城市(city): Shenzhen
省份(region): Guangdong
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '94.231.206.0 - 94.231.206.255'
% Abuse contact for '94.231.206.0 - 94.231.206.255' is 'abuse@onyphe.io'
inetnum: 94.231.206.0 - 94.231.206.255
geofeed: https://www.onyphe.io/geofeed.csv
descr: -----BEGIN TOKEN-----a98a05ac40ade1d4135ddd523e9353074e373301e28e7d88a7e6349edb03e450ee409b1aaa323d36638426dbd62e6793ac822688db8516dac3225ddbf3e04be5-----END TOKEN-----
remarks: We are conducting Internet-scale network scanning to provide information
remarks: for cyber defense purposes. We scan the full IPv4 address space and part
remarks: of IPv6 address space. We are in no way targeting you specifically, you
remarks: are just part of what is connected on the Internet. Our complete list
remarks: of our IP ranges is available here: https://www.onyphe.io/ip-ranges.txt
remarks: Opt-out by sending your IP ranges at: abuse at onyphe dot io
netname: FR-ONYPHE-20200128
country: CN
org: ORG-OS381-RIPE
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
status: ALLOCATED PA
mnt-by: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2025-11-21T12:08:15Z
last-modified: 2025-11-26T08:29:44Z
source: RIPE
organisation: ORG-OS381-RIPE
org-name: ONYPHE SAS
country: FR
reg-nr: 831 540 695 R.C.S Brest
org-type: LIR
address: 5 place Franois Mic
address: 29233
address: Clder
address: FRANCE
phone: +33 (0) 972 66 1884
admin-c: AA44525-RIPE
tech-c: AA44525-RIPE
abuse-c: AR77640-RIPE
mnt-ref: lir-fr-onyphe-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:26Z
last-modified: 2026-05-13T07:03:09Z
source: RIPE # Filtered
role: Admin
address: FRANCE
address: Clder
address: 29233
address: 5 place Franois Mic
phone: +33 (0) 972 66 1884
nic-hdl: AA44525-RIPE
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-02-05T16:10:25Z
last-modified: 2025-11-26T10:39:42Z
source: RIPE # Filtered
% Information related to '94.231.206.0/24AS213412'
route: 94.231.206.0/24
origin: AS213412
mnt-by: lir-fr-onyphe-1-MNT
created: 2025-11-24T12:50:26Z
last-modified: 2025-11-24T12:50:26Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.122.1 (DEXTER); <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.231.206.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5502
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.231.206.158. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026052203 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 23 09:30:21 CST 2026
;; MSG SIZE rcvd: 107158.206.231.94.in-addr.arpa domain name pointer saba.probe.onyphe.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
158.206.231.94.in-addr.arpa name = saba.probe.onyphe.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 123.206.68.35 | attackspambots | Dec 25 06:13:33 firewall sshd[23174]: Invalid user rpc from 123.206.68.35 Dec 25 06:13:35 firewall sshd[23174]: Failed password for invalid user rpc from 123.206.68.35 port 47870 ssh2 Dec 25 06:14:29 firewall sshd[23203]: Invalid user redmine from 123.206.68.35 ... |
2019-12-25 17:39:19 |
| 91.87.85.210 | attackspambots | Dec 25 07:25:29 * sshd[29004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.87.85.210 Dec 25 07:25:31 * sshd[29004]: Failed password for invalid user yoyo from 91.87.85.210 port 44314 ssh2 |
2019-12-25 17:49:17 |
| 52.247.223.210 | attack | Dec 25 09:16:07 l02a sshd[10879]: Invalid user server from 52.247.223.210 Dec 25 09:16:07 l02a sshd[10879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.247.223.210 Dec 25 09:16:07 l02a sshd[10879]: Invalid user server from 52.247.223.210 Dec 25 09:16:09 l02a sshd[10879]: Failed password for invalid user server from 52.247.223.210 port 52852 ssh2 |
2019-12-25 17:57:08 |
| 86.234.24.113 | attack | Dec 25 14:51:02 vibhu-HP-Z238-Microtower-Workstation sshd\[26791\]: Invalid user pi from 86.234.24.113 Dec 25 14:51:02 vibhu-HP-Z238-Microtower-Workstation sshd\[26792\]: Invalid user pi from 86.234.24.113 Dec 25 14:51:02 vibhu-HP-Z238-Microtower-Workstation sshd\[26791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.234.24.113 Dec 25 14:51:02 vibhu-HP-Z238-Microtower-Workstation sshd\[26792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.234.24.113 Dec 25 14:51:04 vibhu-HP-Z238-Microtower-Workstation sshd\[26791\]: Failed password for invalid user pi from 86.234.24.113 port 47240 ssh2 ... |
2019-12-25 17:55:37 |
| 54.39.147.2 | attackbotsspam | Dec 25 09:58:21 [host] sshd[5634]: Invalid user guest3333 from 54.39.147.2 Dec 25 09:58:21 [host] sshd[5634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.147.2 Dec 25 09:58:23 [host] sshd[5634]: Failed password for invalid user guest3333 from 54.39.147.2 port 56225 ssh2 |
2019-12-25 17:56:12 |
| 113.190.232.192 | attack | Host Scan |
2019-12-25 17:32:10 |
| 41.210.20.37 | attackbots | Dec 25 07:25:43 vpn01 sshd[11103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.210.20.37 Dec 25 07:25:45 vpn01 sshd[11103]: Failed password for invalid user leen from 41.210.20.37 port 50873 ssh2 ... |
2019-12-25 17:41:59 |
| 112.85.42.89 | attackbots | 2019-12-25T10:49:36.517842scmdmz1 sshd[20649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root 2019-12-25T10:49:38.495480scmdmz1 sshd[20649]: Failed password for root from 112.85.42.89 port 42474 ssh2 2019-12-25T10:49:41.273420scmdmz1 sshd[20649]: Failed password for root from 112.85.42.89 port 42474 ssh2 2019-12-25T10:49:36.517842scmdmz1 sshd[20649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root 2019-12-25T10:49:38.495480scmdmz1 sshd[20649]: Failed password for root from 112.85.42.89 port 42474 ssh2 2019-12-25T10:49:41.273420scmdmz1 sshd[20649]: Failed password for root from 112.85.42.89 port 42474 ssh2 2019-12-25T10:49:36.517842scmdmz1 sshd[20649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root 2019-12-25T10:49:38.495480scmdmz1 sshd[20649]: Failed password for root from 112.85.42.89 port 42474 ssh2 2019-12-25T10:49: |
2019-12-25 17:52:14 |
| 175.6.5.233 | attackspam | Dec 25 08:21:45 Invalid user ubuntu from 175.6.5.233 port 5779 |
2019-12-25 18:02:15 |
| 128.199.95.60 | attack | Dec 25 09:58:27 legacy sshd[15758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60 Dec 25 09:58:29 legacy sshd[15758]: Failed password for invalid user vansambeek from 128.199.95.60 port 40026 ssh2 Dec 25 10:01:34 legacy sshd[15826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60 ... |
2019-12-25 17:50:53 |
| 82.196.3.212 | attack | 82.196.3.212 - - \[25/Dec/2019:09:56:16 +0100\] "POST /wp-login.php HTTP/1.0" 200 7544 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 82.196.3.212 - - \[25/Dec/2019:09:56:22 +0100\] "POST /wp-login.php HTTP/1.0" 200 7411 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 82.196.3.212 - - \[25/Dec/2019:09:56:28 +0100\] "POST /wp-login.php HTTP/1.0" 200 7407 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-12-25 17:43:59 |
| 218.92.0.175 | attack | Dec 25 04:45:53 linuxvps sshd\[46393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Dec 25 04:45:55 linuxvps sshd\[46393\]: Failed password for root from 218.92.0.175 port 42305 ssh2 Dec 25 04:46:13 linuxvps sshd\[46623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Dec 25 04:46:14 linuxvps sshd\[46623\]: Failed password for root from 218.92.0.175 port 13013 ssh2 Dec 25 04:46:36 linuxvps sshd\[46857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root |
2019-12-25 17:57:54 |
| 51.77.211.94 | attack | --- report --- Dec 25 06:31:11 sshd: Connection from 51.77.211.94 port 34428 |
2019-12-25 18:02:50 |
| 118.70.127.16 | attack | Unauthorized connection attempt detected from IP address 118.70.127.16 to port 445 |
2019-12-25 17:47:56 |
| 149.202.55.18 | attack | *Port Scan* detected from 149.202.55.18 (FR/France/18.ip-149-202-55.eu). 4 hits in the last 261 seconds |
2019-12-25 18:03:45 |