HideMyAss.com

Saturday 26 July 2014

[Fail2Ban] SSH: banned 213.191.74.16

Hi,

The IP 213.191.74.16 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 213.191.74.16:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '213.191.71.128 - 213.191.76.255'

% Abuse contact for '213.191.71.128 - 213.191.76.255' is 'abuse@telefonica.de'

inetnum: 213.191.71.128 - 213.191.76.255
netname: HANSENET
descr: HanseNet Telekommunikation GmbH
country: DE
admin-c: DM3738-RIPE
tech-c: HANO-RIPE
status: ASSIGNED PA
mnt-by: HANSENET-MNT
source: RIPE # Filtered

role: HanseNet Network Operators
address: Telefónica Germany GmbH & Co. OHG
address: Ueberseering 33a
address: D-22297 Hamburg
abuse-mailbox: abuse@o2.com
admin-c: CS8096-RIPE
tech-c: TG819-RIPE # Thomas Graumann
tech-c: SA1375-RIPE # Svend Andersen
tech-c: ASZ-RIPE # Andreas Schwarz
nic-hdl: HANO-RIPE
mnt-by: HANSENET-NOC
source: RIPE # Filtered

person: Danny Maack
address: Telefónica Germany GmbH & Co. OHG
address: Ueberseering 33 A
address: D-22297 Hamburg
address: GERMANY
phone: +49 40 237 26 0
fax-no: +49 40 237 26 3996
abuse-mailbox: abuse@o2.com
nic-hdl: DM3738-RIPE
mnt-by: HANSENET-MNT
source: RIPE # Filtered

% Information related to '213.191.64.0/19AS13184'

route: 213.191.64.0/19
descr: HANSENET
origin: AS13184
mnt-by: HANSENET-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.74.1 (DB-3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 116.10.191.165

Hi,

The IP 116.10.191.165 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 116.10.191.165:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '116.8.0.0 - 116.11.255.255'

inetnum: 116.8.0.0 - 116.11.255.255
netname: CHINANET-GX
descr: CHINANET Guangxi province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CR76-AP
tech-c: BD37-AP
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-GX
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20070322
source: APNIC

person: Bin Deng
nic-hdl: BD37-AP
e-mail: 18977164171@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2835112
fax-no: +86-771-2839278
country: CN
changed: rebecca@public.nn.gx.cn 20021023
changed: zhengzm@gsta.com 20140326
mnt-by: MAINT-CHINANET-GX
source: APNIC

person: Cailing Ruan
nic-hdl: CR76-AP
e-mail: 18977164171@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2815987
fax-no: +86-771-2839278
country: CN
changed: rebecca@public.nn.gx.cn 20021023
changed: zhengzm@gsta.com 20140326
mnt-by: MAINT-CHINANET-GX
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 195.230.113.7

Hi,

The IP 195.230.113.7 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 195.230.113.7:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '195.230.113.0 - 195.230.113.255'

% No abuse contact registered for 195.230.113.0 - 195.230.113.255

inetnum: 195.230.113.0 - 195.230.113.255
netname: DANEX-PL
descr: PPHU "DANEX" Danuta Tomaszczyk
country: PL
org: ORG-DA466-RIPE
admin-c: AT5617-RIPE
tech-c: AT5617-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: DANEX-MNT
mnt-by: NNET-MNT
mnt-routes: DANEX-MNT
mnt-routes: NNET-MNT
mnt-domains: DANEX-MNT
mnt-domains: NNET-MNT
source: RIPE # Filtered

organisation: ORG-DA466-RIPE
org-name: PPHU "DANEX" Danuta Tomaszczyk
org-type: OTHER
address: Lyskornia 99, 98-350 Biala, Poland
mnt-ref: NNET-MNT
mnt-by: NNET-MNT
source: RIPE # Filtered

person: Artur Tomaszczyk
address: BIALA
address: POLAND
phone: +48 697 483 958
mnt-by: DANEX-MNT
nic-hdl: AT5617-RIPE
source: RIPE # Filtered

% Information related to '195.230.113.0/24AS199550'

route: 195.230.113.0/24
descr: DANEX PROVIDING
origin: AS199550
mnt-by: DANEX-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.74.1 (DB-4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 212.103.189.125

Hi,

The IP 212.103.189.125 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 212.103.189.125:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '212.103.160.0 - 212.103.191.255'

% No abuse contact registered for 212.103.160.0 - 212.103.191.255

inetnum: 212.103.160.0 - 212.103.191.255
org: ORG-AFNC1-RIPE
netname: AFRINIC-NET-TRANSFERRED-20050223
descr: This network has been transferred to AFRINIC
remarks: These IP addresses are assigned in the AFRINIC region.
remarks: Authoritative registration information for this network
remarks: is available for query and modification in
remarks: the AFRINIC whois database: whois.afrinic.net or
remarks: web site: http://www.afrinic.net
remarks: The routing registry information (route(6) objects)
remarks: may be published in any Routing Registry, including
remarks: RIPE Whois Database
country: EU # country is really somewhere in African Region
admin-c: AFRI-RIPE
tech-c: AFRI-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-routes: RIPE-NCC-RPSL-MNT
source: RIPE # Filtered

organisation: ORG-AFNC1-RIPE
org-name: African Internet Numbers Registry
org-type: RIR
address: see http://www.afrinic.net
admin-c: AFRI-RIPE
tech-c: AFRI-RIPE
remarks: For more information on AFRINIC assigned blocks, use
remarks: AFRINIC's whois database, whois.afrinic.net.
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

role: The African Internet Numbers Registry
org: ORG-AFNC1-RIPE
address: AFRINIC, see http://www.afrinic.net
admin-c: AFRI-RIPE
tech-c: AFRI-RIPE
nic-hdl: AFRI-RIPE
remarks: For more information on AFRINIC assigned blocks, connect
remarks: to AFRINIC's whois database, whois.afrinic.net.
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

% Information related to '212.103.189.0/24AS8452'

route: 212.103.189.0/24
descr: GEGANET-LEASED-ALMAZA-189-ROUTE
origin: AS8452
mnt-by: TE-Data-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.74.1 (DB-4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 219.138.135.69

Hi,

The IP 219.138.135.69 has just been banned by Fail2Ban after
7 attempts against SSH.


Here are more information about 219.138.135.69:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '219.138.0.0 - 219.140.255.255'

inetnum: 219.138.0.0 - 219.140.255.255
netname: CHINANET-HB
descr: CHINANET hubei province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CHA1-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CN-CHINANET-HB
changed: hostmaster@ns.chinanet.cn.net 20020521
status: ALLOCATED NON-PORTABLE
source: APNIC

role: CHINANET HB ADMIN
address: 8th floor of JinGuang Building
address: #232 of Macao Road
address: HanKou Wuhan Hubei Province
address: P.R.China
country: CN
phone: +86 27 82862199
fax-no: +86 27 82861499
e-mail: hbadd@189.cn
remarks: send spam reports to hbadd@189.cn
remarks: and abuse reports to hbadd@189.cn
remarks: Please include detailed information and
remarks: times in GMT+8
admin-c: YZ83-AP
admin-c: ZC77-AP
tech-c: YZ83-AP
tech-c: ZC77-AP
nic-hdl: CHA1-AP
notify: hbadd@189.cn
mnt-by: MAINT-CN-CHINANET-HB
changed: zhangyl68@public.wh.hb.cn 20031114
changed: hm-changed@apnic.net 20111114
changed: zhengzm@gsta.com 20130806
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.174.50.213

Hi,

The IP 61.174.50.213 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 61.174.50.213:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.174.48.0 - 61.174.55.255'

inetnum: 61.174.48.0 - 61.174.55.255
netname: CHINANET-ZJ-HU
country: CN
descr: CHINANET-ZJ Huzhou node network
descr: Zhejiang Telecom
admin-c: CZ4-AP
tech-c: CH119-AP
mnt-irt: IRT-CHINANET-ZJ
status: ALLOCATED NON-PORTABLE
changed: 15325819758@189.cn 20111231
mnt-by: MAINT-CHINANET-ZJ
mnt-lower: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Huzhou
address: No.18 Hongqi Road,Huzhou,Zhejiang.313000
country: CN
phone: +86-572-2022163
fax-no: +86-572-2210609
e-mail: anti_spam@mail.huptt.zj.cn
remarks: send spam reports to anti_spam@mail.huptt.zj.cn
remarks: and abuse reports to anti_spam@mail.huptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH50-AP
tech-c: CH50-AP
nic-hdl: CH119-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

role: CHINANET ZHEJIANG
address: No. 257 Qingjiang Road, Hangzhou, Zhejiang.310066
country: CN
phone: +86-571-86821752
fax-no: +86-571-86988329
e-mail: antispam@dcb.hz.zj.cn
remarks: send spam reports to antispam@dcb.hz.zj.cn
remarks: and abuse reports to antispam@dcb.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CZ61-AP
tech-c: CZ61-AP
nic-hdl: CZ4-AP
mnt-by: MAINT-CHINANET-ZJ
changed: hjh@dcb.hz.zj.cn 20050914
source: APNIC
changed: hm-changed@apnic.net 20111114

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 193.107.16.206

Hi,

The IP 193.107.16.206 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 193.107.16.206:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '193.107.16.0 - 193.107.19.255'

% Abuse contact for '193.107.16.0 - 193.107.19.255' is 'ideal.solutions.org@gmail.com'

inetnum: 193.107.16.0 - 193.107.19.255
netname: IDEALSOLUTION
descr: Ideal Solution Ltd
country: SC
org: ORG-IS106-RIPE
admin-c: IS300-RIPE
tech-c: IS300-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: IDEAL-MNT
mnt-routes: IDEAL-MNT
mnt-domains: IDEAL-MNT
mnt-routes: RU-WEBALTA-MNT
mnt-routes: OCOM-MNT
source: RIPE # Filtered
sponsoring-org: ORG-ML245-RIPE

organisation: ORG-IS106-RIPE
org-name: Ideal Solution Ltd
org-type: OTHER
address: Sound & Vision House, Francis Rachel Str.
address: Victoria, Mahe, Seychelles
address: PO box 355
address: IP networks can be routed to different countries
remarks: emergency or sales contact in different language available
remarks:
remarks: Egypt contact (tel): (010) 428-71-91
remarks: Russia contact (tel/fax): (495) 540-43-24
remarks:
abuse-mailbox: ideal.solutions.org@gmail.com
abuse-c: IS300-RIPE
phone: +248 225521
mnt-ref: IDEAL-MNT
mnt-by: IDEAL-MNT
source: RIPE # Filtered

role: Ideal Solution NOC
address: Sound & Vision House, Francis Rachel Str.
address: Victoria, Mahe, Seychelles
remarks: ***************************************
remarks: This is Ideal-Solution.org and 2x4.RU Hosting IP network
remarks: - Shared and virtual hosting services
remarks: - Virtual and Dedicated Servers
remarks: - Adminstraion and programming
remarks: - Telecomunications
remarks: ***************************************
remarks: other information:
remarks: - nothing
remarks: ***************************************
remarks: in case of ABUSE or active issues please contact us
remarks: abuse/administrative email: ideal.solutions.org@gmail.com
remarks: ***************************************
phone: +248 225521
abuse-mailbox: ideal.solutions.org@gmail.com
admin-c: UDF669-RIPE
tech-c: UDF669-RIPE
mnt-by: IDEAL-MNT
nic-hdl: IS300-RIPE
source: RIPE # Filtered

% Information related to '193.107.16.0/24AS58001'

route: 193.107.16.0/24
descr: Ideal Solution
origin: AS58001
mnt-by: IDEAL-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.74.1 (DB-3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 222.186.24.237

Hi,

The IP 222.186.24.237 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 222.186.24.237:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '222.184.0.0 - 222.191.255.255'

inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your
remarks: organisation account name in the subject line.
changed: hm-changed@apnic.net 20040223
status: ALLOCATED PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban