.ovh sshd[3402523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.49.140 user=root 2019-10-24T06:14:44.346031mizuno.rwx.ovh sshd[3402523]: Failed password for root from 51.38.49.140 port 35582 ssh2 2019-10-24T11:44:39.715339mizuno.rwx.ovh sshd[3471702]: Connection from 51.38.49.140 port 36022 on 78.46.61.178 port 22 rdomain "" 2019-10-24T11:44:39.813972mizuno.rwx.ovh sshd[3471702]: Invalid user student from 51.38.49.140 port 36022 ... |
2019-10-25 00:45:54 |