HideMyAss.com

Monday 18 November 2013

[Fail2Ban] SSH: banned 201.57.75.254

Hi,

The IP 201.57.75.254 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 201.57.75.254:

[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use (http://registro.br/termo/en.html),
% being prohibited its distribution, comercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2013-11-18 22:34:19 (BRST -02:00)

inetnum: 201.57.75.240/28
aut-num
: AS4230
abuse-c: GSE6
owner: Serviço Nacional de Aprendizagem Industrial-SENAI
ownerid: 003.795.071/0001-16
responsible: Gustavo Leal Sales Filho
country: BR
owner-c: FFA66
tech-c: MMP269
created: 20071114
changed: 20081210
inetnum-up: 201.56/15

nic-hdl-br: FFA66
person: France Ferreira de Souza Arnaut
e-mail: arnaut@bol.com.br
created: 20020109
changed: 20020109

nic-hdl-br: GSE6
person: Grupo de Segurança Internet da Embratel
e-mail: abuse@embratel.net.br
created: 20001005
changed: 20001005

nic-hdl-br: MMP269
person: Marcelo Machado de Pinheiro
e-mail: marcelo.mpinheiro@gmail.com
created: 20041018
changed: 20080107

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/, respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 211.95.76.242

Hi,

The IP 211.95.76.242 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 211.95.76.242:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '211.94.0.0 - 211.103.255.255'

inetnum: 211.94.0.0 - 211.103.255.255
netname: CNNIC
descr: China Internet Network Information Center
country: CN
admin-c: HQ1-CN
tech-c: MW1-AP
tech-c: WZ2-AP
remarks: confederation CNNIC
mnt-by: MAINT-CNNIC-AP
changed: hostmaster@apnic.net 19991214
status: ALLOCATED PORTABLE
source: APNIC

person: Hualin Qian
address: Chinese Academy of Sciences
address: Computer Network Center
address: P.O.Box 2418-26
address: Beijing, 100081
address: CN
country: CN
phone: +86 1 2569960
e-mail: hlqian@ns.cnc.ac.cn
nic-hdl: HQ1-CN
notify: dbmon@apnic.net
mnt-by: MAINT-NULL
changed: hostmaster@apnic.net 19950419
source: APNIC
changed: hm-changed@apnic.net 20111122

person: Mao Wei
address: China Internet Information Center(CNNIC)No. 4 of South street,
address: Zhongguancun, Beijing, P.R.China 100080
country: CN
phone: +86-10-58813000
fax-no: +86-10-62559892
e-mail: ipas@cnnic.net.cn
nic-hdl: MW1-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20010319
changed: ipas@cnnic.net.cn 20060222
source: APNIC

person: Wenhui Zhang
address: China Internet Information Center(CNNIC)
address: No.4,South Fourth street,Zhongguancun,Haidian
address: Beijing,100080
address: P.R.China
country: CN
phone: +86-10-62553604
fax-no: +86-10-62559892
e-mail: whzhang@cnnic.net.cn
nic-hdl: WZ2-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20020408
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 108.168.143.122

Hi,

The IP 108.168.143.122 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 108.168.143.122:

[Querying whois.arin.net]
[Redirected to rwhois.softlayer.com:4321]
[Querying rwhois.softlayer.com]
[rwhois.softlayer.com]
%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.108.168.128.0/19
network:Auth-Area:108.168.128.0/19
network:Network-Name:SOFTLAYER-108.168.128.0
network:IP-Network:108.168.143.120/29
network:IP-Network-Block:108.168.143.120-108.168.143.127

network:Organization;I:Bridge Base, Inc.
network:Street-Address:10550 Hope Mills Drive
network:City:Las Vegas
network:State:NV
network:Postal-Code:89135
network:Country-Code:US
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:uday@bridgebase.com
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2010-11-19 14:55:43
network:Updated:2013-03-29 12:17:03
network:Updated-By:ipadmin@softlayer.com

%ok

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 46.149.115.109

Hi,

The IP 46.149.115.109 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 46.149.115.109:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '46.149.112.0 - 46.149.127.255'

% No abuse contact registered for 46.149.112.0 - 46.149.127.255

inetnum: 46.149.112.0 - 46.149.127.255
netname: ALFSERVIS-NET
descr: Alf Servis s.r.o.
country: CZ
org: ORG-ALFS1-RIPE
admin-c: SEBE1-RIPE
tech-c: SEBE1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: ALFSERVIS-MNT
mnt-routes: ALFSERVIS-MNT
mnt-domains: ALFSERVIS-MNT
source: RIPE # Filtered

organisation: ORG-ALFS1-RIPE
org-name: Alf servis, s.r.o.
org-type: OTHER
address: Okruzni 17,678 01 Blansko, Czech Republic
mnt-ref: ALFSERVIS-MNT
mnt-by: ALFSERVIS-MNT
source: RIPE # Filtered

person: Jaromir Sebela
address: Okruzni 17,678 01 Blansko, Czech Republic
phone: +420603259683
nic-hdl: SEBE1-RIPE
mnt-by: ALFSERVIS-MNT
source: RIPE # Filtered

% Information related to '46.149.112.0/20AS52092'

route: 46.149.112.0/20
descr: Route object #1 AlfServis s.r.o.
origin: AS52092
mnt-by: ALFSERVIS-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 189.51.235.154

Hi,

The IP 189.51.235.154 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 189.51.235.154:

[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use (http://registro.br/termo/en.html),
% being prohibited its distribution, comercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2013-11-18 15:41:36 (BRST -02:00)

inetnum: 189.51.235.152/30
aut-num
: AS27724
abuse-c: EMS401
owner: webwise telecomunicações Ltda
ownerid: 008.609.055/0001-05
responsible: Rosana Ermida Portella
country: BR
owner-c: ROEPO
tech-c: ROEPO
created: 20130415
changed: 20130415
inetnum-up: 189.51.224/20

nic-hdl-br: EMS401
person: Eduardo Manuel Lourenço de Sousa
e-mail: registrobr@nqt.com.br
created: 20030714
changed: 20110223

nic-hdl-br: ROEPO
person: Rosana Ermida Portella
e-mail: comercial@webwise.com.br
created: 20061104
changed: 20130819

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/, respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 162.243.66.113

Hi,

The IP 162.243.66.113 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 162.243.66.113:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 162.243.66.113"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=162.243.66.113?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 162.243.0.0 - 162.243.255.255
CIDR: 162.243.0.0/16
OriginAS: AS14061, AS62567, AS46652
NetName: DIGITALOCEAN-7
NetHandle: NET-162-243-0-0-1
Parent: NET-162-0-0-0-0
NetType: Direct Allocation
Comment: http://www.digitalocean.com
Comment: Simple Cloud Hosting
RegDate: 2013-09-06
Updated: 2013-09-06
Ref: http://whois.arin.net/rest/net/NET-162-243-0-0-1

OrgName: Digital Ocean, Inc.
OrgId: DO-13
Address: 270 Lafayette St
Address: Suite 1206
City: New York
StateProv: NY
PostalCode: 10012
Country: US
RegDate: 2012-05-14
Updated: 2012-10-05
Ref: http://whois.arin.net/rest/org/DO-13

OrgAbuseHandle: URETS-ARIN
OrgAbuseName: Uretsky, Ben
OrgAbusePhone: +1-646-397-8051
OrgAbuseEmail: abuse@digitalocean.com
OrgAbuseRef: http://whois.arin.net/rest/poc/URETS-ARIN

OrgTechHandle: URETS-ARIN
OrgTechName: Uretsky, Ben
OrgTechPhone: +1-646-397-8051
OrgTechEmail: abuse@digitalocean.com
OrgTechRef: http://whois.arin.net/rest/poc/URETS-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 173.236.68.15

Hi,

The IP 173.236.68.15 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 173.236.68.15:

[Querying whois.arin.net]
[Redirected to rwhois.singlehop.net:4321]
[Querying rwhois.singlehop.net]
[rwhois.singlehop.net]
%rwhois V-1.5:003eff:00 rwhois.singlehop.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:ORG-SINGL-8.173-236-68-0/27
network:Auth-Area:173.236.0.0/17
network:IP-Network:173.236.68.0/27

network:Organization:Petrichor LLC
network:Street-Address:133 Yale
network:City:Toledo
network:State:OH
network:Postal-Code:43614
network:Country-Code:US
network:Tech-Contact;I:NETWO1546-ARIN
network:Admin-Contact;I:NETWO1546-ARIN
network:Abuse-Contact;I:ABUSE2492-ARIN
network:Created:20130609
network:Updated:20130609

%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 222.43.96.226

Hi,

The IP 222.43.96.226 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 222.43.96.226:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '222.32.0.0 - 222.63.255.255'

inetnum: 222.32.0.0 - 222.63.255.255
netname: CTTNET
descr: China TieTong Telecommunications Corporation
descr: Jinze Mansion, 2 Guangningbo Street,
descr: Xicheng District, Beijing, China, 100032
country: CN
admin-c: WP188-AP
tech-c: LM273-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CN-CRTC
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: hm-changed@apnic.net 20090430
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: liu min
nic-hdl: LM273-AP
e-mail: crnet_mgr@chinatietong.com
address: 22F Yuetan Mansion, Xicheng District, Beijing, P.R.China
phone: +86-10-51848796
fax-no: +86-10-51842426
country: CN
changed: ipas@cnnic.net.cn 20120320
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Wang Pei
nic-hdl: WP188-AP
e-mail: crnet_mgr@chinatietong.com
address: Jinze Mansion, 2 Guangningbo Street,
address: Xicheng District, Beijing, China, 100032
phone: +21-51892106
fax-no: +21-51847802
country: CN
changed: ipas@cnnic.net.cn 20060926
mnt-by: MAINT-CNNIC-AP
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 212.41.204.100

Hi,

The IP 212.41.204.100 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 212.41.204.100:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '212.41.204.96 - 212.41.204.103'

% Abuse contact for '212.41.204.96 - 212.41.204.103' is 'abuse.sme@swisscom.com'

inetnum: 212.41.204.96 - 212.41.204.103
netname: CH-SWISSCOM-CUST-NETID-2071
descr: Swisscom (Schweiz) AG
descr: Internet Service Provider
country: CH
admin-c: CHCN1-RIPE
tech-c: CHCN1-RIPE
status: ASSIGNED PA
mnt-by: SUNWEB-MNT
mnt-lower: SUNWEB-MNT
source: RIPE # Filtered

role: Cybernet CH NOC
address: Swisscom (Schweiz) AG
address: Binzring 17
address: CH-8045 Zurich
address: Switzerland
remarks: *****************************************************
remarks: The number below is only for NOC contacts.
remarks: Customers are requested to contact Customer Care
remarks: For Support requests please use (+41) 0800 055 055
remarks: *****************************************************
phone: +41 43 960 73 80
admin-c: SG7777-RIPE
admin-c: SF3464-RIPE
admin-c: MARS-RIPE
tech-c: HPP34-RIPE
tech-c: SG7777-RIPE
tech-c: SF3464-RIPE
tech-c: MARS-RIPE
nic-hdl: CHCN1-RIPE
abuse-mailbox: abuse.sme@swisscom.com
mnt-by: SUNWEB-MNT
source: RIPE # Filtered

% Information related to '212.41.192.0/20AS3303'

route: 212.41.192.0/20
descr: Swisscom (Schweiz) AG - SME/Cybernet
descr: Provider Local Registry
origin: AS3303
mnt-by: CH-UNISOURCE-MNT
mnt-by: SUNWEB-MNT
mnt-lower: SUNWEB-MNT
mnt-routes: SUNWEB-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 66.230.190.32

Hi,

The IP 66.230.190.32 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 66.230.190.32:

[Querying whois.arin.net]
[Redirected to rwhois.isprime.net:4321]
[Querying rwhois.isprime.net]
[Unable to connect to remote host]

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 202.28.48.80

Hi,

The IP 202.28.48.80 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 202.28.48.80:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '202.28.0.0 - 202.29.255.255'

inetnum: 202.28.0.0 - 202.29.255.255
netname: THAINET-TH
descr: UniNet(Inter-university network)
descr: Office of Information Technology Administration
descr: for Educational Development
descr: Ministry of University Affairs
country: TH
admin-c: YT7
admin-c: UV1-AP
tech-c: UNOC1-AP
remarks: UniNet is the outgrowth of THAINET
notify: noc-uninet@it.chula.ac.th
notify: noc@uni.net.th
mnt-by: APNIC-HM
mnt-lower: MAINT-TH-UNINET
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20041210
source: APNIC

person: UniNet Network Operation Center
address: Office of Information Technology Administration
address: for Educational Development
address: Ministry of University Affairs
address: Bangkok 10400
country: TH
phone: +66-2-248-7749
fax-no: +66-2-248-6662
e-mail: noc@uni.net.th
nic-hdl: UNOC1-AP
notify: noc@uni.net.th
mnt-by: MAINT-TH-UNINET
changed: manut@uni.net.th 20010517
source: APNIC

person: Unnop Viriyavit
address: 328 Sri-Ayuthya rd. Rajthevi
address: Bangkok 10400
country: TH
phone: +66-2-248-7749
fax-no: +66-2-248-6662
e-mail: unnop@uni.net.th
nic-hdl: UV1-AP
mnt-by: MAINT-NULL
changed: hostmaster@apnic.ent 19990615
changed: chaya@it.chula.ac.th 20010517
source: APNIC

person: Yunyong Teng-amnuay
address: Chulalongkorn University
address: Centers of Academic Resources
address: Phyathai Road
address: Bangkok 10330
address: TH
country: TH
phone: +66-2-218-2910
fax-no: +66-2-215-3617
e-mail: Yunyong.T@Chula.ac.th
nic-hdl: YT7
notify: Yunyong.T@Chula.ac.th
mnt-by: MAINT-THAINET
changed: hostmaster@apnic.net 19960216
changed: chaya@it.chula.ac.th 20010515
source: APNIC
changed: hm-changed@apnic.net 20111122

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban