HideMyAss.com

Sunday, 21 July 2013

[Fail2Ban] SSH: banned 88.150.208.117

Hi,

The IP 88.150.208.117 has just been banned by Fail2Ban after
6 attempts against SSH.


Here are more information about 88.150.208.117:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '88.150.208.112 - 88.150.208.119'

% Abuse contact for '88.150.208.112 - 88.150.208.119' is 'abuse@redstation.com'

inetnum: 88.150.208.112 - 88.150.208.119
netname: RSDEDI-LJOGHBFI
descr: Dedicated Server Hosting
country: GB
admin-c: RA1415-RIPE
tech-c: RA1415-RIPE
status: ASSIGNED PA
remarks: ABUSE REPORTS: abuse@redstation.com
mnt-by: REDSTATION-MNT
mnt-domains: REDSTATION-MNT
mnt-routes: REDSTATION-MNT
source: RIPE # Filtered

role: Redstation Admin Role
address: Redstation Limited
address: 2 Frater Gate Business Park
address: Aerodrome Road
address: Gosport
address: Hampshire
address: PO13 0GW
address: UNITED KINGDOM
abuse-mailbox: abuse@redstation.com
admin-c: KMAC-RIPE
tech-c: PA5242-RIPE
nic-hdl: RA1415-RIPE
mnt-by: REDSTATION-MNT
source: RIPE # Filtered

% Information related to '88.150.128.0/17AS35662'

route: 88.150.128.0/17
descr: Redstation Limited
origin: AS35662
mnt-by: REDSTATION-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 201.210.169.128

Hi,

The IP 201.210.169.128 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 201.210.169.128:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-07-21 17:56:42 (BRT -03:00)

inetnum: 201.208/14
status: allocated
aut-num: N/A
owner: CANTV Servicios, Venezuela
ownerid: VE-CSVE-LACNIC
responsible: Nicolas Ortiz
address: Segunda Avenida de los Palos Grandes, 000, Entre Av. Fr
address: 1060 - Caracas - MI
country: VE
phone: +58 212 2095680 []
owner-c: LUM
tech-c: LUM
abuse-c: LUM
inetrev: 201.208/14
nserver: DNS1.CANTV.NET
nsstat: 20130717 AA
nslastaa: 20130717
nserver: DNS2.CANTV.NET
nsstat: 20130717 AA
nslastaa: 20130717
created: 20050809
changed: 20050809

nic-hdl: LUM
person: Nicolas Ortiz
e-mail: ipadmin@CANTV.NET
address: Segunda Avenida de los Palos Grandes, Entre Av. Fr, 000,
address: 1060 - Caracas - MI
country: VE
phone: +58 212 2095680 []
created: 20020911
changed: 20121108

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 190.209.21.174

Hi,

The IP 190.209.21.174 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 190.209.21.174:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-07-21 16:35:05 (BRT -03:00)

inetnum: 190.209.16/20
status: reallocated
owner: Telmex Chile S.A HFC
ownerid: CL-TCSH-LACNIC
responsible: Telmex Chile S.A HFC
address: Riconada del Salto, 202, none
address: NONE - Santiago - cl
country: CL
phone: +56 02 5825000 []
owner-c: AIC2
tech-c: AIC2
abuse-c: AIC2
created: 20080929
changed: 20080929
inetnum-up: 190.209/16

nic-hdl: AIC2
person: Core Internet Telmex Chile
e-mail: netadmin@IP.TELMEXCHILE.CL
address: Rinconada el Salto, 202, Huechuraba
address: -- - Santiago -
country: CL
phone: +56 2 5825365 []
created: 20030314
changed: 20070417

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 181.52.128.52

Hi,

The IP 181.52.128.52 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 181.52.128.52:

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-07-21 15:48:42 (BRT -03:00)

inetnum: 181.48/13
status: allocated
aut-num: N/A
owner: Telmex Colombia S.A.
ownerid: CO-ACSA-LACNIC
responsible: Operaciones Core IP
address: CLARO FIJO COLOMBIA - Cra 7 No. 63-44, 11111,
address: 11111 - Bogota - DC
country: CO
phone: +57 01 7480000 []
owner-c: ATI
tech-c: ATI
abuse-c: ATI
inetrev: 181.52/16
nserver: ENIAC.CABLE.NET.CO
nsstat: 20130721 AA
nslastaa: 20130721
nserver: HAL.CABLE.NET.CO
nsstat: 20130721 AA
nslastaa: 20130721
created: 20110502
changed: 20110502

nic-hdl: ATI
person: Network Security Team
e-mail: abuse@TELMEXLA.NET.CO
address: Cra 7 # 63-44 Piso 6, 00, 00
address: 10 - Bogota - DC
country: CO
phone: +57 01 7480456 [81966]
created: 20020909
changed: 20130416

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 124.160.194.82

Hi,

The IP 124.160.194.82 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 124.160.194.82:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-7]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 124.160.0.0 - 124.160.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20060314
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 124.160.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060314
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@cnc-noc.net
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: abuse@cnc-noc.net 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: zj_ipmaster@126.com
address: No 1336,BinAn Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: zj_ipmaster@126.com 20130709
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 202.70.136.74

Hi,

The IP 202.70.136.74 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 202.70.136.74:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-7]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 202.70.136.0 - 202.70.136.255
netname: DEPKES-ID
descr: Departemen Kesehatan
descr: Government / Direct Member IDNIC
descr: Jl. HR Rasuna Said BLK X5 Kav 4-9
descr: Kuningan Timur
descr: Jakarta
country: ID
admin-c: WT175-AP
tech-c: WT175-AP
remarks: Send Spam & Abuse Reports to: wasisto@telkom.co.id
mnt-by: MNT-APJII-ID
mnt-routes: MAINT-ID-DEPKES
status: ASSIGNED PORTABLE
changed: hm-changed@apnic.net 20100219
source: APNIC

person: Wasisto Tririno R
nic-hdl: WT175-AP
e-mail: wasisto@telkom.co.id
address: Menara Multimedia lt. 4
address: Jl Kebon Sirih No. 12
address: DKI Jakarta
phone: +62-21-70255504
fax-no: +62-21-3864004
country: ID
changed: hostmaster@idnic.net 20100212
mnt-by: MAINT-NEW
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 153.128.40.27

Hi,

The IP 153.128.40.27 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 153.128.40.27:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-7]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 153.128.0.0 - 153.253.255.255
netname: OCN
descr: NTT Communications Corporation
descr: 1-6 Uchisaiwai-cho 1-chome Chiyoda-ku, Tokyo 100-8019 Japan
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
status: ALLOCATED PORTABLE
remarks: Email address for spam or abuse complaints :abuse@ocn.ad.jp
mnt-by: MAINT-JPNIC
mnt-lower: MAINT-JPNIC
mnt-irt: IRT-JPNIC-JP
changed: hm-changed@apnic.net 20120919
source: APNIC

role: Japan Network Information Center
address: Urbannet-Kanda Bldg 4F
address: 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047,Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: hostmaster@nic.ad.jp
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
changed: hm-changed@apnic.net 20041222
changed: hm-changed@apnic.net 20050324
changed: ip-apnic@nic.ad.jp 20051027
changed: ip-apnic@nic.ad.jp 20120828
source: APNIC

inetnum: 153.128.0.0 - 153.128.63.255
netname: OCN
descr: Open Computer Network
country: JP
admin-c: AY1361JP
tech-c: KK551JP
tech-c: TT10660JP
tech-c: TT15086JP
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: apnic-ftp@nic.ad.jp 20110329
changed: apnic-ftp@nic.ad.jp 20130424
source: JPNIC

Regards,

Fail2Ban

Saturday, 20 July 2013

[Fail2Ban] SSH: banned 188.132.242.105

Hi,

The IP 188.132.242.105 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 188.132.242.105:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '188.132.242.0 - 188.132.242.255'

inetnum: 188.132.242.0 - 188.132.242.255
netname: Mars-Customer192
descr: Mars-Customer192
remarks: www.marsglobaldatacenter.com
country: TR
org: ORG-MGDS1-RIPE
admin-c: MN4961-RIPE
tech-c: MN4961-RIPE
status: ASSIGNED PA
mnt-by: MNT-MARSNET
source: RIPE # Filtered

organisation: ORG-MGDS1-RIPE
org-name: Mars Global Datacenter Services LLC
remarks: www.marsglobaldatacenter.com
org-type: OTHER
address: Pobrezni 118, Prague, Czech Republic Turkey
mnt-ref: MNT-MARSNET
mnt-by: MNT-MARSNET
source: RIPE # Filtered

person: Mars Noc
address: Nadiama St. No:28 Turkey
remarks: www.marsglobaldatacenter.com
mnt-by: MNT-MARSNET
phone: +90 213 437 87 87
nic-hdl: MN4961-RIPE
source: RIPE # Filtered

% Information related to '188.132.242.0/24AS42910'

route: 188.132.242.0/24
descr: MarsGlobal1-Net1
origin: AS42910
mnt-by: MNT-MARSNET
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 27.100.9.195

Hi,

The IP 27.100.9.195 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 27.100.9.195:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-4]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 27.100.8.0 - 27.100.11.255
netname: Hypernet-Shizuoka
descr: TOCOCHANNEL SHIZUOKA corporation
descr: SuzuyoInformation Bldg. 1F,
descr: 22-1-5,Nakanogo,Shimizu-ku,Shizuoka-shi,Shizuoka,JAPAN
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
status: ALLOCATED PORTABLE
remarks: Email address for spam or abuse complaints apply@po.across.or.jp
changed: hm-changed@apnic.net 20100527
changed: ip-apnic@nic.ad.jp 20101119
changed: ip-apnic@nic.ad.jp 20130424
mnt-irt: IRT-JPNIC-JP
mnt-by: MAINT-JPNIC
mnt-lower: MAINT-JPNIC
source: APNIC

role: Japan Network Information Center
address: Urbannet-Kanda Bldg 4F
address: 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047,Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: hostmaster@nic.ad.jp
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
changed: hm-changed@apnic.net 20041222
changed: hm-changed@apnic.net 20050324
changed: ip-apnic@nic.ad.jp 20051027
changed: ip-apnic@nic.ad.jp 20120828
source: APNIC

inetnum: 27.100.9.128 - 27.100.9.255
netname: SAP-NW2
descr: Dreamwave Shizuoka Co., Ltd.
country: JP
admin-c: KS10377JP
tech-c: MY7292JP
tech-c: ST5337JP
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: apnic-ftp@nic.ad.jp 20120202
source: JPNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 183.232.32.24

Hi,

The IP 183.232.32.24 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 183.232.32.24:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-3]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 183.192.0.0 - 183.255.255.255
netname: CMNET
descr: China Mobile Communications Corporation
descr: Mobile Communications Network Operator in China
descr: Internet Service Provider in China
country: CN
status: ALLOCATED PORTABLE
admin-c: LCJ-AP
tech-c: HL1318-AP
remarks: service provider
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20091108
mnt-by: APNIC-HM
mnt-lower: MAINT-CN-CMCC
source: APNIC

route: 183.224.0.0/12
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
changed: lihaijun@chinamobile.com 20101208
source: APNIC

person: li changjun
address: 29 jinrong ave. xicheng district, beijing China
country: CN
phone: +86 52686688
e-mail: hostmaster@chinamobile.com
nic-hdl: lcj-ap
mnt-by: MAINT-CN-CMCC
changed: hostmaster@chinamobile.com 20071010
source: APNIC

person: haijun li
nic-hdl: HL1318-AP
e-mail: hostmaster@chinamobile.com
address: 29,Jinrong Ave, Xicheng district,beijing,100032
phone: +86 10 66006688
fax-no: +86 10 52616187
country: CN
changed: hostmaster@chinamobile.com 20110824
mnt-by: MAINT-CN-CMCC
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.249.200.144

Hi,

The IP 218.249.200.144 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 218.249.200.144:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-5]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 218.249.128.0 - 218.249.255.255
netname: ZHONG-BANG-YA-TONG
country: CN
descr: Beijing Zhongbangyatong Telecom Technology Co,Ltd
admin-c: SD256-AP
tech-c: DL767-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNCGROUP-RR
changed: ipas@cnnic.cn 20110412
source: APNIC

person: Shoulan Du
nic-hdl: SD256-AP
e-mail: Betsy.du@bj.datadragon.net
address: No. 20, Fuxing Road, Beijing
phone: +86-010-65661868-236
fax-no: +86-010-65660882
country: CN
changed: ipas@cnnic.cn 20060508
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Donghai Liu
nic-hdl: DL767-AP
e-mail: liudonghai@btte.net
address: No. 20, Fuxing Road, Beijing
phone: +86-010-65661868-230
fax-no: +86-010-65660882
country: CN
changed: ipas@cnnic.cn 20090402
mnt-by: MAINT-CNNIC-AP
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 88.190.235.249

Hi,

The IP 88.190.235.249 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 88.190.235.249:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '88.190.235.0 - 88.190.235.255'

inetnum: 88.190.235.0 - 88.190.235.255
netname: FR-DEDIBOX
descr: Dedibox SAS
descr: Hosting Customers
descr: Paris, France
remarks: trouble: Information: http://www.dedibox.fr/
remarks: trouble: Spam/Abuse requests: http://www.dedibox.fr/abuse/
remarks: trouble: Spam/Abuse requests: mailto:abuse@support.dedibox.fr
country: FR
admin-c: ACP23-RIPE
tech-c: TCP8-RIPE
status: ASSIGNED PA
mnt-by: PROXAD-MNT
source: RIPE # Filtered

role: Administrative Contact for ProXad
address: Free SAS / ProXad
address: 8, rue de la Ville L'Eveque
address: 75008 Paris
phone: +33 1 73 50 20 00
fax-no: +33 1 73 92 25 69
remarks: trouble: Information: http://www.proxad.net/
remarks: trouble: Spam/Abuse requests: mailto:abuse@proxad.net
admin-c: APfP1-RIPE
tech-c: TPfP1-RIPE
nic-hdl: ACP23-RIPE
mnt-by: PROXAD-MNT
source: RIPE # Filtered
abuse-mailbox: abuse@proxad.net

role: Technical Contact for ProXad
address: Free SAS / ProXad
address: 8, rue de la Ville L'Eveque
address: 75008 Paris
phone: +33 1 73 50 20 00
fax-no: +33 1 73 92 25 69
remarks: trouble: Information: http://www.proxad.net/
remarks: trouble: Spam/Abuse requests: mailto:abuse@proxad.net
admin-c: APfP1-RIPE
tech-c: TPfP1-RIPE
nic-hdl: TCP8-RIPE
mnt-by: PROXAD-MNT
source: RIPE # Filtered
abuse-mailbox: abuse@proxad.net

% Information related to '88.160.0.0/11AS12322'

route: 88.160.0.0/11
descr: ProXad network / Free SAS
descr: Paris, France
origin: AS12322
mnt-by: PROXAD-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 124.160.194.82

Hi,

The IP 124.160.194.82 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 124.160.194.82:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-3]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 124.160.0.0 - 124.160.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20060314
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 124.160.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060314
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@cnc-noc.net
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: abuse@cnc-noc.net 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: zj_ipmaster@126.com
address: No 1336,BinAn Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: zj_ipmaster@126.com 20130709
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.30.99.120

Hi,

The IP 218.30.99.120 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 218.30.99.120:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 218.30.96.0 - 218.30.127.255
netname: CHINANET-IDC-BJ
descr: CHINANET IDC center
descr: China Telecom
descr: Beijing 100088
country: CN
admin-c: HC55-AP
tech-c: HC55-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINATELECOM-BJ
changed: bjnic@bjtelecom.net 20040322
status: ALLOCATED NON-PORTABLE
source: APNIC

person: Hostmaster of Beijing Telecom corporation CHINA TELECOM
nic-hdl: HC55-AP
e-mail: bjnic@bjtelecom.net
address: Beijing Telecom
address: No. 107 XiDan Beidajie, Xicheng District Beijing
phone: +86-010-58503461
fax-no: +86-010-58503054
country: cn
changed: bjnic@bjtelecom.net 20040115
mnt-by: MAINT-CHINATELECOM-BJ
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 204.93.219.152

Hi,

The IP 204.93.219.152 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 204.93.219.152:

[Querying whois.arin.net]
[Redirected to rwhois.servercentral.net:4321]
[Querying rwhois.servercentral.net]
[Unable to connect to remote host]

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 111.90.168.5

Hi,

The IP 111.90.168.5 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 111.90.168.5:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-6]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 111.90.168.0 - 111.90.168.255
netname: ISHAN-NETSOL
descr: ISHAN's IP Pool
country: IN
admin-c: PK225-AP
tech-c: PK225-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-IN-ISHAN
changed: pinkesh@ishanitech.biz 20100318
source: APNIC

route: 111.90.168.0/24
descr: Ishan's Route Object
origin: AS45117
mnt-by: maint-in-ishan
changed: pinkesh@ishanitech.biz 20090703
source: APNIC

person: Pinkesh Kotecha
nic-hdl: PK225-AP
e-mail: reportabuse@ishanitech.biz
address: 316 Shivam Complex,
address: Dr. Yagnik Road,
address: Opp Jagnath Temple
address: Rajkot
address: India
phone: +91 281 2468232
fax-no: +91 281 3048448
country: IN
changed: pinkesh@ishanitech.biz 20061120
mnt-by: MAINT-IN-ISURF
source: APNIC

Regards,

Fail2Ban

Friday, 19 July 2013

[Fail2Ban] SSH: banned 153.128.40.27

Hi,

The IP 153.128.40.27 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 153.128.40.27:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-3]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 153.128.0.0 - 153.253.255.255
netname: OCN
descr: NTT Communications Corporation
descr: 1-6 Uchisaiwai-cho 1-chome Chiyoda-ku, Tokyo 100-8019 Japan
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
status: ALLOCATED PORTABLE
remarks: Email address for spam or abuse complaints :abuse@ocn.ad.jp
mnt-by: MAINT-JPNIC
mnt-lower: MAINT-JPNIC
mnt-irt: IRT-JPNIC-JP
changed: hm-changed@apnic.net 20120919
source: APNIC

role: Japan Network Information Center
address: Urbannet-Kanda Bldg 4F
address: 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047,Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: hostmaster@nic.ad.jp
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
changed: hm-changed@apnic.net 20041222
changed: hm-changed@apnic.net 20050324
changed: ip-apnic@nic.ad.jp 20051027
changed: ip-apnic@nic.ad.jp 20120828
source: APNIC

inetnum: 153.128.0.0 - 153.128.63.255
netname: OCN
descr: Open Computer Network
country: JP
admin-c: AY1361JP
tech-c: KK551JP
tech-c: TT10660JP
tech-c: TT15086JP
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: apnic-ftp@nic.ad.jp 20110329
changed: apnic-ftp@nic.ad.jp 20130424
source: JPNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 118.192.9.79

Hi,

The IP 118.192.9.79 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 118.192.9.79:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-6]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 118.192.0.0 - 118.192.255.255
netname: SANXIN
descr: Beijing Sanxin Shidai Co.Ltd
descr: 1513 Xinjishu building Beijing link west road,
descr: Haidian District, Beijing, PRC
country: CN
admin-c: SJ1535-AP
tech-c: AUTO1-SK
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-NET-AP
mnt-irt: IRT-NET-AP
changed: ip@cnisp.org.cn 20121010
source: APNIC

route: 118.192.0.0/16
descr: China Unicom Hebei Province network
descr: Addresses from CNNIC
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20110322
source: APNIC

person: Shi Jianmin
nic-hdl: SJ1535-AP
address: 65th Haidian xinjishu building 1513
address: Beijing Haidian District North four link west road
country: CN
phone: +86-10-82888393
fax-no: +86-10-82610575-15131
e-mail: antepc@sina.com
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20090513
source: APNIC

person: Shi Kai
nic-hdl: AUTO1-SK
address: 65th Haidian xinjishu building 1513
address: Beijing Haidian District North four link west road
country: CN
phone: +86-10-52789029
fax-no: +86-10-52789032
e-mail: sailor0156@hotmail.com
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20090513
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 219.144.17.74

Hi,

The IP 219.144.17.74 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 219.144.17.74:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 219.144.0.0 - 219.145.255.255
netname: CHINANET-SN
descr: CHINANET shanxi(SN) province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: XC10-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SHAANXI
status: ASSIGNED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20020702
changed: hm-changed@apnic.net 20040927
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: Xianghong Cao
address: Shaanxi province data communication Bureau
address: 8# guangde Road west development zone
address: Xi'an city, Shanxi province 710075
country: CN
phone: +8629-837-1049
fax-no: +8629-837-1049
e-mail: IPADM@PUBLIC.XA.SN.CN
nic-hdl: XC10-AP
mnt-by: MAINT-CHINANET-SHAANXI
changed: IPADM@PUBLIC.XA.SN.CN 20011203
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 62.75.236.14

Hi,

The IP 62.75.236.14 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 62.75.236.14:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '62.75.236.0 - 62.75.236.63'

% Abuse contact for '62.75.236.0 - 62.75.236.63' is 'abuse@plusserver.de'

inetnum: 62.75.236.0 - 62.75.236.63
descr: BSB-SERVICE Dedicated Server Hosting
netname: BSB-SERVICE-1
country: DE
org: ORG-BSBS1-RIPE
admin-c: NPA10-RIPE
tech-c: NPA10-RIPE
remarks: rev-srv: ptr1.intergenia.de
remarks: rev-srv: ptr2.intergenia.de
status: ASSIGNED PA
remarks: Abuse-Contact: abuse@ip-pool.com
mnt-by: BSB-SERVICE-MNT
source: RIPE # Filtered

organisation: ORG-BSBS1-RIPE
org-name: B S B - Service GmbH
org-type: OTHER
descr: Internet-Hoster
remarks: BSB Service GmbH is part of intergenia AG
address: Daimlerstr.9-11
address: 50354 Huerth
address: Germany
phone: +49 2233 612-0
fax-no: +49 2233 612-144
admin-c: NPA10-RIPE
tech-c: NPA10-RIPE
mnt-ref: INTERGENIA-MNT
mnt-by: INTERGENIA-MNT
source: RIPE # Filtered

role: NMC PlusServer AG
address: PlusServer AG
address: Daimlerstr. 9-11
address: 50354 Huerth
phone: +49 1801 119991
fax-no: +49 2233 612-53500
abuse-mailbox: abuse@plusserver.de
remarks:
remarks: ********************************************************
remarks: * PLEASE READ CAREFULLY: *
remarks: * and choose the right addresses for contacting our *
remarks: * staff. *
remarks: * This will fasten up processing your request ! *
remarks: ********************************************************
remarks: * ABUSE-Complaints are only handled at: *
remarks: * ABUSE@plusserver.de *
remarks: ********************************************************
remarks: * Auskunftsersuchen gemaess TKG werden nur unter *
remarks: * Fax: +49 2233 612 5150 *
remarks: * bearbeitet! *
remarks: ********************************************************
remarks: * Informational Contact: info@plusserver.de *
remarks: * or http://www.plusserver.de *
remarks: ********************************************************
remarks:
remarks: ********************************************************
remarks: * If you have a routing-related request you *
remarks: * may contact us at : *
remarks: * Fax: +49 2233 612 53500 *
remarks: * Phone: +49 2233 612 3500 *
remarks: * *
remarks: ********************************************************
remarks:
admin-c: JBPS-RIPE
tech-c: CDPS-RIPE
tech-c: ADPS-RIPE
tech-c: MOPS1337-RIPE
nic-hdl: NPA10-RIPE
mnt-by: INTERGENIA-MNT
source: RIPE # Filtered

% Information related to '62.75.128.0/17AS8972'

route: 62.75.128.0/17
descr: Plusserver AG
origin: AS8972
mnt-by: INTERGENIA-MNT
mnt-lower: INTERGENIA-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.136.171.198

Hi,

The IP 61.136.171.198 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 61.136.171.198:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-6]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 61.136.128.0 - 61.136.255.255
netname: CHINANET-HB
descr: CHINANET Hubei province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: CHA1-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CN-CHINANET-HB
changed: hostmaster@cn.net 20001225
status: ALLOCATED NON-PORTABLE
source: APNIC

role: CHINANET HB ADMIN
address: 8th floor of JinGuang Building
address: #232 of Macao Road
address: HanKou Wuhan Hubei Province
address: P.R.China
country: CN
phone: +86 27 82862199
fax-no: +86 27 82861499
e-mail: ip_admin_hb@public.wh.hb.cn
remarks: send spam reports to spam_hb@public.wh.hb.cn
remarks: and abuse reports to abuse_hb@public.wh.hb.cn
remarks: Please include detailed information and
remarks: times in GMT+8
admin-c: YZ83-AP
admin-c: ZC77-AP
tech-c: YZ83-AP
tech-c: ZC77-AP
nic-hdl: CHA1-AP
notify: ip_admin_hb@public.wh.hb.cn
mnt-by: MAINT-CN-CHINANET-HB
changed: zhangyl68@public.wh.hb.cn 20031114
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 109.163.226.166

Hi,

The IP 109.163.226.166 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 109.163.226.166:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '109.163.225.0 - 109.163.227.255'

inetnum: 109.163.225.0 - 109.163.227.255
netname: Voxility
descr: Servers hosting in Dimitrie Pompeiu 9-9A, Building 24, Bucharest
country: RO
admin-c: VOX100-RIPE
tech-c: VOX100-RIPE
status: ASSIGNED PA
mnt-by: VOXILITY-MNT
source: RIPE # Filtered

person: Voxility NOC
remarks: Team in Charge of Voxility Global IP Backbone Management
remarks: Available 24/7 for routing issues and security incidents
org: ORG-SVS8-RIPE
address: Dimitrie Pompeiu 9-9A, Building 24
address: Bucharest 020335, Romania
abuse-mailbox: noc@voxility.com
remarks: +1.703-888-5811 (US)
remarks: +49.69-957-98952 (Germany)
phone: +40-21-2074747
nic-hdl: VOX100-RIPE
mnt-by: VOXILITY-MNT
source: RIPE # Filtered

% Information related to '109.163.226.0/24AS39743'

route: 109.163.226.0/24
descr: voxility.net
origin: AS39743
mnt-by: VOXILITY-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS4)

Regards,

Fail2Ban

Thursday, 18 July 2013

[Fail2Ban] SSH: banned 62.75.236.14

Hi,

The IP 62.75.236.14 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 62.75.236.14:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '62.75.236.0 - 62.75.236.63'

% Abuse contact for '62.75.236.0 - 62.75.236.63' is 'abuse@plusserver.de'

inetnum: 62.75.236.0 - 62.75.236.63
descr: BSB-SERVICE Dedicated Server Hosting
netname: BSB-SERVICE-1
country: DE
org: ORG-BSBS1-RIPE
admin-c: NPA10-RIPE
tech-c: NPA10-RIPE
remarks: rev-srv: ptr1.intergenia.de
remarks: rev-srv: ptr2.intergenia.de
status: ASSIGNED PA
remarks: Abuse-Contact: abuse@ip-pool.com
mnt-by: BSB-SERVICE-MNT
source: RIPE # Filtered

organisation: ORG-BSBS1-RIPE
org-name: B S B - Service GmbH
org-type: OTHER
descr: Internet-Hoster
remarks: BSB Service GmbH is part of intergenia AG
address: Daimlerstr.9-11
address: 50354 Huerth
address: Germany
phone: +49 2233 612-0
fax-no: +49 2233 612-144
admin-c: NPA10-RIPE
tech-c: NPA10-RIPE
mnt-ref: INTERGENIA-MNT
mnt-by: INTERGENIA-MNT
source: RIPE # Filtered

role: NMC PlusServer AG
address: PlusServer AG
address: Daimlerstr. 9-11
address: 50354 Huerth
phone: +49 1801 119991
fax-no: +49 2233 612-53500
abuse-mailbox: abuse@plusserver.de
remarks:
remarks: ********************************************************
remarks: * PLEASE READ CAREFULLY: *
remarks: * and choose the right addresses for contacting our *
remarks: * staff. *
remarks: * This will fasten up processing your request ! *
remarks: ********************************************************
remarks: * ABUSE-Complaints are only handled at: *
remarks: * ABUSE@plusserver.de *
remarks: ********************************************************
remarks: * Auskunftsersuchen gemaess TKG werden nur unter *
remarks: * Fax: +49 2233 612 5150 *
remarks: * bearbeitet! *
remarks: ********************************************************
remarks: * Informational Contact: info@plusserver.de *
remarks: * or http://www.plusserver.de *
remarks: ********************************************************
remarks:
remarks: ********************************************************
remarks: * If you have a routing-related request you *
remarks: * may contact us at : *
remarks: * Fax: +49 2233 612 53500 *
remarks: * Phone: +49 2233 612 3500 *
remarks: * *
remarks: ********************************************************
remarks:
admin-c: JBPS-RIPE
tech-c: CDPS-RIPE
tech-c: ADPS-RIPE
tech-c: MOPS1337-RIPE
nic-hdl: NPA10-RIPE
mnt-by: INTERGENIA-MNT
source: RIPE # Filtered

% Information related to '62.75.128.0/17AS8972'

route: 62.75.128.0/17
descr: Plusserver AG
origin: AS8972
mnt-by: INTERGENIA-MNT
mnt-lower: INTERGENIA-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 219.148.120.238

Hi,

The IP 219.148.120.238 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 219.148.120.238:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-7]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 219.148.0.0 - 219.148.159.255
netname: CHINANET-HE
descr: CHINANET hebei province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: BR3-AP
status: ALLOCATED NON-PORTABLE
changed: ipadmin@north.cn.net 20060526
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-HE
mnt-routes: MAINT-CHINANET-HE
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: Bin Ren
nic-hdl: BR3-AP
e-mail: hostmaster@hbtele.com
address: NO.69 KunLun avenue, Shijiazhuang 050000 China
phone: +86-311-85211771
fax-no: +86-311-85202145
country: CN
changed: renbin@hbtele.com 20060606
mnt-by: MAINT-CHINANET-HE
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 122.49.119.206

Hi,

The IP 122.49.119.206 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 122.49.119.206:

[Querying whois.apnic.net]
[Redirected to whois.nic.or.kr]
[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query: 122.49.119.206

# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 122.49.112.0 - 122.49.119.255 (/21)
서비스명 : PIRANHA
기관명 : í"¼ëž€í•˜ì&lsqauo;œìŠ¤í…œì¦ˆ
기관고유번호 : ORG840185
주소 : 인천 연수구 송도동 송도미래로 30 스마트밸리 지ì&lsqauo;ì‚°ì—…센터 C-2513
우편번호 : 406-840
í• ë&lsqauo;¹ì¼ìž : 20060605

[ IPv4주소 책임자 정보 ]
이름 : 홍소연
ì „í™"번호 : +82-2-1644-7568
전자우편 : noc@piranha.co.kr

[ IPv4주소 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 홍소연
ì „í™"번호 : +82-2-1644-7568
전자우편 : noc@piranha.co.kr

[ 스팸 해킹 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 홍소연
ì „í™"번호 : +82-2-1644-7568
전자우편 : noc@piranha.co.kr

--------------------------------------------------------------------------------

조회하ì&lsqauo;  IPv4주소ëŠ" 위의 관리대행자로부터 아래의 사용자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 122.49.112.0 - 122.49.119.255 (/21)
네트워크 이름 : PIRANHA-II
기관명 : í"¼ëž€í•˜ì&lsqauo;œìŠ¤í…œì¦ˆ
기관고유번호 : ORG791975
주소 : 인천 남구 주안동
우편번호 : 402-200
í• ë&lsqauo;¹ë‚´ì—­ ë"±ë¡ì¼ : 20060623
공개여부 : N

[ 네트워크 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
기관명 : í"¼ëž€í•˜ì&lsqauo;œìŠ¤í…œì¦ˆ
주소 : 인천 남구 주안동
우편번호 : 402-200
전자우편 : hsw@piranha.co.kr


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 122.49.112.0 - 122.49.119.255 (/21)
Service Name : PIRANHA
Organization Name : Piranha Systems
Organization ID : ORG840185
Address : Songdomirae-ro 30, Song-Do Smart Valley C-2513, Songdo-dong Yeonsu-gu Incheon
Zip Code : 406-840
Registration Date : 20060605

[ Admin Contact Information ]
Name : So Yeon Hong
Phone : +82-2-1644-7568
E-Mail : noc@piranha.co.kr

[ Tech Contact Information ]
Name : So Yeon Hong
Phone : +82-2-1644-7568
E-Mail : noc@piranha.co.kr

[ Network Abuse Contact Information ]
Name : So Yeon Hong
Phone : +82-2-1644-7568
E-Mail : noc@piranha.co.kr

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 122.49.112.0 - 122.49.119.255 (/21)
Network Name : PIRANHA-II
Organization Name : PIRANHA
Organization ID : ORG791975
Address : Juan-dong Nam-gu INCHEON
Zip Code : 402-200
Registration Date : 20060623
Publishes : N

[ Technical Contact Information ]
Organization Name : PIRANHA
Address : Juan-dong Nam-gu INCHEON
Zip Code : 402-200
E-Mail : hsw@piranha.co.kr


상기 ì •ë³´ëŠ" UTF-8 인ì½"ë"©ë˜ì–´ 서비스되고 있습ë&lsqauo;ˆë&lsqauo;¤.
EUC-KR 인ì½"ë"© 서비스ëŠ" oldwhois.kisa.or.kr에서 서비스 되고 있습ë&lsqauo;ˆë&lsqauo;¤.
The above information is encoded with UTF-8
EUC-KR encoding WHOIS is being serviced in this URL:oldwhois.kisa.or.kr

- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 199.195.212.145

Hi,

The IP 199.195.212.145 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 199.195.212.145:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 199.195.212.145"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=199.195.212.145?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 199.195.212.0 - 199.195.215.255
CIDR: 199.195.212.0/22
OriginAS: AS26272
NetName: FUC-US-1001
NetHandle: NET-199-195-212-0-1
Parent: NET-199-0-0-0-0
NetType: Direct Allocation
RegDate: 2012-06-04
Updated: 2012-06-04
Ref: http://whois.arin.net/rest/net/NET-199-195-212-0-1

OrgName: FortaTrust USA Corporation
OrgId: FUC-9
Address: 3701 NW 82 Ave.
City: Doral
StateProv: FL
PostalCode: 33166
Country: US
RegDate: 2012-03-08
Updated: 2012-06-05
Ref: http://whois.arin.net/rest/org/FUC-9

OrgTechHandle: IPADM602-ARIN
OrgTechName: IP Admin
OrgTechPhone: +1-954-369-0574
OrgTechEmail: ipadmin@fortatrust.com
OrgTechRef: http://whois.arin.net/rest/poc/IPADM602-ARIN

OrgAbuseHandle: IPADM602-ARIN
OrgAbuseName: IP Admin
OrgAbusePhone: +1-954-369-0574
OrgAbuseEmail: ipadmin@fortatrust.com
OrgAbuseRef: http://whois.arin.net/rest/poc/IPADM602-ARIN

OrgNOCHandle: IPADM602-ARIN
OrgNOCName: IP Admin
OrgNOCPhone: +1-954-369-0574
OrgNOCEmail: ipadmin@fortatrust.com
OrgNOCRef: http://whois.arin.net/rest/poc/IPADM602-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 194.149.136.62

Hi,

The IP 194.149.136.62 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 194.149.136.62:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '194.149.136.0 - 194.149.137.255'

% Abuse contact for '194.149.136.0 - 194.149.137.255' is 'ukc@ukim.edu.mk'

inetnum: 194.149.136.0 - 194.149.137.255
netname: UKIM-FINKI-NET
descr: FACULTY OF COMPUTER SCIENCE AND ENGINEERING
country: MK
admin-c: VA834-RIPE
tech-c: KK2728-RIPE
status: ASSIGNED PA
mnt-by: UKIM-MNT
source: RIPE # Filtered

person: Kiril Kkiroski
address: Prirodno matematicki fakultet
address: Institut za informatika
address: Gazi Baba b.b.
address: 1000 Skopje, MACEDONIA
phone: +389 2 3 249 761
nic-hdl: KK2728-RIPE
mnt-by: UKIM-MNT
source: RIPE # Filtered

person: Vangel Ajanovski
address: Prirodno matematicki fakultet
address: Institut za informatika
address: Gazi Baba b.b.
address: 1000 Skopje, MACEDONIA
phone: +389 2 3 162 078
nic-hdl: VA834-RIPE
mnt-by: UKIM-MNT
source: RIPE # Filtered

% Information related to '194.149.128.0/19AS5379'

route: 194.149.128.0/19
descr: UKiM-IPv4
origin: AS5379
mnt-by: UKIM-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 202.70.136.74

Hi,

The IP 202.70.136.74 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 202.70.136.74:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 202.70.136.0 - 202.70.136.255
netname: DEPKES-ID
descr: Departemen Kesehatan
descr: Government / Direct Member IDNIC
descr: Jl. HR Rasuna Said BLK X5 Kav 4-9
descr: Kuningan Timur
descr: Jakarta
country: ID
admin-c: WT175-AP
tech-c: WT175-AP
remarks: Send Spam & Abuse Reports to: wasisto@telkom.co.id
mnt-by: MNT-APJII-ID
mnt-routes: MAINT-ID-DEPKES
status: ASSIGNED PORTABLE
changed: hm-changed@apnic.net 20100219
source: APNIC

person: Wasisto Tririno R
nic-hdl: WT175-AP
e-mail: wasisto@telkom.co.id
address: Menara Multimedia lt. 4
address: Jl Kebon Sirih No. 12
address: DKI Jakarta
phone: +62-21-70255504
fax-no: +62-21-3864004
country: ID
changed: hostmaster@idnic.net 20100212
mnt-by: MAINT-NEW
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 219.148.120.238

Hi,

The IP 219.148.120.238 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 219.148.120.238:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-3]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 219.148.0.0 - 219.148.159.255
netname: CHINANET-HE
descr: CHINANET hebei province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: BR3-AP
status: ALLOCATED NON-PORTABLE
changed: ipadmin@north.cn.net 20060526
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-HE
mnt-routes: MAINT-CHINANET-HE
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: Bin Ren
nic-hdl: BR3-AP
e-mail: hostmaster@hbtele.com
address: NO.69 KunLun avenue, Shijiazhuang 050000 China
phone: +86-311-85211771
fax-no: +86-311-85202145
country: CN
changed: renbin@hbtele.com 20060606
mnt-by: MAINT-CHINANET-HE
source: APNIC

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 115.168.43.158

Hi,

The IP 115.168.43.158 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 115.168.43.158:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-4]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 115.168.0.0 - 115.171.255.255
netname: CHINANET-CDMA
descr: CHINANET CDMA NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: CA67-AP
remarks: service provider
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET
mnt-routes: MAINT-CHINANET
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20080825
source: APNIC

route: 115.168.0.0/14
descr: CHINANET CDMA NETWORK
origin: AS4809
mnt-by: MAINT-CHINANET
changed: chenyiq@gsta.com 20121212
source: APNIC

role: CHINANETFJ IP ADMIN
address: 7,East Street,Fuzhou,Fujian,PRC
country: CN
phone: +86-591-83309761
fax-no: +86-591-83371954
e-mail: fjnic@fjdcb.fz.fj.cn
remarks: send spam reports and abuse reports
remarks: to abuse@fjdcb.fz.fj.cn
remarks: Please include detailed information and
remarks: times in UTC
admin-c: FH71-AP
tech-c: FH71-AP
nic-hdl: CA67-AP
remarks: www.fjtelecom.com
notify: fjnic@fjdcb.fz.fj.cn
mnt-by: MAINT-CHINANET-FJ
changed: fjnic@fjdcb.fz.fj.cn 20100108
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

Regards,

Fail2Ban