Hi,
The IP 222.135.144.90 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 222.135.144.90:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '222.132.0.0 - 222.135.255.255'
inetnum: 222.132.0.0 - 222.135.255.255
netname: UNICOM-SD
descr: China Unicom Shandong province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: XZ14-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-SD
mnt-routes: MAINT-CNCGROUP-RR
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
mnt-irt: IRT-CU-CN
changed: hm-changed@apnic.net 20031211
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20060125
changed: hm-changed@apnic.net 20090508
source: APNIC
irt: IRT-CU-CN
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
e-mail: zhouxm@chinaunicom.cn
abuse-mailbox: zhouxm@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
changed: zhouxm@chinaunicom.cn 20101110
changed: hm-changed@apnic.net 20101116
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@cnc-noc.net
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: abuse@cnc-noc.net 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC
person: XIAOFENG ZHANG
nic-hdl: XZ14-AP
e-mail: ip@pub.sd.cninfo.net
address: Jinan,Shandong P.R China
phone: +86-531-6666666
fax-no: +86-531-6666666
country: CN
changed: ip@sdinfo.net 20050330
mnt-by: MAINT-ZXF
source: APNIC
% Information related to '222.132.0.0/14AS4837'
route: 222.132.0.0/14
descr: CNC Group CHINA169 Shandong Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC
% This query was served by the APNIC Whois Service version 1.68 (WHOIS2)
Regards,
Fail2Ban
Sunday 29 September 2013
[Fail2Ban] SSH: banned 118.244.136.64
Hi,
The IP 118.244.136.64 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 118.244.136.64:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '118.244.0.0 - 118.244.255.255'
inetnum: 118.244.0.0 - 118.244.255.255
netname: HSOFT
descr: Beijing hsoft technologies inc
descr: Beijing City, Haidian District Madian 8 South Road
descr: crown sea building three layer
country: CN
admin-c: ZT587-AP
tech-c: ZT587-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: hm-changed@apnic.net 20121122
status: ALLOCATED PORTABLE
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC
person: Zhang Tao
address: Beijing City, Haidian District Madian 8 South Road crown sea building three layer
country: CN
phone: +86-13051336272
e-mail: 13051336272@wo.com.cn
nic-hdl: ZT587-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20121107
source: APNIC
% Information related to '118.244.0.0/16AS4837'
route: 118.244.0.0/16
descr: CNC Group CHINA169 Sichuan Province network
descr: Addresses from CNNIC(BBnet)
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20080321
source: APNIC
% This query was served by the APNIC Whois Service version 1.68 (WHOIS1)
Regards,
Fail2Ban
The IP 118.244.136.64 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 118.244.136.64:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '118.244.0.0 - 118.244.255.255'
inetnum: 118.244.0.0 - 118.244.255.255
netname: HSOFT
descr: Beijing hsoft technologies inc
descr: Beijing City, Haidian District Madian 8 South Road
descr: crown sea building three layer
country: CN
admin-c: ZT587-AP
tech-c: ZT587-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: hm-changed@apnic.net 20121122
status: ALLOCATED PORTABLE
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC
person: Zhang Tao
address: Beijing City, Haidian District Madian 8 South Road crown sea building three layer
country: CN
phone: +86-13051336272
e-mail: 13051336272@wo.com.cn
nic-hdl: ZT587-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20121107
source: APNIC
% Information related to '118.244.0.0/16AS4837'
route: 118.244.0.0/16
descr: CNC Group CHINA169 Sichuan Province network
descr: Addresses from CNNIC(BBnet)
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20080321
source: APNIC
% This query was served by the APNIC Whois Service version 1.68 (WHOIS1)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 200.12.49.147
Hi,
The IP 200.12.49.147 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 200.12.49.147:
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-09-29 15:25:04 (BRT -03:00)
inetnum: 200.12.32/19
status: allocated
aut-num: N/A
owner: CyberNet de Guatemala S.A.
ownerid: GT-CGSA-LACNIC
responsible: Manuel Mazariegos
address: 12 calle 1-25 Zona 10 Edificio Geminis 10, Torre, Norte 609
address: 01010 - Guatemala City -
country: GT
phone: +502 23282100 []
owner-c: MAM2
tech-c: MAM2
abuse-c: MAM2
inetrev: 200.12.32/19
nserver: NS1.GUATE.NET.GT
nsstat: 20130929 AA
nslastaa: 20130929
nserver: NS2.GUATE.NET.GT
nsstat: 20130929 ERR
nslastaa: 20130925
created: 19950428
changed: 20061017
nic-hdl: MAM2
person: Manuel Mazariegos
e-mail: mmaza@GOLD.GUATE.NET.GT
address: 12 calle 1-25 Zona 10 Edificio Geminis 10 Torre, Norte, 6o Nivel 609
address: 01010 - Guatemala - GT
country: GT
phone: +011 502 3382668 []
created: 20021112
changed: 20110406
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
The IP 200.12.49.147 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 200.12.49.147:
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-09-29 15:25:04 (BRT -03:00)
inetnum: 200.12.32/19
status: allocated
aut-num: N/A
owner: CyberNet de Guatemala S.A.
ownerid: GT-CGSA-LACNIC
responsible: Manuel Mazariegos
address: 12 calle 1-25 Zona 10 Edificio Geminis 10, Torre, Norte 609
address: 01010 - Guatemala City -
country: GT
phone: +502 23282100 []
owner-c: MAM2
tech-c: MAM2
abuse-c: MAM2
inetrev: 200.12.32/19
nserver: NS1.GUATE.NET.GT
nsstat: 20130929 AA
nslastaa: 20130929
nserver: NS2.GUATE.NET.GT
nsstat: 20130929 ERR
nslastaa: 20130925
created: 19950428
changed: 20061017
nic-hdl: MAM2
person: Manuel Mazariegos
e-mail: mmaza@GOLD.GUATE.NET.GT
address: 12 calle 1-25 Zona 10 Edificio Geminis 10 Torre, Norte, 6o Nivel 609
address: 01010 - Guatemala - GT
country: GT
phone: +011 502 3382668 []
created: 20021112
changed: 20110406
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 61.147.113.26
Hi,
The IP 61.147.113.26 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 61.147.113.26:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '61.147.0.0 - 61.147.255.255'
inetnum: 61.147.0.0 - 61.147.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostmaster@ns.chinanet.cn.net 20020209
changed: hostmaster@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC
role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC
% Information related to '61.147.0.0/16AS23650'
route: 61.147.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC
% This query was served by the APNIC Whois Service version 1.68 (WHOIS1)
Regards,
Fail2Ban
The IP 61.147.113.26 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 61.147.113.26:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '61.147.0.0 - 61.147.255.255'
inetnum: 61.147.0.0 - 61.147.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostmaster@ns.chinanet.cn.net 20020209
changed: hostmaster@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC
role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC
% Information related to '61.147.0.0/16AS23650'
route: 61.147.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC
% This query was served by the APNIC Whois Service version 1.68 (WHOIS1)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 190.147.33.16
Hi,
The IP 190.147.33.16 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 190.147.33.16:
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-09-29 07:40:25 (BRT -03:00)
inetnum: 190.144/14
status: allocated
aut-num: N/A
owner: Telmex Colombia S.A.
ownerid: CO-ACSA-LACNIC
responsible: Operaciones Core IP
address: CLARO FIJO COLOMBIA - Cra 7 No. 63-44, 11111,
address: 11111 - Bogota - DC
country: CO
phone: +57 01 7480000 []
owner-c: ATI
tech-c: ATI
abuse-c: ATI
inetrev: 190.147/16
nserver: ENIAC.CABLE.NET.CO
nsstat: 20130926 AA
nslastaa: 20130926
nserver: HAL.CABLE.NET.CO
nsstat: 20130926 AA
nslastaa: 20130926
created: 20070111
changed: 20070111
nic-hdl: ATI
person: Network Security Team
e-mail: abuse@TELMEXLA.NET.CO
address: Cra 7 # 63-44 Piso 6, 00, 00
address: 10 - Bogota - DC
country: CO
phone: +57 01 7480456 [81966]
created: 20020909
changed: 20130416
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
The IP 190.147.33.16 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 190.147.33.16:
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-09-29 07:40:25 (BRT -03:00)
inetnum: 190.144/14
status: allocated
aut-num: N/A
owner: Telmex Colombia S.A.
ownerid: CO-ACSA-LACNIC
responsible: Operaciones Core IP
address: CLARO FIJO COLOMBIA - Cra 7 No. 63-44, 11111,
address: 11111 - Bogota - DC
country: CO
phone: +57 01 7480000 []
owner-c: ATI
tech-c: ATI
abuse-c: ATI
inetrev: 190.147/16
nserver: ENIAC.CABLE.NET.CO
nsstat: 20130926 AA
nslastaa: 20130926
nserver: HAL.CABLE.NET.CO
nsstat: 20130926 AA
nslastaa: 20130926
created: 20070111
changed: 20070111
nic-hdl: ATI
person: Network Security Team
e-mail: abuse@TELMEXLA.NET.CO
address: Cra 7 # 63-44 Piso 6, 00, 00
address: 10 - Bogota - DC
country: CO
phone: +57 01 7480456 [81966]
created: 20020909
changed: 20130416
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 201.141.166.234
Hi,
The IP 201.141.166.234 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 201.141.166.234:
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-09-28 21:23:51 (BRT -03:00)
inetnum: 201.141.128/17
status: allocated
aut-num: N/A
owner: Cablevisión, S.A. de C.V.
ownerid: MX-CSCV17-LACNIC
responsible: Jean Paul Broc Haro
address: Dr. Río de la Loza, 182, Col. Doctores
address: 06720 - Del. Cuauhtémoc - DF
country: MX
phone: +52 5591831800 []
owner-c: LAA2
tech-c: LAA2
abuse-c: LAA2
inetrev: 201.141.128/17
nserver: CVDNSISP5.CABLEVISION.NET.MX [lame - not published]
nsstat: 20130928 UDN
nslastaa: 20120201
created: 20060317
changed: 20111116
nic-hdl: LAA2
person: Ricardo Medina Velasco
e-mail: contactonic@CABLEVISION.NET.MX
address: Niños Héroes, 41, Col. Doctores
address: 06720 - Del. Cuauhtémoc - DF
country: MX
phone: +52 55 91831666 []
created: 20050307
changed: 20130719
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
The IP 201.141.166.234 has just been banned by Fail2Ban after
5 attempts against SSH.
Here are more information about 201.141.166.234:
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-09-28 21:23:51 (BRT -03:00)
inetnum: 201.141.128/17
status: allocated
aut-num: N/A
owner: Cablevisión, S.A. de C.V.
ownerid: MX-CSCV17-LACNIC
responsible: Jean Paul Broc Haro
address: Dr. Río de la Loza, 182, Col. Doctores
address: 06720 - Del. Cuauhtémoc - DF
country: MX
phone: +52 5591831800 []
owner-c: LAA2
tech-c: LAA2
abuse-c: LAA2
inetrev: 201.141.128/17
nserver: CVDNSISP5.CABLEVISION.NET.MX [lame - not published]
nsstat: 20130928 UDN
nslastaa: 20120201
created: 20060317
changed: 20111116
nic-hdl: LAA2
person: Ricardo Medina Velasco
e-mail: contactonic@CABLEVISION.NET.MX
address: Niños Héroes, 41, Col. Doctores
address: 06720 - Del. Cuauhtémoc - DF
country: MX
phone: +52 55 91831666 []
created: 20050307
changed: 20130719
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
Subscribe to:
Posts (Atom)