HideMyAss.com

Thursday 15 August 2013

[Fail2Ban] SSH: banned 95.80.240.24

Hi,

The IP 95.80.240.24 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 95.80.240.24:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '95.80.240.0 - 95.80.243.255'

inetnum: 95.80.240.0 - 95.80.243.255
netname: Cloud4com
descr: Cloud4com, a.s.
country: CZ
admin-c: AK6865-RIPE
tech-c: DIAL666-RIPE
status: ASSIGNED PA
mnt-by: DIALTELECOM-MNT
source: RIPE # Filtered

role: Dial Telecom Hostmaster Role
address: Dial Telecom, a.s.
address: Krizikova 36a/237
address: Praha 8
address: 186 00
address: The Czech Republic
phone: +420 226 204 400
phone: +420 226 204 111
fax-no: +420 226 204 197
org: ORG-IA8-RIPE
admin-c: IL250-RIPE
admin-c: MP1364-RIPE
admin-c: JS50-RIPE
admin-c: ZP389-RIPE
tech-c: IL250-RIPE
tech-c: MP1364-RIPE
tech-c: JS50-RIPE
tech-c: ZP389-RIPE
nic-hdl: DIAL666-RIPE
abuse-mailbox: abuse@dialtelecom.cz
mnt-by: DIALTELECOM-MNT
source: RIPE # Filtered

person: Alexander Kiraly
address: Cloud4com, a.s.
address: Jakobiho 325
address: Praha 10
address: 109 00
address: The Czech Republic
phone: +420.602525736
nic-hdl: AK6865-RIPE
mnt-by: DIALTELECOM-MNT
source: RIPE # Filtered

% Information related to '95.80.192.0/18AS29208'

route: 95.80.192.0/18
descr: Dial Telecom, a.s.
origin: AS29208
mnt-by: AS29208-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.67.4 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 113.107.101.234

Hi,

The IP 113.107.101.234 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 113.107.101.234:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '113.96.0.0 - 113.111.255.255'

inetnum: 113.96.0.0 - 113.111.255.255
netname: CHINANET-GD
descr: CHINANET Guangdong province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: IC83-AP
remarks: service provider
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-GD
mnt-routes: MAINT-CHINANET-GD
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20081103
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: ipadm@189.cn
address: NO.1,RO.DONGYUANHENG,YUEXIUNAN,GUANGZHOU
phone: +86-20-83877223
fax-no: +86-20-83877223
country: CN
changed: ipadm@189.cn 20110418
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse_gdnoc@189.cn
abuse-mailbox: abuse_gdnoc@189.cn
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 189.254.67.26

Hi,

The IP 189.254.67.26 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 189.254.67.26:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-08-15 17:04:23 (BRT -03:00)

inetnum: 189.240/12
status: allocated
aut-num: N/A
owner: Uninet S.A. de C.V.
ownerid: MX-USCV4-LACNIC
responsible: No hay informacion
address: Periferico Sur, 3190, Jardines del Pedregal
address: 01900 - Cd. de México, Álvaro Obregon - DF
country: MX
phone: +52 55 56244400 []
owner-c: GEC10
tech-c: DCA
abuse-c: SRU
inetrev: 189.254/16
nserver: NSMEX4.UNINET.NET.MX
nsstat: 20130814 AA
nslastaa: 20130814
nserver: NSMEX3.UNINET.NET.MX
nsstat: 20130814 AA
nslastaa: 20130814
nserver: NSMEX2.UNINET.NET.MX
nsstat: 20130814 AA
nslastaa: 20130814
created: 20070905
changed: 20120227

nic-hdl: DCA
person: GESTION DE CAMBIOS
e-mail: gccips1@REDUNO.COM.MX
address: PERIFERICO SUR, 3190, ALVARO OBREG
address: 01900 - MEXICO DF - DF
country: MX
phone: +52 5 556244400 []
created: 20021210
changed: 20111027

nic-hdl: GEC10
person: GESTION DE CAMBIOS
e-mail: gccips@REDUNO.COM.MX
address: PERIFERICO SUR, 3190, ALVARO OBREG
address: 01900 - MEXICO DF - DF
country: MX
phone: +52 5556244400 []
created: 20110706
changed: 20111027

nic-hdl: SRU
person: SEGURIDAD DE RED UNINET
e-mail: abuse@UNINET.NET.MX
address: PERIFERICO SUR, 3190, ALVARO OBREG
address: 01900 - MEXICO - DF
country: MX
phone: +52 55 52237234 []
created: 20030701
changed: 20030703

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban