HideMyAss.com

Tuesday 3 December 2013

[Fail2Ban] SSH: banned 92.63.96.106

Hi,

The IP 92.63.96.106 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 92.63.96.106:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '92.63.96.0 - 92.63.103.255'

% Abuse contact for '92.63.96.0 - 92.63.103.255' is 'abuse@ispsystem.com'

inetnum: 92.63.96.0 - 92.63.103.255
netname: THEFIRST-NET
org: ORG-FVDS1-RIPE
descr: TheFirst-RU clients (WebDC Msk)
country: RU
admin-c: AB11726-RIPE
tech-c: ST6386-RIPE
status: ASSIGNED PA
mnt-by: ISPSYSTEM-MNT
mnt-by: THEFIRST-MNT
mnt-irt: IRT-THEFIRST
source: RIPE # Filtered

organisation: ORG-FVDS1-RIPE
org-name: CJSC THE FIRST
org-type: OTHER
address: CJSC The First, Raduzhny 34a
address: PoBox64, Irkutsk, 664017
address: Russian Federation
abuse-mailbox: abuse@firstvds.ru
mnt-ref: THEFIRST-MNT
mnt-by: ISPSYSTEM-MNT
source: RIPE # Filtered

person: Alexandr Brukhanov
address: Raduzhny st. 34a
address: Irkutsk, 664017, Russian Federation
phone: +7 3952 525789
nic-hdl: AB11726-RIPE
mnt-by: ISPSYSTEM-MNT
source: RIPE # Filtered

person: Stas Titov
address: Raduzhny st. 34a
address: Irkutsk, 664017, Russian Federation
phone: +7 3952 525789
nic-hdl: ST6386-RIPE
mnt-by: ISPSYSTEM-MNT
source: RIPE # Filtered

% Information related to '92.63.96.0/21AS29182'

route: 92.63.96.0/21
descr: TheFirst-RU
origin: AS29182
mnt-by: THEFIRST-MNT
remarks: **************************************
remarks: * For spamming or other abuse issues *
remarks: * please send your requests to *
remarks: * abuse@firstvds.ru *
remarks: **************************************
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.89.168.144

Hi,

The IP 218.89.168.144 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 218.89.168.144:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.88.0.0 - 218.89.255.255'

inetnum: 218.88.0.0 - 218.89.255.255
netname: CHINANET-SC
descr: CHINANET sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XS16-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SC
status: ALLOCATED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20020408
changed: hm-changed@apnic.net 20040927
changed: hm-changed@apnic.net 20041126
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: Xiaodong Shi
nic-hdl: XS16-AP
e-mail: ipadmin@my-public.sc.cninfo.net
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
changed: ipadmin@my-public.sc.cninfo.net 20030317
mnt-by: MAINT-CHINANET-SC
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 95.39.18.178

Hi,

The IP 95.39.18.178 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 95.39.18.178:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '95.39.0.0 - 95.39.255.255'

% Abuse contact for '95.39.0.0 - 95.39.255.255' is 'abuse@ono.com'

inetnum: 95.39.0.0 - 95.39.255.255
netname: ES-ONO-20081215
descr: Cableuropa S.A.U.
org: ORG-OA4-RIPE
country: ES
admin-c: OIM1-RIPE
tech-c: OIM1-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: ONO-MNT
mnt-lower: MNT-PROV-AUNA
mnt-routes: ONO-MNT
mnt-domains: ONO-MNT
source: RIPE # Filtered

organisation: ORG-OA4-RIPE
org-name: Cableuropa S.A.U.
org-type: LIR
address: CABLEUROPA S.A.
address: bruno forterre
address: C/ Avila 35-42
address: 08005
address: Barcelona
address: SPAIN
phone: +34 911809300
fax-no: +34 935020509
admin-c: OIM1-RIPE
admin-c: DHC4-RIPE
admin-c: BF1361-RIPE
mnt-ref: ONO-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
abuse-c: OA1773-RIPE
source: RIPE # Filtered

role: ONO IP MANAGER
address: C/ Basauri, 5
address: Urbanizacion La Florida
address: E-28023 Aravaca, Madrid
address: SPAIN
phone: +34911809300
fax-no: +34911809245
admin-c: OIM1-RIPE
tech-c: OIM1-RIPE
nic-hdl: OIM1-RIPE
mnt-by: ONO-MNT
source: RIPE # Filtered

% Information related to '95.39.0.0/16AS16338'

route: 95.39.0.0/16
descr: Cableuropa - Ono
descr: Ono network in whole Spain
origin: AS16338
remarks: mail spam reports: abuse@ono.com
remarks: security incidents: security@ono.com
mnt-by: ONO-MNT
source: RIPE # Filtered

% Information related to '95.39.0.0/16AS6739'

route: 95.39.0.0/16
descr: Cableuropa - Ono
descr: Ono network in whole Spain
origin: AS6739
remarks: mail spam reports: abuse@ono.com
remarks: security incidents: security@ono.com
mnt-by: ONO-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 198.52.100.67

Hi,

The IP 198.52.100.67 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 198.52.100.67:

[Querying whois.arin.net]
[Redirected to rwhois.multacom.com:4321]
[Querying rwhois.multacom.com]
[Unable to connect to remote host]

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 216.81.149.3

Hi,

The IP 216.81.149.3 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 216.81.149.3:

[Querying whois.arin.net]
[Redirected to rwhois.lh.net:4321]
[Querying rwhois.lh.net]
[rwhois.lh.net]
%rwhois V-1.5 rwhois.lightedge.com (rwhoisd 0.4.1)
network:id:LIGHTEDGE-MICRO-253649
network:class-name:network
network:network-name:LIGHTEDGE-MICRO-253649
network:ip-network:216.81.149.0/28
network:auth-area:216.81.128.0/17
network:org-name:H-Card
network:street-address
:
network:city:
network:state:IL
network:postal-code:
network:country-code:US
network:tech-contact:m.defreece@hcardllc.com
network:created:20120417
network:updated:20131203
network:updated-by:support@lightedge.com

%ok

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 221.204.245.144

Hi,

The IP 221.204.245.144 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 221.204.245.144:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '221.204.0.0 - 221.205.255.255'

inetnum: 221.204.0.0 - 221.205.255.255
netname: UNICOM-SX
descr: China Unicom Shanxi Province Network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: XH63-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-SX
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: This object can only be modified by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your organisation
remarks: account name in the subject line.
mnt-irt: IRT-CU-CN
changed: hm-changed@apnic.net 20030702
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090508
source: APNIC

irt: IRT-CU-CN
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
e-mail: zhouxm@chinaunicom.cn
abuse-mailbox: zhouxm@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
changed: zhouxm@chinaunicom.cn 20101110
changed: hm-changed@apnic.net 20101116
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@cnc-noc.net
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: abuse@cnc-noc.net 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: xuehong han
address: BingZhou North Road YouDian Front Street NO.2 ShanXi Data Communciation Bureau TaiYuan ShanXi China
country: CN
phone: +86-351-4091749
fax-no: +86-351-4088347
e-mail: hxh@public.ty.sx.cn
nic-hdl: XH63-AP
mnt-by: MAINT-CHINANET-SX
changed: hxh@public.ty.sx.cn 20010208
source: APNIC

% Information related to '221.204.0.0/15AS4837'

route: 221.204.0.0/15
descr: CNC Group CHINA169 Shanxi Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.139.54.71

Hi,

The IP 61.139.54.71 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 61.139.54.71:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.139.0.0 - 61.139.127.255'

inetnum: 61.139.0.0 - 61.139.127.255
netname: CHINANET-SC
descr: CHINANET Sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XS16-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SC
status: ALLOCATED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20000601
changed: hm-changed@apnic.net 20040927
changed: hm-changed@apnic.net 20041126
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: Xiaodong Shi
nic-hdl: XS16-AP
e-mail: ipadmin@my-public.sc.cninfo.net
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
changed: ipadmin@my-public.sc.cninfo.net 20030317
mnt-by: MAINT-CHINANET-SC
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 77.252.212.165

Hi,

The IP 77.252.212.165 has just been banned by Fail2Ban after
8 attempts against SSH.


Here are more information about 77.252.212.165:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '77.252.212.160 - 77.252.212.175'

% Abuse contact for '77.252.212.160 - 77.252.212.175' is 'abuse@inetia.pl'

inetnum: 77.252.212.160 - 77.252.212.175
netname: Matic-Warszawa
descr: Matic Sp. z o.o.
descr: Pulawska 300A
descr: Warszawa
remarks: ---------------------------------------
remarks: In case of abuse from our address range
remarks: please contact abuse@inetia.pl
remarks: ---------------------------------------
country: PL
admin-c: SM17460-RIPE
tech-c: NT1264-RIPE
status: ASSIGNED PA
mnt-by: AS12741-MNT
mnt-lower: AS12741-MNT
mnt-routes: AS12741-MNT
source: RIPE # Filtered

role: Netia Telekom S.A. Contact Role
address: Poleczki 13
address: 02-822 Warszawa
address: Poland
phone: +48(22)352 0000
fax-no: +48(22)352 2213
remarks: trouble: 24/7 phone number: +48(22)352 2233
admin-c: MO3780-RIPE
tech-c: KP2343-RIPE
tech-c: AK3224-RIPE
tech-c: RPOZ-RIPE
nic-hdl: NT1264-RIPE
remarks: ---------------------------------------
remarks: In case of abuse from our address range
remarks: please contact abuse@inetia.pl
remarks: ---------------------------------------
abuse-mailbox: abuse@inetia.pl
mnt-by: NETIA-MNT
source: RIPE # Filtered

person: Swietlik Mariusz
address: Pulawska 300A
address: Warszawa 02-819
address: Poland
phone: +48 22 5439000
nic-hdl: SM17460-RIPE
mnt-by: AS12741-MNT
source: RIPE # Filtered

% Information related to '77.252.0.0/14AS12741'

route: 77.252.0.0/14
descr: NETIA
descr: Netia SA
descr: Poleczki 13
descr: 02-822 Warszawa
descr: Poland
origin: AS12741
mnt-by: NETIA-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS1)

Regards,

Fail2Ban