City: Roubaix
Region: Hauts-de-France
Country: France
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 91.196.152.52 | attack | Bad IP |
2025-03-20 22:02:16 |
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '91.196.152.0 - 91.196.152.255'
% Abuse contact for '91.196.152.0 - 91.196.152.255' is 'abuse@onyphe.io'
inetnum: 91.196.152.0 - 91.196.152.255
geofeed: https://www.onyphe.io/geofeed.csv
descr: -----BEGIN TOKEN-----a98a05ac40ade1d4135ddd523e9353074e373301e28e7d88a7e6349edb03e450ee409b1aaa323d36638426dbd62e6793ac822688db8516dac3225ddbf3e04be5-----END TOKEN-----
remarks: We are conducting Internet-scale network scanning to provide information
remarks: for cyber defense purposes. We scan the full IPv4 address space and part
remarks: of IPv6 address space. We are in no way targeting you specifically, you
remarks: are just part of what is connected on the Internet. Our complete list
remarks: of our IP ranges is available here: https://www.onyphe.io/ip-ranges.txt
remarks: Opt-out by sending your IP ranges at: abuse at onyphe dot io
netname: FR-ONYPHE-20221220
country: FR
org: ORG-OS381-RIPE
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
status: ALLOCATED PA
mnt-by: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2025-02-13T11:06:31Z
last-modified: 2025-03-09T09:40:40Z
source: RIPE
organisation: ORG-OS381-RIPE
org-name: ONYPHE SAS
country: FR
org-type: LIR
address: 5 place Franois Mic
address: 29233
address: Clder
address: FRANCE
phone: +33 (0) 972 66 1884
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
abuse-c: AR77640-RIPE
mnt-ref: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:26Z
last-modified: 2025-11-13T14:10:50Z
source: RIPE # Filtered
role: Admin
address: FRANCE
address: Clder
address: 29233
address: 5 place Franois Mic
phone: +33 (0) 972 66 1884
nic-hdl: AA44525-RIPE
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:25Z
last-modified: 2025-11-26T10:39:42Z
source: RIPE # Filtered
% Information related to '91.196.152.0/24AS213412'
route: 91.196.152.0/24
origin: AS213412
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-14T13:01:03Z
last-modified: 2025-02-14T13:01:03Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.196.152.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51877
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;91.196.152.243. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032400 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 24 19:30:50 CST 2026
;; MSG SIZE rcvd: 107243.152.196.91.in-addr.arpa domain name pointer calderon.probe.onyphe.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
243.152.196.91.in-addr.arpa name = calderon.probe.onyphe.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.68.253.149 | attackbots | Invalid user andres from 138.68.253.149 port 39578 |
2020-05-29 20:14:10 |
| 222.186.175.212 | attackspambots | May 29 07:01:47 NPSTNNYC01T sshd[23512]: Failed password for root from 222.186.175.212 port 54908 ssh2 May 29 07:01:59 NPSTNNYC01T sshd[23512]: error: maximum authentication attempts exceeded for root from 222.186.175.212 port 54908 ssh2 [preauth] May 29 07:02:04 NPSTNNYC01T sshd[23530]: Failed password for root from 222.186.175.212 port 27264 ssh2 ... |
2020-05-29 19:48:10 |
| 103.52.52.22 | attack | Invalid user christ from 103.52.52.22 port 57451 |
2020-05-29 19:44:28 |
| 49.88.112.69 | attack | May 29 10:22:56 game-panel sshd[7994]: Failed password for root from 49.88.112.69 port 31845 ssh2 May 29 10:22:59 game-panel sshd[7994]: Failed password for root from 49.88.112.69 port 31845 ssh2 May 29 10:23:01 game-panel sshd[7994]: Failed password for root from 49.88.112.69 port 31845 ssh2 |
2020-05-29 19:36:10 |
| 106.12.199.30 | attackspam | $f2bV_matches |
2020-05-29 19:37:46 |
| 91.242.162.27 | attack | Robots ignored. Multiple Automatic Reports: "Access denied"_ |
2020-05-29 20:11:17 |
| 142.93.56.167 | attackspambots |
|
2020-05-29 19:59:54 |
| 103.93.177.173 | attack | Port probing on unauthorized port 8080 |
2020-05-29 20:00:21 |
| 134.175.191.248 | attackbotsspam | May 29 13:38:14 eventyay sshd[15753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.191.248 May 29 13:38:16 eventyay sshd[15753]: Failed password for invalid user administrator from 134.175.191.248 port 45734 ssh2 May 29 13:40:42 eventyay sshd[15812]: Failed password for root from 134.175.191.248 port 49150 ssh2 ... |
2020-05-29 19:47:43 |
| 222.186.30.35 | attackspambots | May 29 13:42:26 * sshd[26736]: Failed password for root from 222.186.30.35 port 46683 ssh2 |
2020-05-29 19:54:03 |
| 89.43.66.107 | attackspam | Attempts to probe web pages for vulnerable PHP or other applications |
2020-05-29 19:43:38 |
| 51.79.86.180 | attackspam | May 29 09:53:25 localhost sshd[28879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.ip-51-79-86.net user=root May 29 09:53:27 localhost sshd[28879]: Failed password for root from 51.79.86.180 port 52096 ssh2 May 29 09:53:30 localhost sshd[28879]: Failed password for root from 51.79.86.180 port 52096 ssh2 May 29 09:53:25 localhost sshd[28879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.ip-51-79-86.net user=root May 29 09:53:27 localhost sshd[28879]: Failed password for root from 51.79.86.180 port 52096 ssh2 May 29 09:53:30 localhost sshd[28879]: Failed password for root from 51.79.86.180 port 52096 ssh2 May 29 09:53:25 localhost sshd[28879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.ip-51-79-86.net user=root May 29 09:53:27 localhost sshd[28879]: Failed password for root from 51.79.86.180 port 52096 ssh2 May 29 09:53:30 localhost sshd[28879 ... |
2020-05-29 19:46:42 |
| 149.28.215.180 | attackspam | k+ssh-bruteforce |
2020-05-29 19:48:40 |
| 111.229.43.153 | attack | May 29 10:55:49 XXX sshd[27988]: Invalid user bye from 111.229.43.153 port 35458 |
2020-05-29 20:00:57 |
| 170.254.226.100 | attackbotsspam | May 29 11:06:37 game-panel sshd[9737]: Failed password for root from 170.254.226.100 port 40256 ssh2 May 29 11:11:03 game-panel sshd[10022]: Failed password for root from 170.254.226.100 port 45874 ssh2 |
2020-05-29 20:04:07 |