City: Shenzhen
Region: Guangdong
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '94.231.206.0 - 94.231.206.255'
% Abuse contact for '94.231.206.0 - 94.231.206.255' is 'abuse@onyphe.io'
inetnum: 94.231.206.0 - 94.231.206.255
geofeed: https://www.onyphe.io/geofeed.csv
descr: -----BEGIN TOKEN-----a98a05ac40ade1d4135ddd523e9353074e373301e28e7d88a7e6349edb03e450ee409b1aaa323d36638426dbd62e6793ac822688db8516dac3225ddbf3e04be5-----END TOKEN-----
remarks: We are conducting Internet-scale network scanning to provide information
remarks: for cyber defense purposes. We scan the full IPv4 address space and part
remarks: of IPv6 address space. We are in no way targeting you specifically, you
remarks: are just part of what is connected on the Internet. Our complete list
remarks: of our IP ranges is available here: https://www.onyphe.io/ip-ranges.txt
remarks: Opt-out by sending your IP ranges at: abuse at onyphe dot io
netname: FR-ONYPHE-20200128
country: CN
org: ORG-OS381-RIPE
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
status: ALLOCATED PA
mnt-by: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2025-11-21T12:08:15Z
last-modified: 2025-11-26T08:29:44Z
source: RIPE
organisation: ORG-OS381-RIPE
org-name: ONYPHE SAS
country: FR
org-type: LIR
address: 5 place Franois Mic
address: 29233
address: Clder
address: FRANCE
phone: +33 (0) 972 66 1884
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
abuse-c: AR77640-RIPE
mnt-ref: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:26Z
last-modified: 2025-11-13T14:10:50Z
source: RIPE # Filtered
role: Admin
address: FRANCE
address: Clder
address: 29233
address: 5 place Franois Mic
phone: +33 (0) 972 66 1884
nic-hdl: AA44525-RIPE
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:25Z
last-modified: 2025-11-26T10:39:42Z
source: RIPE # Filtered
% Information related to '94.231.206.0/24AS213412'
route: 94.231.206.0/24
origin: AS213412
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-11-24T12:50:26Z
last-modified: 2025-11-24T12:50:26Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.120 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.231.206.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55254
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.231.206.134. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026020202 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 03 10:00:17 CST 2026
;; MSG SIZE rcvd: 107134.206.231.94.in-addr.arpa domain name pointer bilal.probe.onyphe.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
134.206.231.94.in-addr.arpa name = bilal.probe.onyphe.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 176.41.9.232 | attackspam | Unauthorized connection attempt detected from IP address 176.41.9.232 to port 5555 [J] |
2020-01-27 17:55:16 |
| 148.70.186.70 | attack | Unauthorized connection attempt detected from IP address 148.70.186.70 to port 2220 [J] |
2020-01-27 17:30:56 |
| 177.76.207.217 | attackspambots | Unauthorized connection attempt detected from IP address 177.76.207.217 to port 23 [J] |
2020-01-27 17:54:29 |
| 106.12.52.98 | attackbotsspam | Jan 26 21:02:31 host sshd[32207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.52.98 user=r.r Jan 26 21:02:33 host sshd[32207]: Failed password for r.r from 106.12.52.98 port 50786 ssh2 Jan 26 21:02:33 host sshd[32207]: Received disconnect from 106.12.52.98: 11: Bye Bye [preauth] Jan 26 21:16:24 host sshd[10555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.52.98 user=r.r Jan 26 21:16:27 host sshd[10555]: Failed password for r.r from 106.12.52.98 port 37524 ssh2 Jan 26 21:16:27 host sshd[10555]: Received disconnect from 106.12.52.98: 11: Bye Bye [preauth] Jan 26 21:18:33 host sshd[17362]: Invalid user ts3bot from 106.12.52.98 Jan 26 21:18:33 host sshd[17362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.52.98 Jan 26 21:18:35 host sshd[17362]: Failed password for invalid user ts3bot from 106.12.52.98 port 54878 ssh2 ........ --------------------------------- |
2020-01-27 17:10:40 |
| 49.235.221.86 | attackspam | Unauthorized connection attempt detected from IP address 49.235.221.86 to port 2220 [J] |
2020-01-27 17:15:10 |
| 178.252.170.194 | attack | Unauthorized connection attempt detected from IP address 178.252.170.194 to port 1521 [J] |
2020-01-27 17:52:49 |
| 122.51.68.105 | attack | Unauthorized connection attempt detected from IP address 122.51.68.105 to port 2220 [J] |
2020-01-27 17:33:30 |
| 219.140.117.221 | attackbots | Unauthorized connection attempt detected from IP address 219.140.117.221 to port 81 [T] |
2020-01-27 17:21:45 |
| 147.139.138.183 | attackbotsspam | SSH invalid-user multiple login try |
2020-01-27 17:31:16 |
| 36.32.3.130 | attackspam | Unauthorized connection attempt detected from IP address 36.32.3.130 to port 9991 [T] |
2020-01-27 17:18:32 |
| 175.184.166.200 | attack | Unauthorized connection attempt detected from IP address 175.184.166.200 to port 6666 [J] |
2020-01-27 17:55:58 |
| 200.194.8.162 | attackbotsspam | Unauthorized connection attempt detected from IP address 200.194.8.162 to port 23 [J] |
2020-01-27 17:48:27 |
| 203.146.251.55 | attack | Unauthorized connection attempt detected from IP address 203.146.251.55 to port 2220 [J] |
2020-01-27 18:01:07 |
| 183.191.29.198 | attackspam | Unauthorized connection attempt detected from IP address 183.191.29.198 to port 8080 [J] |
2020-01-27 17:27:52 |
| 172.110.30.30 | attack | Unauthorized connection attempt detected from IP address 172.110.30.30 to port 1433 [J] |
2020-01-27 17:30:24 |