Hi,
The IP 213.0.180.23 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 213.0.180.23:
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '213.0.128.0 - 213.0.255.255'
% Abuse contact for '213.0.128.0 - 213.0.255.255' is 'nemesys@telefonica.es'
inetnum: 213.0.128.0 - 213.0.255.255
netname: TDENET
descr: Telefonica de Espana SAU (NCC#2000037081)
descr: Red de servicios IP
descr: Spain
country: ES
admin-c: ATDE1-RIPE
tech-c: TTDE1-RIPE
status: ASSIGNED PA
mnt-by: MAINT-AS3352
source: RIPE # Filtered
role: Administradores Telefonica de Espana
address: Ronda de la Comunicacion s/n
address: Edificio Norte 1, planta 6
address: 28050 Madrid
address: SPAIN
org: ORG-TDE1-RIPE
admin-c: ATDE1-RIPE
tech-c: TTDE1-RIPE
nic-hdl: ATDE1-RIPE
mnt-by: MAINT-AS3352
abuse-mailbox: nemesys@telefonica.es
source: RIPE # Filtered
role: Tecnicos Telefonica de Espana
address: Ronda de la Comunicacion S/N
address: 28050-MADRID
address: SPAIN
org: ORG-TDE1-RIPE
admin-c: TTE2-RIPE
tech-c: TTE2-RIPE
nic-hdl: TTdE1-RIPE
mnt-by: MAINT-AS3352
abuse-mailbox: nemesys@telefonica.es
source: RIPE # Filtered
% Information related to '213.0.0.0/16AS3352'
route: 213.0.0.0/16
descr: TDENET (Red de servicios IP)
origin: AS3352
mnt-by: MAINT-AS3352
mnt-routes: MAINT-AS3352
mnt-lower: MAINT-AS3352
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS1)
Regards,
Fail2Ban
Friday, 26 July 2013
[Fail2Ban] SSH: banned 209.124.106.61
Hi,
The IP 209.124.106.61 has just been banned by Fail2Ban after
6 attempts against SSH.
Here are more information about 209.124.106.61:
[Querying whois.arin.net]
[whois.arin.net]
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 209.124.106.61"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=209.124.106.61?showDetails=true&showARIN=false&ext=netref2
#
AMNET US AMNET-BLK2 (NET-209-124-96-0-1) 209.124.96.0 - 209.124.127.255
Amnet Datos Nicaragua AMNET-NI (NET-209-124-106-0-1) 209.124.106.0 - 209.124.107.255
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Regards,
Fail2Ban
The IP 209.124.106.61 has just been banned by Fail2Ban after
6 attempts against SSH.
Here are more information about 209.124.106.61:
[Querying whois.arin.net]
[whois.arin.net]
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 209.124.106.61"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=209.124.106.61?showDetails=true&showARIN=false&ext=netref2
#
AMNET US AMNET-BLK2 (NET-209-124-96-0-1) 209.124.96.0 - 209.124.127.255
Amnet Datos Nicaragua AMNET-NI (NET-209-124-106-0-1) 209.124.106.0 - 209.124.107.255
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 186.47.123.211
Hi,
The IP 186.47.123.211 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 186.47.123.211:
[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-07-26 09:20:38 (BRT -03:00)
inetnum: 186.47.123.208/29
status: reallocated
owner: NUBIA SUSANA MORAN
ownerid: EC-NSMO1-LACNIC
responsible: NUBIA MORAN
address: QUILAGO, 171, AV. EL RETORNO LOCAL J&S TECNOLOGY
address: 3110 - IBARRA - EC
country: EC
phone: +593 9 8461404 []
owner-c: VMR
tech-c: VMR
abuse-c: VMR
created: 20120327
changed: 20120327
inetnum-up: 186.47/16
nic-hdl: VMR
person: Evelin Gavilanes
e-mail: noc@ANDINANET.NET
address: Edificio Droira, s/n, esquina
address: 3110 - Quito - EC
country: EC
phone: +593 2 2944800 [882]
created: 20030402
changed: 20120829
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
The IP 186.47.123.211 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 186.47.123.211:
[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-07-26 09:20:38 (BRT -03:00)
inetnum: 186.47.123.208/29
status: reallocated
owner: NUBIA SUSANA MORAN
ownerid: EC-NSMO1-LACNIC
responsible: NUBIA MORAN
address: QUILAGO, 171, AV. EL RETORNO LOCAL J&S TECNOLOGY
address: 3110 - IBARRA - EC
country: EC
phone: +593 9 8461404 []
owner-c: VMR
tech-c: VMR
abuse-c: VMR
created: 20120327
changed: 20120327
inetnum-up: 186.47/16
nic-hdl: VMR
person: Evelin Gavilanes
e-mail: noc@ANDINANET.NET
address: Edificio Droira, s/n, esquina
address: 3110 - Quito - EC
country: EC
phone: +593 2 2944800 [882]
created: 20030402
changed: 20120829
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 50.106.14.149
Hi,
The IP 50.106.14.149 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 50.106.14.149:
[Querying whois.arin.net]
[Redirected to rwhois.frontiernet.net:4321]
[Querying rwhois.frontiernet.net]
[rwhois.frontiernet.net]
%rwhois V-1.5:002090:00 whois.frontiernet.net (by Network Solutions, Inc. V-1.5.9.6)
network:Auth-Area:50.106.0.0/18
network:ID:NET-50-106-14-144-28
network:Network-Name:50-106-14-144-28
network:IP-Network:50.106.14.144/28
network:Org-Name;I:Ch Technologies
network:Street-Address:18323 Bothell-Everett Hwy suite 360
network:City:Bothell
network:State:WA
network:Postal-Code:98082
network:Country-Code:US
network:Tech-Contact;I:CH80-FRTR
network:Updated:20130617 23:46:21
network:Updated-By:ipeng@frontiernet.net
network:Class-Name:network
network:Auth-Area:50.106.0.0/18
network:ID:NET-50-106-14-0-24
network:Network-Name:50-106-14-0-24
network:IP-Network:50.106.14.0/24
network:Org-Name;I:FIOS-S Frontier Communications Everett/Redmond W
network:Street-Address:19555 SW. Kinnaman RD
network:City:Aloha
network:State:OR
network:Postal-Code:97007
network:Country-Code:US
network:Tech-Contact;I:AM101-FRTR
network:Admin-Contact;I:IPADMIN-FRTR
network:Abuse-Contact;I:ABUSE-FRTR
network:Updated:20130312
network:Updated-By:ipeng@frontiernet.net
network:Class-Name:network
network:Auth-Area:50.106.0.0/18
network:ID:NET-50-106-0-0-18
network:Network-Name:50-106-0-0-18
network:IP-Network:50.106.0.0/18
network:Org-Name;I:Frontier Communications Solutions
network:Street-Address:180 South Clinton Ave
network:City:Rochester
network:State:NY
network:Postal-Code:14646
network:Country-Code:US
network:Tech-Contact;I:ABUSE-FRTR
network:Admin-Contact;I:IPADMIN-FRTR
network:Updated:20110517
network:Updated-By:ipeng@frontiernet.net
network:Class-Name:network
%ok
Regards,
Fail2Ban
The IP 50.106.14.149 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 50.106.14.149:
[Querying whois.arin.net]
[Redirected to rwhois.frontiernet.net:4321]
[Querying rwhois.frontiernet.net]
[rwhois.frontiernet.net]
%rwhois V-1.5:002090:00 whois.frontiernet.net (by Network Solutions, Inc. V-1.5.9.6)
network:Auth-Area:50.106.0.0/18
network:ID:NET-50-106-14-144-28
network:Network-Name:50-106-14-144-28
network:IP-Network:50.106.14.144/28
network:Org-Name;I:Ch Technologies
network:Street-Address:18323 Bothell-Everett Hwy suite 360
network:City:Bothell
network:State:WA
network:Postal-Code:98082
network:Country-Code:US
network:Tech-Contact;I:CH80-FRTR
network:Updated:20130617 23:46:21
network:Updated-By:ipeng@frontiernet.net
network:Class-Name:network
network:Auth-Area:50.106.0.0/18
network:ID:NET-50-106-14-0-24
network:Network-Name:50-106-14-0-24
network:IP-Network:50.106.14.0/24
network:Org-Name;I:FIOS-S Frontier Communications Everett/Redmond W
network:Street-Address:19555 SW. Kinnaman RD
network:City:Aloha
network:State:OR
network:Postal-Code:97007
network:Country-Code:US
network:Tech-Contact;I:AM101-FRTR
network:Admin-Contact;I:IPADMIN-FRTR
network:Abuse-Contact;I:ABUSE-FRTR
network:Updated:20130312
network:Updated-By:ipeng@frontiernet.net
network:Class-Name:network
network:Auth-Area:50.106.0.0/18
network:ID:NET-50-106-0-0-18
network:Network-Name:50-106-0-0-18
network:IP-Network:50.106.0.0/18
network:Org-Name;I:Frontier Communications Solutions
network:Street-Address:180 South Clinton Ave
network:City:Rochester
network:State:NY
network:Postal-Code:14646
network:Country-Code:US
network:Tech-Contact;I:ABUSE-FRTR
network:Admin-Contact;I:IPADMIN-FRTR
network:Updated:20110517
network:Updated-By:ipeng@frontiernet.net
network:Class-Name:network
%ok
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 202.29.16.58
Hi,
The IP 202.29.16.58 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 202.29.16.58:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-5]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 202.28.0.0 - 202.29.255.255
netname: THAINET-TH
descr: UniNet(Inter-university network)
descr: Office of Information Technology Administration
descr: for Educational Development
descr: Ministry of University Affairs
country: TH
admin-c: YT7
admin-c: UV1-AP
tech-c: UNOC1-AP
remarks: UniNet is the outgrowth of THAINET
notify: noc-uninet@it.chula.ac.th
notify: noc@uni.net.th
mnt-by: APNIC-HM
mnt-lower: MAINT-TH-UNINET
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20041210
source: APNIC
person: Unnop Viriyavit
address: 328 Sri-Ayuthya rd. Rajthevi
address: Bangkok 10400
country: TH
phone: +66-2-248-7749
fax-no: +66-2-248-6662
e-mail: unnop@uni.net.th
nic-hdl: UV1-AP
mnt-by: MAINT-NULL
changed: hostmaster@apnic.ent 19990615
changed: chaya@it.chula.ac.th 20010517
source: APNIC
person: Yunyong Teng-amnuay
address: Chulalongkorn University
address: Centers of Academic Resources
address: Phyathai Road
address: Bangkok 10330
address: TH
country: TH
phone: +66-2-218-2910
fax-no: +66-2-215-3617
e-mail: Yunyong.T@Chula.ac.th
nic-hdl: YT7
notify: Yunyong.T@Chula.ac.th
mnt-by: MAINT-THAINET
changed: hostmaster@apnic.net 19960216
changed: chaya@it.chula.ac.th 20010515
source: APNIC
changed: hm-changed@apnic.net 20111122
person: UniNet Network Operation Center
address: Office of Information Technology Administration
address: for Educational Development
address: Ministry of University Affairs
address: Bangkok 10400
country: TH
phone: +66-2-248-7749
fax-no: +66-2-248-6662
e-mail: noc@uni.net.th
nic-hdl: UNOC1-AP
notify: noc@uni.net.th
mnt-by: MAINT-TH-UNINET
changed: manut@uni.net.th 20010517
source: APNIC
Regards,
Fail2Ban
The IP 202.29.16.58 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 202.29.16.58:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-5]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 202.28.0.0 - 202.29.255.255
netname: THAINET-TH
descr: UniNet(Inter-university network)
descr: Office of Information Technology Administration
descr: for Educational Development
descr: Ministry of University Affairs
country: TH
admin-c: YT7
admin-c: UV1-AP
tech-c: UNOC1-AP
remarks: UniNet is the outgrowth of THAINET
notify: noc-uninet@it.chula.ac.th
notify: noc@uni.net.th
mnt-by: APNIC-HM
mnt-lower: MAINT-TH-UNINET
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20041210
source: APNIC
person: Unnop Viriyavit
address: 328 Sri-Ayuthya rd. Rajthevi
address: Bangkok 10400
country: TH
phone: +66-2-248-7749
fax-no: +66-2-248-6662
e-mail: unnop@uni.net.th
nic-hdl: UV1-AP
mnt-by: MAINT-NULL
changed: hostmaster@apnic.ent 19990615
changed: chaya@it.chula.ac.th 20010517
source: APNIC
person: Yunyong Teng-amnuay
address: Chulalongkorn University
address: Centers of Academic Resources
address: Phyathai Road
address: Bangkok 10330
address: TH
country: TH
phone: +66-2-218-2910
fax-no: +66-2-215-3617
e-mail: Yunyong.T@Chula.ac.th
nic-hdl: YT7
notify: Yunyong.T@Chula.ac.th
mnt-by: MAINT-THAINET
changed: hostmaster@apnic.net 19960216
changed: chaya@it.chula.ac.th 20010515
source: APNIC
changed: hm-changed@apnic.net 20111122
person: UniNet Network Operation Center
address: Office of Information Technology Administration
address: for Educational Development
address: Ministry of University Affairs
address: Bangkok 10400
country: TH
phone: +66-2-248-7749
fax-no: +66-2-248-6662
e-mail: noc@uni.net.th
nic-hdl: UNOC1-AP
notify: noc@uni.net.th
mnt-by: MAINT-TH-UNINET
changed: manut@uni.net.th 20010517
source: APNIC
Regards,
Fail2Ban
Subscribe to:
Posts (Atom)