Hi,
The IP 122.225.107.207 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 122.225.107.207:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '122.225.96.0 - 122.225.127.255'
inetnum: 122.225.96.0 - 122.225.127.255
netname: CHINANET-ZJ-HU
country: CN
descr: CHINANET-ZJ Huzhou node network
descr: Zhejiang Telecom
admin-c: CZ4-AP
tech-c: CH119-AP
status: ALLOCATED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20070810
mnt-by: MAINT-CHINANET-ZJ
mnt-lower: MAINT-CN-CHINANET-ZJ-HU
source: APNIC
role: CHINANET-ZJ Huzhou
address: No.18 Hongqi Road,Huzhou,Zhejiang.313000
country: CN
phone: +86-572-2022163
fax-no: +86-572-2210609
e-mail: anti_spam@mail.huptt.zj.cn
remarks: send spam reports to anti_spam@mail.huptt.zj.cn
remarks: and abuse reports to anti_spam@mail.huptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH50-AP
tech-c: CH50-AP
nic-hdl: CH119-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114
role: CHINANET ZHEJIANG
address: No. 257 Qingjiang Road, Hangzhou, Zhejiang.310066
country: CN
phone: +86-571-86821752
fax-no: +86-571-86988329
e-mail: antispam@dcb.hz.zj.cn
remarks: send spam reports to antispam@dcb.hz.zj.cn
remarks: and abuse reports to antispam@dcb.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CZ61-AP
tech-c: CZ61-AP
nic-hdl: CZ4-AP
mnt-by: MAINT-CHINANET-ZJ
changed: hjh@dcb.hz.zj.cn 20050914
source: APNIC
changed: hm-changed@apnic.net 20111114
% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)
Regards,
Fail2Ban
Sunday 8 September 2013
[Fail2Ban] SSH: banned 60.191.232.54
Hi,
The IP 60.191.232.54 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 60.191.232.54:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '60.191.232.0 - 60.191.232.127'
inetnum: 60.191.232.0 - 60.191.232.127
netname: JINHUA-TELECOM-COMPANY
country: CN
descr: Jinhua Telecom Company IDC Center
descr:
admin-c: LW1591-AP
tech-c: CJ54-AP
mnt-irt: IRT-CHINANET-ZJ
status: ASSIGNED NON-PORTABLE
changed: zjnoc_ip_5@163.com 20130617
mnt-by: MAINT-CN-CHINANET-ZJ-JH
source: APNIC
irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC
role: CHINANET-ZJ Jinhua
address: No.155 Xishi street,Jinhua,Zhejiang.321000
country: CN
phone: +86-579-2300779
fax-no: +86-579-2330035
e-mail: anti_spam@mail.jhptt.zj.cn
remarks: send spam reports to anti_spam@mail.jhptt.zj.cn
remarks: and abuse reports to anti_spam@mail.jhptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH55-AP
tech-c: CH55-AP
nic-hdl: CJ54-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114
person: Lujiang Wang
nic-hdl: LW1591-AP
e-mail: anti_spam@mail.jhptt.zj.cn
address: NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone: +86-15305790379
country: CN
changed: zjnoc_ip_4@163.com 20130617
mnt-by: MAINT-CN-CHINANET-ZJ-JH
source: APNIC
% This query was served by the APNIC Whois Service version 1.68 (WHOIS4)
Regards,
Fail2Ban
The IP 60.191.232.54 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 60.191.232.54:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '60.191.232.0 - 60.191.232.127'
inetnum: 60.191.232.0 - 60.191.232.127
netname: JINHUA-TELECOM-COMPANY
country: CN
descr: Jinhua Telecom Company IDC Center
descr:
admin-c: LW1591-AP
tech-c: CJ54-AP
mnt-irt: IRT-CHINANET-ZJ
status: ASSIGNED NON-PORTABLE
changed: zjnoc_ip_5@163.com 20130617
mnt-by: MAINT-CN-CHINANET-ZJ-JH
source: APNIC
irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC
role: CHINANET-ZJ Jinhua
address: No.155 Xishi street,Jinhua,Zhejiang.321000
country: CN
phone: +86-579-2300779
fax-no: +86-579-2330035
e-mail: anti_spam@mail.jhptt.zj.cn
remarks: send spam reports to anti_spam@mail.jhptt.zj.cn
remarks: and abuse reports to anti_spam@mail.jhptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH55-AP
tech-c: CH55-AP
nic-hdl: CJ54-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114
person: Lujiang Wang
nic-hdl: LW1591-AP
e-mail: anti_spam@mail.jhptt.zj.cn
address: NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone: +86-15305790379
country: CN
changed: zjnoc_ip_4@163.com 20130617
mnt-by: MAINT-CN-CHINANET-ZJ-JH
source: APNIC
% This query was served by the APNIC Whois Service version 1.68 (WHOIS4)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 103.31.80.46
Hi,
The IP 103.31.80.46 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 103.31.80.46:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '103.31.80.0 - 103.31.83.255'
inetnum: 103.31.80.0 - 103.31.83.255
netname: MULTINETPAKISTAN
descr: Multinet Broadband
descr: 239 Fatima Jinnah Road
country: PK
admin-c: IC219-AP
tech-c: IC219-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-PK-MULTINETPAKISTAN
mnt-routes: MAINT-PK-MULTINETPAKISTAN
mnt-irt: IRT-MULTINETBROADBAND-PK
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20121123
source: APNIC
irt: IRT-MULTINETBROADBAND-PK
address: 29-C, Sunset Commercial Street No.1, Phase 4, DHA, Karachi 75500
e-mail: ip.noc@multinet.com.pk
abuse-mailbox: abuse@multinet.com.pk
admin-c: IC219-AP
tech-c: IC219-AP
mnt-by: MAINT-PK-MULTINETPAKISTAN
changed: abduls@multinet.com.pk 20120815
source: APNIC
person: IP CORE
address: 1D-203, Sector 30, Korangi Industrial Area, Karachi - 74900
country: PK
phone: +92-21-35113642
fax-no: +92-21-35113645
e-mail: ip.core@multinet.com.pk
nic-hdl: IC219-AP
remarks: Multinet IP Core Network Department
notify: abduls@multinet.com.pk
abuse-mailbox: abuse@multinet.com.pk
mnt-by: MAINT-PK-MULTINETPAKISTAN
changed: abduls@multinet.com.pk 20120813
source: APNIC
% Information related to '103.31.80.0/24AS9260'
route: 103.31.80.0/24
descr: Multinet Route Object 103-80/24
origin: AS9260
country: PK
notify: ip.noc@multinet.com.pk
mnt-lower: MAINT-PK-MULTINETPAKISTAN
mnt-routes: MAINT-PK-MULTINETPAKISTAN
mnt-by: MAINT-PK-MULTINETPAKISTAN
changed: ip.noc@multinet.com.pk 20121219
source: APNIC
% This query was served by the APNIC Whois Service version 1.68 (WHOIS4)
Regards,
Fail2Ban
The IP 103.31.80.46 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 103.31.80.46:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '103.31.80.0 - 103.31.83.255'
inetnum: 103.31.80.0 - 103.31.83.255
netname: MULTINETPAKISTAN
descr: Multinet Broadband
descr: 239 Fatima Jinnah Road
country: PK
admin-c: IC219-AP
tech-c: IC219-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-PK-MULTINETPAKISTAN
mnt-routes: MAINT-PK-MULTINETPAKISTAN
mnt-irt: IRT-MULTINETBROADBAND-PK
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20121123
source: APNIC
irt: IRT-MULTINETBROADBAND-PK
address: 29-C, Sunset Commercial Street No.1, Phase 4, DHA, Karachi 75500
e-mail: ip.noc@multinet.com.pk
abuse-mailbox: abuse@multinet.com.pk
admin-c: IC219-AP
tech-c: IC219-AP
mnt-by: MAINT-PK-MULTINETPAKISTAN
changed: abduls@multinet.com.pk 20120815
source: APNIC
person: IP CORE
address: 1D-203, Sector 30, Korangi Industrial Area, Karachi - 74900
country: PK
phone: +92-21-35113642
fax-no: +92-21-35113645
e-mail: ip.core@multinet.com.pk
nic-hdl: IC219-AP
remarks: Multinet IP Core Network Department
notify: abduls@multinet.com.pk
abuse-mailbox: abuse@multinet.com.pk
mnt-by: MAINT-PK-MULTINETPAKISTAN
changed: abduls@multinet.com.pk 20120813
source: APNIC
% Information related to '103.31.80.0/24AS9260'
route: 103.31.80.0/24
descr: Multinet Route Object 103-80/24
origin: AS9260
country: PK
notify: ip.noc@multinet.com.pk
mnt-lower: MAINT-PK-MULTINETPAKISTAN
mnt-routes: MAINT-PK-MULTINETPAKISTAN
mnt-by: MAINT-PK-MULTINETPAKISTAN
changed: ip.noc@multinet.com.pk 20121219
source: APNIC
% This query was served by the APNIC Whois Service version 1.68 (WHOIS4)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 201.245.172.4
Hi,
The IP 201.245.172.4 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 201.245.172.4:
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-09-08 06:46:07 (BRT -03:00)
inetnum: 201.245.172.0/29
status: reallocated
owner: INSTITUTO SUPERIOR DE EDUCACION RURAL ISER PAMPLON
ownerid: CO-ISER-LACNIC
responsible: Cesar Quintana
address: CLL 8, 8, 155
address: 9999 - PAMPLONA - NS
country: CO
phone: +57 7 6800062 []
owner-c: CEQ
tech-c: CEQ
abuse-c: CEQ
created: 20060119
changed: 20060119
inetnum-up: 201.245/16
nic-hdl: CEQ
person: Cesar Quintana
e-mail: incidentes@ETB.NET.CO
address: CLL, 8, 155
address: 9999 - PAMPLONA - NS
country: CO
phone: +57 7 6800062 []
created: 20041222
changed: 20120529
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
The IP 201.245.172.4 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 201.245.172.4:
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-09-08 06:46:07 (BRT -03:00)
inetnum: 201.245.172.0/29
status: reallocated
owner: INSTITUTO SUPERIOR DE EDUCACION RURAL ISER PAMPLON
ownerid: CO-ISER-LACNIC
responsible: Cesar Quintana
address: CLL 8, 8, 155
address: 9999 - PAMPLONA - NS
country: CO
phone: +57 7 6800062 []
owner-c: CEQ
tech-c: CEQ
abuse-c: CEQ
created: 20060119
changed: 20060119
inetnum-up: 201.245/16
nic-hdl: CEQ
person: Cesar Quintana
e-mail: incidentes@ETB.NET.CO
address: CLL, 8, 155
address: 9999 - PAMPLONA - NS
country: CO
phone: +57 7 6800062 []
created: 20041222
changed: 20120529
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
Subscribe to:
Posts (Atom)