[Fail2Ban] SSH: banned 91.121.105.20 from natural-breast-active.com

Hi,

The IP 91.121.105.20 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 91.121.105.20:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '91.121.64.0 - 91.121.127.255'

% Abuse contact for '91.121.64.0 - 91.121.127.255' is 'abuse@ovh.net'

inetnum: 91.121.64.0 - 91.121.127.255
netname: OVH
descr: OVH SAS
descr: Dedicated Servers
descr: http://www.ovh.com
country: FR
admin-c: OK217-RIPE
tech-c: OTC2-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
created: 2008-03-10T13:45:33Z
last-modified: 2008-03-10T13:45:33Z
source: RIPE

role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered

person: Octave Klaba
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
phone: +33 9 74 53 13 23
nic-hdl: OK217-RIPE
mnt-by: OVH-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-10-30T21:44:51Z
source: RIPE # Filtered

% Information related to '91.121.0.0/16AS16276'

route: 91.121.0.0/16
descr: OVH ISP
descr: Paris, France
origin: AS16276
mnt-by: OVH-MNT
created: 2007-10-16T17:33:02Z
last-modified: 2007-10-16T17:33:02Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 210.183.236.30 from natural-breast-active.com

Hi,

The IP 210.183.236.30 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 210.183.236.30:

[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 210.183.236.30


# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 210.183.96.0 - 210.183.255.255 (/17+/19)
기관명 : 주ì&lsqauo;íšŒì‚¬ 케이í&lsqauo;°
서비스명 : KORNET
주소 : 경기도 성남ì&lsqauo;œ 분ë&lsqauo;¹êµ¬ 불정로 90
우편번호 : 13606
í• ë&lsqauo;¹ì¼ìž : 19990220

이름 : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-500-6630
전자우편 : kornet_ip@kt.com

조회하ì&lsqauo;  IPv4주소ëŠ" 위의 관리대행자로부터 아래의 사용자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------


[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 210.183.236.0 - 210.183.236.127 (/25)
기관명 : (재)강릉과학산업진흥원정보문í™"사업ë&lsqauo;¨
네트워크 구분 : CUSTOMER
주소 : 강원도 강릉ì&lsqauo;œ 포남동
우편번호 : 210110
í• ë&lsqauo;¹ë‚´ì—­ ë"±ë¡ì¼ : 20161108

이름 : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-500-6631
전자우편 : kornet_ip@kt.com


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 210.183.96.0 - 210.183.255.255 (/17+/19)
Organization Name : Korea Telecom
Service Name : KORNET
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code : 13606
Registration Date : 19990220

Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 210.183.236.0 - 210.183.236.127 (/25)
Organization Name : (jae)gangreunggwahaksaneopjinheungwonjeongbomunhwasaeopdan
Network Type : CUSTOMER
Address : Ponam-Dong Gangreung-Si Gangwon-Do
Zip Code : 210110
Registration Date : 20161108

Name : IP Manager
Phone : +82-2-500-6631
E-Mail : kornet_ip@kt.com



- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 60.173.82.156 from natural-breast-active.com

Hi,

The IP 60.173.82.156 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 60.173.82.156:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '60.166.0.0 - 60.175.255.255'

% Abuse contact for '60.166.0.0 - 60.175.255.255' is 'anti-spam@ns.chinanet.cn.net'

inetnum: 60.166.0.0 - 60.175.255.255
netname: CHINANET-AH
descr: CHINANET anhui province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: JW89-AP
mnt-by: APNIC-HM
mnt-routes: MAINT-CHINANET-AH
mnt-lower: MAINT-CHINANET-AH
status: ALLOCATED PORTABLE
last-modified: 2015-08-26T01:28:01Z
source: APNIC
mnt-irt: IRT-CHINANET-CN

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC

person: Jinneng Wang
address: 17/F, Postal Building No.120 Changjiang
address: Middle Road, Hefei, Anhui, China
country: CN
phone: +86-551-2659073
fax-no: +86-551-2659287
e-mail: ahdata@189.cn
nic-hdl: JW89-AP
mnt-by: MAINT-CHINANET-AH
last-modified: 2014-02-21T01:19:43Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 130.162.74.189 from natural-breast-active.com

Hi,

The IP 130.162.74.189 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 130.162.74.189:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 130.162.74.189"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=130.162.74.189?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Oracle Corporation OC-260 (NET-130-162-0-0-1) 130.162.0.0 - 130.162.255.255
Oracle Public Cloud OC-260 (NET-130-162-0-0-2) 130.162.0.0 - 130.162.255.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 89.43.175.61 from natural-breast-active.com

Hi,

The IP 89.43.175.61 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 89.43.175.61:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '89.43.175.0 - 89.43.175.127'

% Abuse contact for '89.43.175.0 - 89.43.175.127' is 'abuse@ip.ro'

inetnum: 89.43.175.0 - 89.43.175.127
netname: DYNAMIC-TELECOM-SRL
descr: Dynamic Telecom SRL
descr: Calea Dorobantilor 168 Bl 15, Sc D, Ap 125
descr: Bucuresti Sector 1 Romania
country: ro
admin-c: CS5424-RIPE
tech-c: CS5424-RIPE
status: ASSIGNED PA
remarks: Registered through http://www.ip.ro/ip.html
mnt-by: RO-MNT
mnt-lower: RO-MNT
mnt-routes: ADN-MNT
created: 2015-01-28T12:18:00Z
last-modified: 2015-06-23T09:01:17Z
source: RIPE

person: CALIN SERBANESCU
address: SC Dynamic Telecom SRL
address: Calea Dorobantilor 168 Bl 15, Sc D, Ap 125
address: Bucuresti Sector 1
phone: +40212311061
nic-hdl: CS5424-RIPE
mnt-by: RO-MNT
created: 2007-03-20T06:42:11Z
last-modified: 2017-10-30T21:54:20Z
source: RIPE # Filtered

% Information related to '89.43.175.0/24AS42786'

route: 89.43.175.0/24
descr: DynamicTelecom
origin: AS42786
mnt-by: ADN-MNT
created: 2007-04-17T10:33:53Z
last-modified: 2007-04-17T10:33:53Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 37.228.129.14 from natural-breast-active.com

Hi,

The IP 37.228.129.14 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 37.228.129.14:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '37.228.128.0 - 37.228.129.255'

% Abuse contact for '37.228.128.0 - 37.228.129.255' is 'abuse@flokinet.is'

inetnum: 37.228.128.0 - 37.228.129.255
netname: SC-FLOKINET-LTD-20120410
country: SC
org: ORG-FL176-RIPE
admin-c: KW2939-RIPE
tech-c: KW2939-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: sc-flokinet-ltd-1-mnt
created: 2017-03-23T15:50:51Z
last-modified: 2017-03-23T15:50:51Z
source: RIPE

organisation: ORG-FL176-RIPE
org-name: Flokinet Ltd
org-type: LIR
address: Suite Number 2, Olivier Maradan Building, Olivier Maradan St
address: NA
address: Victoria
address: SEYCHELLES
admin-c: KW2939-RIPE
tech-c: KW2939-RIPE
abuse-c: AR37432-RIPE
mnt-ref: sc-flokinet-ltd-1-mnt
mnt-by: RIPE-NCC-HM-MNT
mnt-by: sc-flokinet-ltd-1-mnt
created: 2016-08-26T07:19:06Z
last-modified: 2018-03-15T11:19:44Z
source: RIPE # Filtered
phone: +40734325073

person: FlokiNET Ltd
address: Suite Number 2, Olivier Maradan Building, Olivier Maradan St
address: NA
address: Victoria
address: Seychelles
phone: +40734325073
nic-hdl: KW2939-RIPE
mnt-by: sc-flokinet-ltd-1-mnt
created: 2016-08-26T07:19:06Z
last-modified: 2017-11-15T09:46:24Z
source: RIPE

% Information related to '37.228.129.0/24AS200651'

route: 37.228.129.0/24
origin: AS200651
mnt-by: sc-flokinet-ltd-1-mnt
mnt-by: FlokiNET
created: 2017-07-12T16:07:13Z
last-modified: 2017-07-12T16:07:13Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 60.32.118.131 from natural-breast-active.com

Hi,

The IP 60.32.118.131 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 60.32.118.131:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '60.32.0.0 - 60.47.255.255'

% Abuse contact for '60.32.0.0 - 60.47.255.255' is 'hostmaster@nic.ad.jp'

inetnum: 60.32.0.0 - 60.47.255.255
netname: OCN
descr: NTT Communications Corporation
descr: 1-6 Uchisaiwai-cho 1-chome Chiyoda-ku, Tokyo 100-8019 Japan
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
status: ALLOCATED PORTABLE
remarks: Email address for spam or abuse complaints : abuse@ocn.ad.jp
mnt-by: MAINT-JPNIC
mnt-irt: IRT-JPNIC-JP
mnt-lower: MAINT-JPNIC
last-modified: 2015-12-01T22:33:22Z
source: APNIC

irt: IRT-JPNIC-JP
address: Urbannet-Kanda Bldg 4F, 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047, Japan
e-mail: hostmaster@nic.ad.jp
abuse-mailbox: hostmaster@nic.ad.jp
admin-c: JNIC1-AP
tech-c: JNIC1-AP
auth: # Filtered
mnt-by: MAINT-JPNIC
last-modified: 2017-10-18T10:21:54Z
source: APNIC

role: Japan Network Information Center
address: Urbannet-Kanda Bldg 4F
address: 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047,Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: hostmaster@nic.ad.jp
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
last-modified: 2012-08-28T07:58:02Z
source: APNIC

% Information related to '60.32.118.128 - 60.32.118.135'

inetnum: 60.32.118.128 - 60.32.118.135
netname: DSK-KOWA-IP8
descr: Densan System Co.,Ltd.
country: JP
admin-c: JP00153182
tech-c: JP00153182
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: apnic-ftp@nic.ad.jp 20170927
source: JPNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 128.173.8.242 from natural-breast-active.com

Hi,

The IP 128.173.8.242 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 128.173.8.242:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 128.173.8.242"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=128.173.8.242?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 128.173.0.0 - 128.173.255.255
CIDR: 128.173.0.0/16
NetName: VA-TECH
NetHandle: NET-128-173-0-0-1
Parent: NET128 (NET-128-0-0-0-0)
NetType: Direct Assignment
OriginAS: AS1312
Organization: Virginia Polytechnic Institute and State Univ. (VPISU)
RegDate: 1986-10-20
Updated: 2010-04-20
Comment: DMCA and copyright complaints to DMCA@vt.edu.
Ref: https://whois.arin.net/rest/net/NET-128-173-0-0-1


OrgName: Virginia Polytechnic Institute and State Univ.
OrgId: VPISU
Address: Communications Network Services
Address: 1770 Forecast Dr
City: Blacksburg
StateProv: VA
PostalCode: 24061-0506
Country: US
RegDate: 1993-09-22
Updated: 2017-01-28
Comment: DMCA and copyright complaints to DMCA@vt.edu.
Ref: https://whois.arin.net/rest/org/VPISU


OrgNOCHandle: VTOC-ARIN
OrgNOCName: Virginia Tech Operations Center
OrgNOCPhone: +1-540-231-6780
OrgNOCEmail: noc@cns.vt.edu
OrgNOCRef: https://whois.arin.net/rest/poc/VTOC-ARIN

OrgTechHandle: PB123-ARIN
OrgTechName: Benchoff, Phil
OrgTechPhone: +1-540-231-6460
OrgTechEmail: benchoff@vt.edu
OrgTechRef: https://whois.arin.net/rest/poc/PB123-ARIN

OrgAbuseHandle: ABUSE44-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-540-231-9500
OrgAbuseEmail: abuse@vt.edu
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE44-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 79.124.60.132 from natural-breast-active.com

Hi,

The IP 79.124.60.132 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 79.124.60.132:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '79.124.60.128 - 79.124.60.159'

% Abuse contact for '79.124.60.128 - 79.124.60.159' is 'noc@4vendeta.com'

inetnum: 79.124.60.128 - 79.124.60.159
netname: Laado-Raani-Private-Housing-Space
descr: VenomDC - Private Internet Space.
remarks: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
remarks: ! Venom-DC take ABUSE seriously & don't allow illegal activities, !
remarks: ! hacking, botnets , spam or other malicious use....................... !
remarks: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
country: BG
admin-c: SLR73-RIPE
tech-c: SLR73-RIPE
status: ASSIGNED PA
mnt-by: Tamatiya
mnt-by: MNT-LIR-BG
created: 2017-04-06T14:58:33Z
last-modified: 2017-04-06T14:58:33Z
source: RIPE

person: S. Laad Raani
address: Global Gateway 8, Neverland Complex Perle, Mahe - Seychelles
phone: +248-487-4991
nic-hdl: SLR73-RIPE
mnt-by: Tamatiya
created: 2016-06-16T14:44:24Z
last-modified: 2017-10-30T23:16:44Z
source: RIPE # Filtered

% Information related to '79.124.60.0/24AS50360'

route: 79.124.60.0/24
origin: AS50360
mnt-by: TAMATYA-MNT
created: 2014-11-20T08:24:17Z
last-modified: 2017-08-23T09:08:15Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 201.155.194.157 from natural-breast-active.com

Hi,

The IP 201.155.194.157 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 201.155.194.157:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2018-05-06 00:52:24 (BRT -03:00)

inetnum: 201.155.194/24
status: reassigned
owner: Gestión de direccionamiento UniNet
ownerid: MX-GDUN-LACNIC
responsible: Gestión de cambios y configuraciones
address: Periferico Sur, 3190,
address: 01900 - México DF - CX
country: MX
phone: +52 55 56244400 []
owner-c: DCA
tech-c: DCA
abuse-c: SRU
created: 20070921
changed: 20120901
inetnum-up: 201.152/14

nic-hdl: DCA
person: GESTION DE CAMBIOS
e-mail: gccips1@REDUNO.COM.MX
address: PERIFERICO SUR, 3190, ALVARO OBREG
address: 01900 - MEXICO DF - CX
country: MX
phone: +52 5 556244400 []
created: 20021210
changed: 20170107

nic-hdl: SRU
person: SEGURIDAD DE RED UNINET
e-mail: abuse@UNINET.NET.MX
address: PERIFERICO SUR, 3190, ALVARO OBREG
address: 01900 - MEXICO - CX
country: MX
phone: +52 55 52237234 []
created: 20030701
changed: 20170107

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 109.238.53.67 from natural-breast-active.com

Hi,

The IP 109.238.53.67 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 109.238.53.67:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '109.238.53.64 - 109.238.53.95'

% Abuse contact for '109.238.53.64 - 109.238.53.95' is 'abuse@solido.net'

inetnum: 109.238.53.64 - 109.238.53.95
netname: SERVERNET21-2
descr: Various servers
country: DK
admin-c: SOL17-RIPE
tech-c: SOL18-RIPE
status: ASSIGNED PA
mnt-by: MNT-SOLIDO
created: 2014-10-06T12:46:31Z
last-modified: 2014-10-06T12:46:31Z
source: RIPE

role: SOLIDO ADMINS
address: Smedeland 32
address: DK-2600 Glostrup
address: Denmark
admin-c: CH1862-RIPE
admin-c: RSH18-RIPE
abuse-mailbox: abuse@solido.net
tech-c: CH1862-RIPE
tech-c: RSH18-RIPE
nic-hdl: SOL17-RIPE
mnt-by: MNT-SOLIDO
created: 2011-01-07T10:21:09Z
last-modified: 2018-03-09T12:51:46Z
source: RIPE # Filtered

role: SOLIDO TECH
address: Smedeland 32
address: DK-2600 Glostrup
address: Denmark
admin-c: CH1862-RIPE
admin-c: MV11521-RIPE
admin-c: RSH18-RIPE
tech-c: CH1862-RIPE
tech-c: MV11521-RIPE
tech-c: RSH18-RIPE
nic-hdl: SOL18-RIPE
mnt-by: MNT-SOLIDO
created: 2011-01-07T10:25:36Z
last-modified: 2017-03-01T06:38:32Z
source: RIPE # Filtered

% Information related to '109.238.53.0/24AS12617'

route: 109.238.53.0/24
descr: Solido Hosting A/S
origin: AS12617
mnt-by: MNT-SOLIDO-NET
mnt-by: MNT-SOLIDO
created: 2017-07-18T08:34:01Z
last-modified: 2017-07-18T08:34:01Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 93.90.167.66 from natural-breast-active.com

Hi,

The IP 93.90.167.66 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 93.90.167.66:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '93.90.167.0 - 93.90.167.255'

% Abuse contact for '93.90.167.0 - 93.90.167.255' is 'abuse@vodafone.cz'

inetnum: 93.90.167.0 - 93.90.167.255
netname: VFCZ-V2-INTERNET-ACCESSS-SB-1
descr: Vodafone Czech Republic a.s.
descr: Prague
country: CZ
admin-c: OSKR-RIPE
tech-c: OSKR-RIPE
status: ASSIGNED PA
mnt-by: VFCZ-MNT
created: 2010-02-18T09:05:26Z
last-modified: 2010-02-18T09:05:26Z
source: RIPE

role: OSKAR LIR
address: Vodafone Czech Republic a.s.
address: namesti Junkovych 2
address: Praha 5
address: 15500
address: Czech Republic
phone: +420 271 171 626
fax-no: +420 776 971 912
admin-c: PG596-RIPE
tech-c: PG596-RIPE
tech-c: BL54-RIPE
tech-c: JR3843-RIPE
tech-c: PM9785-RIPE
tech-c: PH4124-RIPE
tech-c: DH17-RIPE
abuse-mailbox: abuse@vodafone.cz
mnt-by: VFCZ-MNT
nic-hdl: OSKR-RIPE
created: 2002-03-22T08:52:34Z
last-modified: 2016-12-02T09:02:23Z
source: RIPE # Filtered

% Information related to '93.90.160.0/20AS16019'

route: 93.90.160.0/20
descr: Vodafone Czech Republic a.s.
origin: AS16019
mnt-by: VFCZ-MNT
created: 2015-10-12T09:59:43Z
last-modified: 2015-10-12T09:59:43Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.38.121.17 from natural-breast-active.com

Hi,

The IP 218.38.121.17 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 218.38.121.17:

[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 218.38.121.17


# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 218.38.0.0 - 218.39.255.255 (/15)
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
서비스명 : broadNnet
주소 : 서울특별ì&lsqauo;œ ì¤'구 퇴계로 24
우편번호 : 04637
í• ë&lsqauo;¹ì¼ìž : 20021218

이름 : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-106-2
전자우편 : ip-adm@skbroadband.com

--------------------------------------------------------------------------------

조회하ì&lsqauo;  IPv4주소에 대한 위 관리대행자의 사용자 í• ë&lsqauo;¹ì •ë³´ê°€ 존재하지 않습ë&lsqauo;ˆë&lsqauo;¤.


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 218.38.0.0 - 218.39.255.255 (/15)
Organization Name : SK Broadband Co Ltd
Service Name : broadNnet
Address : Seoul Jung-gu Toegye-ro 24
Zip Code : 04637
Registration Date : 20021218

Name : IP Manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com



- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 199.119.170.166 from natural-breast-active.com

Hi,

The IP 199.119.170.166 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 199.119.170.166:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 199.119.170.166"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=199.119.170.166?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 199.119.168.0 - 199.119.175.255
CIDR: 199.119.168.0/21
NetName: TOTELCSI
NetHandle: NET-199-119-168-0-1
Parent: NET199 (NET-199-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS32758
Organization: TotelCSI (TOTAH-1)
RegDate: 2011-05-11
Updated: 2012-02-24
Ref: https://whois.arin.net/rest/net/NET-199-119-168-0-1


OrgName: TotelCSI
OrgId: TOTAH-1
Address: Totah Telephone Company
Address: P.O. Box 300
City: Ochelata
StateProv: OK
PostalCode: 74051-0300
Country: US
RegDate: 2010-11-19
Updated: 2017-02-14
Comment: http://www.totelcsi.net/
Ref: https://whois.arin.net/rest/org/TOTAH-1


OrgAbuseHandle: FEN7-ARIN
OrgAbuseName: Finley Engineering NOC
OrgAbusePhone: +1-952-223-8075
OrgAbuseEmail: m.ockenga@fecinc.com
OrgAbuseRef: https://whois.arin.net/rest/poc/FEN7-ARIN

OrgNOCHandle: DHA95-ARIN
OrgNOCName: Harper, Dusty
OrgNOCPhone: +1-918-535-2208
OrgNOCEmail: dusty@totelcsi.com
OrgNOCRef: https://whois.arin.net/rest/poc/DHA95-ARIN

OrgNOCHandle: FEN7-ARIN
OrgNOCName: Finley Engineering NOC
OrgNOCPhone: +1-952-223-8075
OrgNOCEmail: m.ockenga@fecinc.com
OrgNOCRef: https://whois.arin.net/rest/poc/FEN7-ARIN

OrgTechHandle: AMA133-ARIN
OrgTechName: Marshack, Adam
OrgTechPhone: +1-918-535-2701
OrgTechEmail: amarsheck@totelcsi.com
OrgTechRef: https://whois.arin.net/rest/poc/AMA133-ARIN

OrgAbuseHandle: DHA95-ARIN
OrgAbuseName: Harper, Dusty
OrgAbusePhone: +1-918-535-2208
OrgAbuseEmail: dusty@totelcsi.com
OrgAbuseRef: https://whois.arin.net/rest/poc/DHA95-ARIN

OrgTechHandle: FEN7-ARIN
OrgTechName: Finley Engineering NOC
OrgTechPhone: +1-952-223-8075
OrgTechEmail: m.ockenga@fecinc.com
OrgTechRef: https://whois.arin.net/rest/poc/FEN7-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 85.214.198.38 from natural-breast-active.com

Hi,

The IP 85.214.198.38 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 85.214.198.38:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '85.214.192.0 - 85.214.255.255'

% Abuse contact for '85.214.192.0 - 85.214.255.255' is 'abuse@strato.de'

inetnum: 85.214.192.0 - 85.214.255.255
netname: STRATO-RZG-DEDI
org: ORG-SRA1-RIPE
descr: Strato Rechenzentrum, Berlin
country: DE
admin-c: SRDS-RIPE
tech-c: SRDS-RIPE
remarks: ************************************************************
remarks: * Please send abuse complaints to abuse-server@strato.de *
remarks: * or fax +49-30-88615-755 ONLY. *
remarks: * Abuse reports to other e-mail addresses will be ignored. *
remarks: ************************************************************
status: ASSIGNED PA
mnt-by: STRATO-RZG-MNT
created: 2010-01-15T09:15:16Z
last-modified: 2013-07-06T09:34:26Z
source: RIPE

organisation: ORG-SRA1-RIPE
org-name: Strato AG
org-type: LIR
address: Pascalstrasse 10
address: 10587
address: Berlin
address: GERMANY
phone: +4930398020
fax-no: +493039802222
admin-c: CHSE-RIPE
admin-c: CM265-RIPE
abuse-c: SRAC-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: STRATO-RZG-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: STRATO-RZG-MNT
created: 2004-04-17T11:12:39Z
last-modified: 2017-10-30T14:45:27Z
source: RIPE # Filtered

role: RIPE contact Dedicated Server
address: STRATO AG
address: Pascalstr. 10
address: D-10587 Berlin
address: Germany
phone: +49 30 39802-0
org: ORG-SRA1-RIPE
abuse-mailbox: abuse-server@strato.de
admin-c: XX1-RIPE
tech-c: CHSE-RIPE
nic-hdl: SRDS-RIPE
remarks: ************************************************************
remarks: * Please send abuse complaints to abuse-server@strato.de *
remarks: * or fax +49-30-88615-755 ONLY. *
remarks: * Abuse reports to other e-mail addresses will be ignored. *
remarks: * *
remarks: * For peering requests or operational issues please look *
remarks: * at the information in the AS6724 RIPE database object. *
remarks: ************************************************************
mnt-by: STRATO-RZG-MNT
created: 2010-01-15T08:35:31Z
last-modified: 2013-10-14T08:04:17Z
source: RIPE # Filtered

% Information related to '85.214.198.0/24AS6724'

route: 85.214.198.0/24
descr: STRATO AG
descr: prefix only advertised in case of DDoS
origin: AS6724
mnt-by: STRATO-RZG-MNT
created: 2014-02-18T16:19:38Z
last-modified: 2014-02-18T16:19:38Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 143.233.226.77 from natural-breast-active.com

Hi,

The IP 143.233.226.77 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 143.233.226.77:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '143.233.0.0 - 143.233.255.255'

% Abuse contact for '143.233.0.0 - 143.233.255.255' is 'noc@ariadne-t.gr'

inetnum: 143.233.0.0 - 143.233.255.255
netname: Ariadne-t_Network
descr: Greek Academic & Research Computer Network
descr: NCSR Demokritos
descr: 153 10, Agia Paraskevi
descr: Athens, GREECE
country: GR
org: ORG-NCOS1-RIPE
admin-c: AN1558-RIPE
tech-c: AN1558-RIPE
tech-c: PT81
status: LEGACY
remarks: #################################
remarks: # For complaints of ABUSE e-mail to
remarks: # abuse@ariadne-t.gr
remarks: #################################
remarks: rev-srv: isosun.ariadne-t.gr
remarks: rev-srv: ns1.demokitos.gr
remarks: rev-srv: achilles.noc.ntua.gr
remarks: rev-srv: nic.grnet.gr
remarks: rev-srv: ns0.ja.net
mnt-by: RIPE-NCC-LEGACY-MNT
mnt-by: AS2546-MNT
mnt-domains: AS2546-MNT
mnt-routes: AS2546-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2016-07-29T07:36:16Z
source: RIPE # Filtered

organisation: ORG-NCOS1-RIPE
org-name: National Center of Scientific Research DEMOKRITOS
org-type: LIR
address: P.Grigoriou E and Neapoleos
address: 15310
address: Aghia Paraskevi
address: GREECE
admin-c: YC1100-RIPE
tech-c: YC1100-RIPE
abuse-c: AR37119-RIPE
mnt-ref: gr-demokritos-ariadne-1-mnt
mnt-by: RIPE-NCC-HM-MNT
mnt-by: gr-demokritos-ariadne-1-mnt
created: 2016-07-28T13:46:57Z
last-modified: 2017-06-07T15:00:56Z
source: RIPE # Filtered
phone: +30 210 6503125
fax-no: +30 210 6543615

role: Ariadne-t NOC
address: Ariadne-t Network
address: NCSR Demokritos
address: 153 10, Agia Paraskevi
address: Athens, GREECE
phone: +30 210 6503125
phone: +30 210 6544279
phone: +30 210 6513392
fax-no: +30 210 6543606
admin-c: YC50-RIPE
tech-c: KM1706-RIPE
mnt-by: AS2546-MNT
nic-hdl: AN1558-RIPE
created: 2004-12-21T10:02:40Z
last-modified: 2004-12-23T12:44:58Z
source: RIPE # Filtered

person: Panagiotis Telonis
address: Division of Applied Technologies (DAT)
address: NCSR Demokritos
address: 153 10, Agia Paraskevi
address: Athens, GREECE
phone: +30 210 6541172
phone: +30 210 6503144
fax-no: +30 210 6532910
nic-hdl: PT81
mnt-by: AS2546-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2004-12-21T16:31:06Z
source: RIPE # Filtered

% Information related to '143.233.0.0/16AS2546'

route: 143.233.0.0/16
descr: Ariadne-t Network
origin: AS2546
mnt-by: AS2546-MNT
mnt-routes: AS2546-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2004-12-23T12:44:03Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 201.73.149.66 from natural-breast-active.com

Hi,

The IP 201.73.149.66 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 201.73.149.66:

[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2018-05-06 00:01:51 (-03 -03:00)

% Permission denied. For more information, contact abuse@registro.br

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 166.62.89.14 from natural-breast-active.com

Hi,

The IP 166.62.89.14 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 166.62.89.14:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 166.62.89.14"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=166.62.89.14?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 166.62.0.0 - 166.62.127.255
CIDR: 166.62.0.0/17
NetName: GO-DADDY-COM-LLC
NetHandle: NET-166-62-0-0-1
Parent: NET166 (NET-166-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS26496
Organization: GoDaddy.com, LLC (GODAD)
RegDate: 2012-11-14
Updated: 2014-02-25
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: https://whois.arin.net/rest/net/NET-166-62-0-0-1


OrgName: GoDaddy.com, LLC
OrgId: GODAD
Address: 14455 N Hayden Road
Address: Suite 226
City: Scottsdale
StateProv: AZ
PostalCode: 85260
Country: US
RegDate: 2007-06-01
Updated: 2014-09-10
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: https://whois.arin.net/rest/org/GODAD


OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com
OrgNOCRef: https://whois.arin.net/rest/poc/NOC124-ARIN

OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com
OrgTechRef: https://whois.arin.net/rest/poc/NOC124-ARIN

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE51-ARIN

RNOCHandle: NOC124-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-480-505-8809
RNOCEmail: noc@godaddy.com
RNOCRef: https://whois.arin.net/rest/poc/NOC124-ARIN

RTechHandle: NOC124-ARIN
RTechName: Network Operations Center
RTechPhone: +1-480-505-8809
RTechEmail: noc@godaddy.com
RTechRef: https://whois.arin.net/rest/poc/NOC124-ARIN

RAbuseHandle: ABUSE51-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-480-624-2505
RAbuseEmail: abuse@godaddy.com
RAbuseRef: https://whois.arin.net/rest/poc/ABUSE51-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 68.105.181.140 from natural-breast-active.com

Hi,

The IP 68.105.181.140 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 68.105.181.140:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 68.105.181.140"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=68.105.181.140?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Cox Communications Inc. COX-ATLANTA-2 (NET-68-96-0-0-1) 68.96.0.0 - 68.111.255.255
Cox Communications Inc. NETBLK-BR-DSG-68-105-176-0 (NET-68-105-176-0-1) 68.105.176.0 - 68.105.191.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 54.37.158.40 from natural-breast-active.com

Hi,

The IP 54.37.158.40 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 54.37.158.40:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '54.37.156.0 - 54.37.159.255'

% Abuse contact for '54.37.156.0 - 54.37.159.255' is 'abuse@ovh.net'

inetnum: 54.37.156.0 - 54.37.159.255
netname: VPS-GRA4
country: FR
org: ORG-OS3-RIPE
admin-c: OTC2-RIPE
tech-c: OTC2-RIPE
status: LEGACY
mnt-by: OVH-MNT
created: 2017-11-24T09:10:31Z
last-modified: 2017-11-24T09:10:31Z
source: RIPE

organisation: ORG-OS3-RIPE
org-name: OVH SAS
org-type: LIR
address: 2 rue Kellermann
address: 59100
address: Roubaix
address: FRANCE
phone: +33972101007
abuse-c: AR15333-RIPE
admin-c: OTC2-RIPE
admin-c: OK217-RIPE
admin-c: GM84-RIPE
mnt-ref: OVH-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: OVH-MNT
created: 2004-04-17T11:23:17Z
last-modified: 2017-10-30T14:40:06Z
source: RIPE # Filtered

role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered

% Information related to '54.37.0.0/16AS16276'

route: 54.37.0.0/16
origin: AS16276
mnt-by: OVH-MNT
created: 2017-10-06T07:58:00Z
last-modified: 2017-10-06T07:58:00Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 89.40.126.4 from natural-breast-active.com

Hi,

The IP 89.40.126.4 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 89.40.126.4:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '89.40.126.0 - 89.40.126.255'

% Abuse contact for '89.40.126.0 - 89.40.126.255' is 'abuse@staff.aruba.it'

inetnum: 89.40.126.0 - 89.40.126.255
geoloc: 50.10 8.70
netname: CLOUD-DE
descr: Cloud Services DC05
country: DE
admin-c: SS936-RIPE
tech-c: AN3450-RIPE
status: ASSIGNED PA
mnt-by: ARUBA-MNT
mnt-lower: ARUBA-MNT
mnt-routes: XANDMAIL-MNT
created: 2016-03-31T13:37:32Z
last-modified: 2016-03-31T13:37:32Z
source: RIPE

role: ARUBA NOC
address: Aruba S.p.A.
address: via S.Clemente 53
address: 24036 Ponte San Pietro (BG)
address: Italy
abuse-mailbox: abuse@staff.aruba.it
admin-c: SS936-RIPE
tech-c: SC279-RIPE
nic-hdl: AN3450-RIPE
mnt-by: ARUBA-MNT
created: 2008-11-19T19:02:34Z
last-modified: 2017-11-15T08:13:57Z
source: RIPE # Filtered

person: Susanna Santini
address: Aruba S.p.A.
address: Via S.Clemente, 53
address: 24036 Ponte San Pietro (BG)
phone: +39 0575 0505
fax-no: +39 0575 862000
nic-hdl: SS936-RIPE
mnt-by: ARUBA-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-11-15T08:14:40Z
source: RIPE # Filtered

% Information related to '89.40.124.0/22AS200185'

route: 89.40.124.0/22
descr: Aruba GmbH Cloud Network DC05
origin: AS200185
mnt-by: ARUBA-MNT
created: 2016-03-25T09:05:19Z
last-modified: 2016-03-25T09:05:19Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 207.58.210.251 from natural-breast-active.com

Hi,

The IP 207.58.210.251 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 207.58.210.251:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 207.58.210.251"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=207.58.210.251?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Fidelity Access Networks, LLC FIDELITY-002 (NET-207-58-192-0-1) 207.58.192.0 - 207.58.255.255
Com Resource NET-219CC (NET-207-58-210-224-1) 207.58.210.224 - 207.58.210.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 81.169.129.14 from natural-breast-active.com

Hi,

The IP 81.169.129.14 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 81.169.129.14:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '81.169.128.0 - 81.169.143.255'

% Abuse contact for '81.169.128.0 - 81.169.143.255' is 'abuse@strato.de'

inetnum: 81.169.128.0 - 81.169.143.255
netname: STRATO-RZG-DED
org: ORG-SRA1-RIPE
descr: Strato Rechenzentrum, Berlin
country: DE
admin-c: SRDS-RIPE
tech-c: SRDS-RIPE
remarks: ************************************************************
remarks: * Please send abuse complaints to abuse-server@strato.de *
remarks: * or fax +49-30-88615-755 ONLY. *
remarks: * Abuse reports to other e-mail addresses will be ignored. *
remarks: ************************************************************
status: ASSIGNED PA
mnt-by: STRATO-RZG-MNT
created: 2004-01-02T16:53:00Z
last-modified: 2013-07-06T09:34:25Z
source: RIPE

organisation: ORG-SRA1-RIPE
org-name: Strato AG
org-type: LIR
address: Pascalstrasse 10
address: 10587
address: Berlin
address: GERMANY
phone: +4930398020
fax-no: +493039802222
admin-c: CHSE-RIPE
admin-c: CM265-RIPE
abuse-c: SRAC-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: STRATO-RZG-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: STRATO-RZG-MNT
created: 2004-04-17T11:12:39Z
last-modified: 2017-10-30T14:45:27Z
source: RIPE # Filtered

role: RIPE contact Dedicated Server
address: STRATO AG
address: Pascalstr. 10
address: D-10587 Berlin
address: Germany
phone: +49 30 39802-0
org: ORG-SRA1-RIPE
abuse-mailbox: abuse-server@strato.de
admin-c: XX1-RIPE
tech-c: CHSE-RIPE
nic-hdl: SRDS-RIPE
remarks: ************************************************************
remarks: * Please send abuse complaints to abuse-server@strato.de *
remarks: * or fax +49-30-88615-755 ONLY. *
remarks: * Abuse reports to other e-mail addresses will be ignored. *
remarks: * *
remarks: * For peering requests or operational issues please look *
remarks: * at the information in the AS6724 RIPE database object. *
remarks: ************************************************************
mnt-by: STRATO-RZG-MNT
created: 2010-01-15T08:35:31Z
last-modified: 2013-10-14T08:04:17Z
source: RIPE # Filtered

% Information related to '81.169.129.0/24AS6724'

route: 81.169.129.0/24
descr: STRATO AG
descr: prefix only advertised in case of DDoS
origin: AS6724
mnt-by: STRATO-RZG-MNT
created: 2014-02-18T16:19:01Z
last-modified: 2014-02-18T16:19:01Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 45.40.138.145 from natural-breast-active.com

Hi,

The IP 45.40.138.145 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 45.40.138.145:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 45.40.138.145"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=45.40.138.145?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 45.40.128.0 - 45.40.191.255
CIDR: 45.40.128.0/18
NetName: GO-DADDY-COM-LLC
NetHandle: NET-45-40-128-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS26496
Organization: GoDaddy.com, LLC (GODAD)
RegDate: 2015-02-13
Updated: 2015-02-13
Ref: https://whois.arin.net/rest/net/NET-45-40-128-0-1


OrgName: GoDaddy.com, LLC
OrgId: GODAD
Address: 14455 N Hayden Road
Address: Suite 226
City: Scottsdale
StateProv: AZ
PostalCode: 85260
Country: US
RegDate: 2007-06-01
Updated: 2014-09-10
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: https://whois.arin.net/rest/org/GODAD


OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com
OrgTechRef: https://whois.arin.net/rest/poc/NOC124-ARIN

OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com
OrgNOCRef: https://whois.arin.net/rest/poc/NOC124-ARIN

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE51-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 187.16.44.108 from natural-breast-active.com

Hi,

The IP 187.16.44.108 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 187.16.44.108:

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2018-05-05 22:38:29 (-03 -03:00)

% Permission denied. For more information, contact abuse@registro.br

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 81.196.9.26 from natural-breast-active.com

Hi,

The IP 81.196.9.26 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 81.196.9.26:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '81.196.8.0 - 81.196.9.255'

% Abuse contact for '81.196.8.0 - 81.196.9.255' is 'abuse@rcs-rds.ro'

inetnum: 81.196.8.0 - 81.196.9.255
netname: RO-RCS-RDS
descr: RCS & RDS Business
descr: City: Bucuresti
remarks: INFRA-AW
country: RO
admin-c: RDS-RIPE
tech-c: RDS-RIPE
tech-c: RDS2012-RIPE
status: ASSIGNED PA
mnt-by: AS8708-MNT
mnt-lower: AS8708-MNT
created: 2012-11-09T15:58:29Z
last-modified: 2013-10-03T10:49:10Z
source: RIPE # Filtered

role: RCS & RDS NOC
address: 75 Dr. Staicovici
address: Bucharest / ROMANIA
phone: +40 314 004 440
fax-no: +40 314 004 441
abuse-mailbox: abuse@rcs-rds.ro
admin-c: GEPU1-RIPE
admin-c: VIG10-RIPE
tech-c: GEPU1-RIPE
tech-c: VIG10-RIPE
nic-hdl: RDS-RIPE
mnt-by: AS8708-MNT
remarks: +--------------------------------------------------------------+
remarks: | ABUSE CONTACT: abuse@rcs-rds.ro IN CASE OF HACK ATTACKS, |
remarks: | ILLEGAL ACTIVITY, VIOLATION, SCANS, PROBES, SPAM, ETC. |
remarks: | !! PLEASE DO NOT CONTACT OTHER PERSONS FOR THESE PROBLEMS !! |
remarks: +--------------------------------------------------------------+
created: 1970-01-01T00:00:00Z
last-modified: 2017-07-20T12:31:46Z
source: RIPE # Filtered

role: RCS RDS
address: 71-75 Dr. Staicovici
address: Bucharest / ROMANIA
phone: +40 21 30 10 888
fax-no: +40 21 30 10 892
abuse-mailbox: abuse@rcs-rds.ro
admin-c: GEPU1-RIPE
tech-c: GEPU1-RIPE
nic-hdl: RDS2012-RIPE
mnt-by: RDS-MNT
remarks: +------------------------------------------------------------+
remarks: | Please use ABUSE@RCS-RDS.RO for complaints and only after |
remarks: | you have tried contacting directly our customers according |
remarks: | to the details registered in RIPE database. |
remarks: +------------------------------------------------------------+
remarks: | DO NOT CALL, FAX, OR CONTACT US BY ANY OTHER MEANS EXCEPT |
remarks: | abuse@rcs-rds.ro |
remarks: +------------------------------------------------------------+
created: 2012-01-24T08:33:39Z
last-modified: 2013-05-11T03:16:10Z
source: RIPE # Filtered

% Information related to '81.196.0.0/16AS8708'

route: 81.196.0.0/16
descr: RDSNET
origin: AS8708
mnt-by: AS8708-MNT
created: 2017-06-15T08:33:59Z
last-modified: 2017-06-16T09:35:15Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 14.139.241.162 from natural-breast-active.com

Hi,

The IP 14.139.241.162 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 14.139.241.162:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '14.139.241.160 - 14.139.241.175'

% Abuse contact for '14.139.241.160 - 14.139.241.175' is 'rdvvcc1@rediffmail.com'

inetnum: 14.139.241.160 - 14.139.241.175
netname: NKN-RDV-MP
descr: Rani Duragavati Vishwavidyalya, jabalpur
country: IN
admin-c: NNA22-AP
tech-c: SAKG1-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-RSMANI-NKN-IN
mnt-irt: IRT-NKN-RDV-MP
last-modified: 2015-07-24T10:25:55Z
source: APNIC

irt: IRT-NKN-RDV-MP
address: RDV Jabalpur
address: Saraswati Vihar, Pachpedi, Jabalpur,
address: MP-482001
e-mail: rdvvcc1@rediffmail.com
abuse-mailbox: rdvvcc1@rediffmail.com
admin-c: NNA22-AP
tech-c: SAKG1-AP
auth: # Filtered
mnt-by: MAINT-RSMANI-NKN-IN
last-modified: 2015-07-24T10:21:41Z
source: APNIC

role: NKN - Network Administrator
address: National Knowledge Network
address: 3rd Floor, Block III,
address: Delhi IT Park, Shastri Park
address: New Delhi - 110053
country: IN
phone: +91 - 1800111555
e-mail: support@nkn.in
admin-c: MR135-AP
tech-c: GK397-AP
nic-hdl: NNA22-AP
abuse-mailbox: abuseteam@nkn.in
mnt-by: MAINT-RSMANI-NKN-IN
last-modified: 2015-11-18T13:09:41Z
source: APNIC

person: Shri A K Gupta
address: Saraswati Vihar, Pachpedi, Jabalpur, MP- 482001
country: IN
phone: +91-761-2609012
e-mail: rdvvcc1@rediffmail.com
nic-hdl: SAKG1-AP
mnt-by: MAINT-RSMANI-NKN-IN
last-modified: 2015-07-24T10:02:50Z
source: APNIC

% Information related to '14.139.224.0/19AS55824'

route: 14.139.224.0/19
descr: NKN-SUPERCORE-SEGMENT-8
origin: AS55824
country: IN
mnt-lower: MAINT-RSMANI-NKN-IN
mnt-routes: MAINT-RSMANI-NKN-IN
mnt-by: MAINT-RSMANI-NKN-IN
last-modified: 2011-09-27T07:06:09Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 181.50.122.237 from natural-breast-active.com

Hi,

The IP 181.50.122.237 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 181.50.122.237:

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2018-05-05 22:00:53 (BRT -03:00)

inetnum: 181.48/13
status: allocated
aut-num: N/A
owner: Telmex Colombia S.A.
ownerid: CO-ACSA-LACNIC
responsible: Operaciones Core IP
address: CLARO FIJO COLOMBIA - Cra 68A No. 24B-10, 11111,
address: 11111 - Bogota - DC
country: CO
phone: +57 01 7480000 []
owner-c: ATI
tech-c: ATI
abuse-c: ATI
inetrev: 181.50/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20180502 AA
nslastaa: 20180502
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20180502 AA
nslastaa: 20180502
created: 20110502
changed: 20110502

nic-hdl: ATI
person: Network Security Team
e-mail: abuse@TELMEXLA.NET.CO
address: Carrera 68a #24b-10, 00, Plaza Claro
address: 111321 - Bogota - DC
country: CO
phone: +57 017480456 [81966]
created: 20020909
changed: 20180302

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 85.214.224.209 from natural-breast-active.com

Hi,

The IP 85.214.224.209 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 85.214.224.209:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '85.214.192.0 - 85.214.255.255'

% Abuse contact for '85.214.192.0 - 85.214.255.255' is 'abuse@strato.de'

inetnum: 85.214.192.0 - 85.214.255.255
netname: STRATO-RZG-DEDI
org: ORG-SRA1-RIPE
descr: Strato Rechenzentrum, Berlin
country: DE
admin-c: SRDS-RIPE
tech-c: SRDS-RIPE
remarks: ************************************************************
remarks: * Please send abuse complaints to abuse-server@strato.de *
remarks: * or fax +49-30-88615-755 ONLY. *
remarks: * Abuse reports to other e-mail addresses will be ignored. *
remarks: ************************************************************
status: ASSIGNED PA
mnt-by: STRATO-RZG-MNT
created: 2010-01-15T09:15:16Z
last-modified: 2013-07-06T09:34:26Z
source: RIPE

organisation: ORG-SRA1-RIPE
org-name: Strato AG
org-type: LIR
address: Pascalstrasse 10
address: 10587
address: Berlin
address: GERMANY
phone: +4930398020
fax-no: +493039802222
admin-c: CHSE-RIPE
admin-c: CM265-RIPE
abuse-c: SRAC-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: STRATO-RZG-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: STRATO-RZG-MNT
created: 2004-04-17T11:12:39Z
last-modified: 2017-10-30T14:45:27Z
source: RIPE # Filtered

role: RIPE contact Dedicated Server
address: STRATO AG
address: Pascalstr. 10
address: D-10587 Berlin
address: Germany
phone: +49 30 39802-0
org: ORG-SRA1-RIPE
abuse-mailbox: abuse-server@strato.de
admin-c: XX1-RIPE
tech-c: CHSE-RIPE
nic-hdl: SRDS-RIPE
remarks: ************************************************************
remarks: * Please send abuse complaints to abuse-server@strato.de *
remarks: * or fax +49-30-88615-755 ONLY. *
remarks: * Abuse reports to other e-mail addresses will be ignored. *
remarks: * *
remarks: * For peering requests or operational issues please look *
remarks: * at the information in the AS6724 RIPE database object. *
remarks: ************************************************************
mnt-by: STRATO-RZG-MNT
created: 2010-01-15T08:35:31Z
last-modified: 2013-10-14T08:04:17Z
source: RIPE # Filtered

% Information related to '85.214.224.0/24AS6724'

route: 85.214.224.0/24
descr: STRATO AG
descr: prefix only advertised in case of DDoS
origin: AS6724
mnt-by: STRATO-RZG-MNT
created: 2014-02-18T16:19:41Z
last-modified: 2014-02-18T16:19:41Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 36.66.164.143 from natural-breast-active.com

Hi,

The IP 36.66.164.143 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 36.66.164.143:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '36.66.160.0 - 36.66.175.255'

% Abuse contact for '36.66.160.0 - 36.66.175.255' is 'abuse@telkom.co.id'

inetnum: 36.66.160.0 - 36.66.175.255
netname: TLKM_D2_ASTINET_CUSTOMER_36_66
descr: PT TELKOM INDONESIA
Menara Multimedia Lt.7
Jl. Kebon sirih No.12
JAKARTA
country: ID
admin-c: AZ163-AP
tech-c: FS370-AP
status: ASSIGNED NON-PORTABLE
remarks: These IP was used for PT TELKOM Indonesia's infrastructure
mnt-by: MAINT-TELKOMNET
mnt-lower: MAINT-TELKOMNET
mnt-routes: MAINT-TELKOMNET
mnt-irt: IRT-IDTELKOM-ID
last-modified: 2011-01-31T01:51:02Z
source: APNIC

irt: IRT-IDTELKOM-ID
address: PT. TELKOM INDONESIA
address: STO Telkom Gambir 3th Floor
address: Medan Merdeka Selatan
address: JAKARTA
e-mail: abuse@telkom.co.id
abuse-mailbox: abuse@telkom.co.id
admin-c: DF99-AP
tech-c: AR165-AP
auth: # Filtered
mnt-by: MAINT-TELKOMNET
last-modified: 2015-10-15T05:58:44Z
source: APNIC

person: Akhmad Zaimi
address: GSD Lt.14 Jl. Kebon Sirih No.12
country: ID
phone: +62-21-3860500
e-mail: djimie@telkom.co.id
nic-hdl: AZ163-AP
mnt-by: MAINT-TELKOMNET
last-modified: 2010-12-20T01:33:46Z
source: APNIC

person: Febrian Setiadi
address: GSD Lt 14 Jl. Kebon Sirih No.12
country: ID
phone: +62-21-3860500
e-mail: febrian.setiadi@telkom.co.id
nic-hdl: FS370-AP
mnt-by: MAINT-TELKOMNET
last-modified: 2010-12-20T01:30:54Z
source: APNIC

% Information related to '36.66.160.0/20AS17974'

route: 36.66.160.0/20
descr: PT. Telekomunikasi Indonesia
country: ID
origin: AS17974
mnt-by: MAINT-TELKOMNET
last-modified: 2013-12-10T08:18:05Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 200.196.48.89 from natural-breast-active.com

Hi,

The IP 200.196.48.89 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 200.196.48.89:

[Querying whois.nic.br]
[whois.nic.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2018-05-05 21:15:12 (-03 -03:00)

% Permission denied. For more information, contact abuse@registro.br

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban