City: Roubaix
Region: Hauts-de-France
Country: France
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 91.196.152.52 | attack | Bad IP |
2025-03-20 22:02:16 |
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '91.196.152.0 - 91.196.152.255'
% Abuse contact for '91.196.152.0 - 91.196.152.255' is 'abuse@onyphe.io'
inetnum: 91.196.152.0 - 91.196.152.255
geofeed: https://www.onyphe.io/geofeed.csv
descr: -----BEGIN TOKEN-----a98a05ac40ade1d4135ddd523e9353074e373301e28e7d88a7e6349edb03e450ee409b1aaa323d36638426dbd62e6793ac822688db8516dac3225ddbf3e04be5-----END TOKEN-----
remarks: We are conducting Internet-scale network scanning to provide information
remarks: for cyber defense purposes. We scan the full IPv4 address space and part
remarks: of IPv6 address space. We are in no way targeting you specifically, you
remarks: are just part of what is connected on the Internet. Our complete list
remarks: of our IP ranges is available here: https://www.onyphe.io/ip-ranges.txt
remarks: Opt-out by sending your IP ranges at: abuse at onyphe dot io
netname: FR-ONYPHE-20221220
country: FR
org: ORG-OS381-RIPE
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
status: ALLOCATED PA
mnt-by: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2025-02-13T11:06:31Z
last-modified: 2025-03-09T09:40:40Z
source: RIPE
organisation: ORG-OS381-RIPE
org-name: ONYPHE SAS
country: FR
reg-nr: 831 540 695 R.C.S Brest
org-type: LIR
address: 5 place Franois Mic
address: 29233
address: Clder
address: FRANCE
phone: +33 (0) 972 66 1884
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
abuse-c: AR77640-RIPE
mnt-ref: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:26Z
last-modified: 2026-05-13T07:03:09Z
source: RIPE # Filtered
role: Admin
address: FRANCE
address: Clder
address: 29233
address: 5 place Franois Mic
phone: +33 (0) 972 66 1884
nic-hdl: AA44525-RIPE
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:25Z
last-modified: 2025-11-26T10:39:42Z
source: RIPE # Filtered
% Information related to '91.196.152.0/24AS213412'
route: 91.196.152.0/24
origin: AS213412
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-14T13:01:03Z
last-modified: 2025-02-14T13:01:03Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.124.1 (SHETLAND); <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.196.152.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36788
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;91.196.152.202. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026100200 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 02 15:30:45 CST 2026
;; MSG SIZE rcvd: 107202.152.196.91.in-addr.arpa domain name pointer sandoval.probe.onyphe.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
202.152.196.91.in-addr.arpa name = sandoval.probe.onyphe.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.68.57.241 | attack | Unauthorized connection attempt detected from IP address 125.68.57.241 to port 1433 |
2020-01-02 21:55:09 |
| 113.22.107.68 | attack | Unauthorized connection attempt detected from IP address 113.22.107.68 to port 23 |
2020-01-02 21:39:03 |
| 218.21.196.234 | attackbotsspam | Unauthorized connection attempt detected from IP address 218.21.196.234 to port 1433 |
2020-01-02 21:48:06 |
| 139.180.214.155 | attackspam | Unauthorized connection attempt detected from IP address 139.180.214.155 to port 1433 |
2020-01-02 21:54:16 |
| 183.81.121.177 | attackbotsspam | Unauthorized connection attempt detected from IP address 183.81.121.177 to port 445 |
2020-01-02 21:51:25 |
| 219.146.62.247 | attack | Unauthorized connection attempt detected from IP address 219.146.62.247 to port 445 |
2020-01-02 21:47:07 |
| 218.78.211.212 | attackbotsspam | Unauthorized connection attempt detected from IP address 218.78.211.212 to port 1433 |
2020-01-02 21:47:34 |
| 47.102.205.238 | attack | Unauthorized connection attempt detected from IP address 47.102.205.238 to port 8545 |
2020-01-02 22:07:45 |
| 60.169.49.157 | attackspambots | Unauthorized connection attempt detected from IP address 60.169.49.157 to port 23 |
2020-01-02 22:04:54 |
| 62.32.66.190 | attackspambots | Unauthorized connection attempt detected from IP address 62.32.66.190 to port 445 |
2020-01-02 22:04:01 |
| 42.81.122.86 | attackbotsspam | Unauthorized connection attempt detected from IP address 42.81.122.86 to port 23 |
2020-01-02 22:09:01 |
| 61.150.76.201 | attackbotsspam | 01/02/2020-05:57:01.746129 61.150.76.201 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-01-02 21:41:15 |
| 221.12.59.211 | attack | Unauthorized connection attempt detected from IP address 221.12.59.211 to port 1433 |
2020-01-02 22:13:28 |
| 125.64.64.173 | attackspambots | Honeypot attack, port: 23, PTR: 173.64.64.125.broad.dy.sc.dynamic.163data.com.cn. |
2020-01-02 21:36:09 |
| 112.54.87.36 | attackbots | Unauthorized connection attempt detected from IP address 112.54.87.36 to port 1433 |
2020-01-02 22:01:52 |