城市(city): Gravelines
省份(region): Hauts-de-France
国家(country): France
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '91.231.89.0 - 91.231.89.255'
% Abuse contact for '91.231.89.0 - 91.231.89.255' is 'abuse@onyphe.io'
inetnum: 91.231.89.0 - 91.231.89.255
geofeed: https://www.onyphe.io/geofeed.csv
remarks: We are conducting Internet-scale network scanning to provide information
remarks: for cyber defense purposes. We scan the full IPv4 address space and part
remarks: of IPv6 address space. We are in no way targeting you specifically, you
remarks: are just part of what is connected on the Internet. Our complete list
remarks: of our IP ranges is available here: https://www.onyphe.io/ip-ranges.txt
remarks: Opt-out by sending your IP ranges at: abuse at onyphe dot io
descr: -----BEGIN TOKEN-----a98a05ac40ade1d4135ddd523e9353074e373301e28e7d88a7e6349edb03e450ee409b1aaa323d36638426dbd62e6793ac822688db8516dac3225ddbf3e04be5-----END TOKEN-----
netname: FR-ONYPHE-20191111
country: FR
org: ORG-OS381-RIPE
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
status: ALLOCATED PA
mnt-by: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2025-05-09T12:36:09Z
last-modified: 2025-05-09T13:08:59Z
source: RIPE
organisation: ORG-OS381-RIPE
org-name: ONYPHE SAS
country: FR
reg-nr: 831 540 695 R.C.S Brest
org-type: LIR
address: 5 place Franois Mic
address: 29233
address: Clder
address: FRANCE
phone: +33 (0) 972 66 1884
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
abuse-c: AR77640-RIPE
mnt-ref: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:26Z
last-modified: 2026-05-13T07:03:09Z
source: RIPE # Filtered
role: Admin
address: FRANCE
address: Clder
address: 29233
address: 5 place Franois Mic
phone: +33 (0) 972 66 1884
nic-hdl: AA44525-RIPE
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:25Z
last-modified: 2025-11-26T10:39:42Z
source: RIPE # Filtered
% Information related to '91.231.89.0/24AS213412'
route: 91.231.89.0/24
origin: AS213412
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-05-09T12:50:16Z
last-modified: 2025-05-09T12:50:16Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.122.1 (SHETLAND); <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.231.89.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27862
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;91.231.89.31. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026052701 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 28 08:30:25 CST 2026
;; MSG SIZE rcvd: 10531.89.231.91.in-addr.arpa domain name pointer rita.probe.onyphe.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
31.89.231.91.in-addr.arpa name = rita.probe.onyphe.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 184.105.247.203 | attack | Port scanning [3 denied] |
2020-08-16 17:24:07 |
| 45.129.33.7 | attackbotsspam |
|
2020-08-16 17:31:10 |
| 192.162.193.243 | attackbots | Dovecot Invalid User Login Attempt. |
2020-08-16 17:32:47 |
| 117.213.160.165 | attackbots | IP 117.213.160.165 attacked honeypot on port: 23 at 8/15/2020 8:48:47 PM |
2020-08-16 17:45:19 |
| 158.58.184.51 | attackspambots | Aug 16 05:49:12 db sshd[20709]: User root from 158.58.184.51 not allowed because none of user's groups are listed in AllowGroups ... |
2020-08-16 18:01:11 |
| 129.211.77.44 | attack | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-16T04:04:26Z and 2020-08-16T04:17:17Z |
2020-08-16 18:01:29 |
| 188.240.208.26 | attackbots | Attempting to access Wordpress login on a honeypot or private system. |
2020-08-16 17:36:31 |
| 210.126.110.182 | attackspambots | Port scan denied |
2020-08-16 18:02:22 |
| 77.27.168.117 | attackbotsspam | Aug 16 11:42:58 vpn01 sshd[8832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.27.168.117 Aug 16 11:43:00 vpn01 sshd[8832]: Failed password for invalid user lol from 77.27.168.117 port 53156 ssh2 ... |
2020-08-16 17:53:17 |
| 106.12.105.130 | attackspambots | Aug 16 05:49:30 db sshd[20735]: User root from 106.12.105.130 not allowed because none of user's groups are listed in AllowGroups ... |
2020-08-16 17:52:23 |
| 37.49.224.183 | attackbots | firewall-block, port(s): 5060/udp |
2020-08-16 17:33:29 |
| 46.229.168.130 | attackspam | Automatic report - Banned IP Access |
2020-08-16 17:47:16 |
| 187.228.161.165 | attackbots | Aug 16 11:43:02 lnxmysql61 sshd[7128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.228.161.165 Aug 16 11:43:04 lnxmysql61 sshd[7128]: Failed password for invalid user sean from 187.228.161.165 port 37858 ssh2 Aug 16 11:50:47 lnxmysql61 sshd[9446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.228.161.165 |
2020-08-16 17:56:22 |
| 81.95.96.180 | attackspam | 81.95.96.180 - - [16/Aug/2020:04:49:09 +0100] "POST /wp-login.php HTTP/1.1" 200 1996 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 81.95.96.180 - - [16/Aug/2020:04:49:10 +0100] "POST /wp-login.php HTTP/1.1" 200 1929 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 81.95.96.180 - - [16/Aug/2020:04:49:10 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-16 18:02:01 |
| 46.229.168.146 | attack | Automatic report - Banned IP Access |
2020-08-16 17:46:52 |