HideMyAss.com

Monday, 23 September 2013

[Fail2Ban] SSH: banned 122.227.147.26

Hi,

The IP 122.227.147.26 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 122.227.147.26:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '122.227.147.0 - 122.227.147.31'

inetnum: 122.227.147.0 - 122.227.147.31
netname: NINGBOSHI-XINXI-CHANYEJU
country: CN
descr: NING BO SHI XIN XI CHAN YE JU
descr:
admin-c: WY1716-AP
tech-c: CN13-AP
status: ASSIGNED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20081208
mnt-by: MAINT-CN-CHINANET-ZJ-NB
source: APNIC

role: CHINANET-ZJ Ningbo
address: No.180 Jiefang Road(North),Ningbo,Zhejiang.315010
country: CN
phone: +86-574-87278134
fax-no: +86-574-87362712
e-mail: anti_spam@mail.nbptt.zj.cn
remarks: send spam reports to anti_spam@mail.nbptt.zj.cn
remarks: and abuse reports to anti_spam@mail.nbptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH105-AP
tech-c: CH105-AP
nic-hdl: CN13-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Wenjun Yu
nic-hdl: WY1716-AP
e-mail: 63360803@nbtelecom.com
address: NO.91,jiefang bei road Ningbo,Zhejiang.Postcode:315000
phone: +86-574-87183422
country: CN
changed: auto-dbm@dcb.hz.zj.cn 20081208
mnt-by: MAINT-CN-CHINANET-ZJ-NB
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)

Regards,

Fail2Ban

Sunday, 22 September 2013

[Fail2Ban] SSH: banned 89.233.234.2

Hi,

The IP 89.233.234.2 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 89.233.234.2:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '89.233.234.0 - 89.233.234.63'

% Abuse contact for '89.233.234.0 - 89.233.234.63' is 'abuse@bredband2.se'

inetnum: 89.233.234.0 - 89.233.234.63
netname: UNITED-TELEVISION-NET-SE
descr: United Television
descr: Kristianstad
country: SE
admin-c: BR1985-RIPE
tech-c: BR1985-RIPE
status: ASSIGNED PA
mnt-by: BB2-MNT
source: RIPE # Filtered

role: Bredband2 Routingregistry
address: Sodra Tullgatan 4 S-211 40 Malmoe Sweden
phone: +46 771 518500
fax-no: +46 40 125890
abuse-mailbox: abuse@bredband2.se
admin-c: RAD-RIPE
tech-c: RAD-RIPE
admin-c: TB345-RIPE
tech-c: TB345-RIPE
nic-hdl: BR1985-RIPE
mnt-by: BB2-MNT
source: RIPE # Filtered

% Information related to '89.233.232.0/21AS29518'

route: 89.233.232.0/21
descr: Wexnet via Bredband2
origin: AS29518
mnt-by: SKYNET-RIPE-MNT
mnt-by: WTN-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.68.1 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 112.216.140.51

Hi,

The IP 112.216.140.51 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 112.216.140.51:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.nic.or.kr]
[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query: 112.216.140.51

# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 112.216.0.0 - 112.223.255.255 (/13)
서비스명 : BORANET
기관명 : 주ì&lsqauo;íšŒì‚¬ 엘지유í"ŒëŸ¬ìŠ¤
기관고유번호 : ORG572
주소 : 서울 ì¤'구 남대문로5ê°€ 827
우편번호 : 100-095
í• ë&lsqauo;¹ì¼ìž : 20090216

[ IPv4주소 책임자 정보 ]
이름 : IP주소관리자
ì „í™"번호 : +82-2-6928-3087
전자우편 : ipadm@lguplus.co.kr

[ IPv4주소 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : IP주소관리자
ì „í™"번호 : +82-2-6928-3087
전자우편 : ipadm@lguplus.co.kr

[ 스팸 해킹 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : Network Abuse ë&lsqauo;´ë&lsqauo;¹
ì „í™"번호 : +82-2-2089-0101
전자우편 : security@bora.net

--------------------------------------------------------------------------------

조회하ì&lsqauo;  IPv4주소ëŠ" 위의 관리대행자로부터 아래의 사용자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 112.216.128.0 - 112.216.143.255 (/20)
네트워크 이름 : BORANET-INFRA
기관명 : 주ì&lsqauo;íšŒì‚¬ 엘지유í"ŒëŸ¬ìŠ¤
기관고유번호 : ORG572
주소 : 서울 ì¤'구 남대문로5ê°€
우편번호 : 100-095
í• ë&lsqauo;¹ë‚´ì—­ ë"±ë¡ì¼ : 20110207
공개여부 : N

[ 네트워크 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
기관명 : BORANET
주소 : 서울 ì¤'구 남대문로5ê°€
우편번호 : 100-095
전자우편 : ipadm@lguplus.co.kr


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 112.216.0.0 - 112.223.255.255 (/13)
Service Name : BORANET
Organization Name : LG DACOM Corporation
Organization ID : ORG572
Address : 827, Seoul Jung-gu Namdaemunno 5(o)-ga
Zip Code : 100-095
Registration Date : 20090216

[ Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-6928-3087
E-Mail : ipadm@lguplus.co.kr

[ Tech Contact Information ]
Name : IP ADMIN
Phone : +82-2-6928-3087
E-Mail : ipadm@lguplus.co.kr

[ Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-2089-0101
E-Mail : security@bora.net

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 112.216.128.0 - 112.216.143.255 (/20)
Network Name : BORANET-INFRA
Organization Name : LG DACOM Corporation
Organization ID : ORG572
Address : Seoul Jung-gu Namdaemunno 5(o)-ga
Zip Code : 100-095
Registration Date : 20110207
Publishes : N

[ Technical Contact Information ]
Organization Name : LG DACOM Corporation
Address : Seoul Jung-gu Namdaemunno 5(o)-ga
Zip Code : 100-095
E-Mail : ipadm@lguplus.co.kr


상기 ì •ë³´ëŠ" UTF-8 인ì½"ë"©ë˜ì–´ 서비스되고 있습ë&lsqauo;ˆë&lsqauo;¤.
EUC-KR 인ì½"ë"© 서비스ëŠ" oldwhois.kisa.or.kr에서 서비스 되고 있습ë&lsqauo;ˆë&lsqauo;¤.
The above information is encoded with UTF-8
EUC-KR encoding WHOIS is being serviced in this URL:oldwhois.kisa.or.kr

- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 31.210.127.158

Hi,

The IP 31.210.127.158 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 31.210.127.158:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '31.210.127.0 - 31.210.127.255'

inetnum: 31.210.127.0 - 31.210.127.255
netname: SAYFA-NET
descr: INTER NET BILGISAYAR LTD STI
country: TR
admin-c: SN3028-RIPE
tech-c: SN3028-RIPE
status: ASSIGNED PA
mnt-by: AS42926-MNT
source: RIPE # Filtered

person: Sayfa Net
address: adres mevcut degildir
address: musteri bilgisi icin email atiniz
address: Istanbul
address: Turkey, TR
phone: +90 (000) 000 00 00
fax-no: +90 (000) 000 00 00
nic-hdl: SN3028-RIPE
mnt-by: ISTANBULDC-MNT
abuse-mailbox: ripe26@sayfa.net
source: RIPE # Filtered

% Information related to '31.210.127.0/24AS42926'

route: 31.210.127.0/24
descr: AS42926-NETWORK
origin: AS42926
mnt-by: AS42926-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.68.1 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 118.218.197.140

Hi,

The IP 118.218.197.140 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 118.218.197.140:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.nic.or.kr]
[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query: 118.218.197.140

# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 118.216.0.0 - 118.223.255.255 (/13)
서비스명 : broadNnet
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
기관고유번호 : ORG3930
주소 : 서울 ì¤'구 남대문로5ê°€ 267번지 SK남산빌ë"©
우편번호 : 100-711
í• ë&lsqauo;¹ì¼ìž : 20071026

[ IPv4주소 책임자 정보 ]
이름 : 관리자
ì „í™"번호 : +82-2-106-2
전자우편 : ip-adm@skbroadband.com

[ IPv4주소 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 관리자
ì „í™"번호 : +82-2-106-2
전자우편 : ip-adm@skbroadband.com

[ 스팸 해킹 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 관리자
ì „í™"번호 : +82-2-106-2
전자우편 : abuse@skbroadband.com

--------------------------------------------------------------------------------

조회하ì&lsqauo;  IPv4주소에 대한 위 관리대행자의 사용자 í• ë&lsqauo;¹ì •ë³´ê°€ 존재하지 않습ë&lsqauo;ˆë&lsqauo;¤.


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 118.216.0.0 - 118.223.255.255 (/13)
Service Name : broadNnet
Organization Name : SK Broadband Co Ltd
Organization ID : ORG3930
Address : 267, Seoul Namdaemunno 5(o)-ga Jung-gu SK NamsanGreen Bldg.
Zip Code : 100-711
Registration Date : 20071026

[ Admin Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Tech Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Network Abuse Contact Information ]
Name : manager
Phone : +82-2-106-2
E-Mail : abuse@skbroadband.com


상기 ì •ë³´ëŠ" UTF-8 인ì½"ë"©ë˜ì–´ 서비스되고 있습ë&lsqauo;ˆë&lsqauo;¤.
EUC-KR 인ì½"ë"© 서비스ëŠ" oldwhois.kisa.or.kr에서 서비스 되고 있습ë&lsqauo;ˆë&lsqauo;¤.
The above information is encoded with UTF-8
EUC-KR encoding WHOIS is being serviced in this URL:oldwhois.kisa.or.kr

- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 223.4.89.116

Hi,

The IP 223.4.89.116 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 223.4.89.116:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '223.4.0.0 - 223.7.255.255'

inetnum: 223.4.0.0 - 223.7.255.255
netname: ALIBABA-CN-NET
descr: Hangzhou Alibaba Advertising Co.,Ltd.
descr: No.699, Wangshang RD., Hangzhou, China
country: CN
admin-c: ZM678-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: hm-changed@apnic.net 20090122
status: ALLOCATED PORTABLE
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Shuo Yu
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: shuo.yus@alibaba-inc.com
e-mail: shuo.yus@aliyun-inc.com
nic-hdl: ZM678-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20110614
source: APNIC

person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: guoxin.gao@aliyun-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20130705
source: APNIC

person: security trouble
e-mail: cloud-cc-sqcloud@list.alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen’er Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
changed: ipas@cnnic.cn 20130708
source: APNIC

person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: guowei.pangw@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20130709
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (WHOIS1)

Regards,

Fail2Ban

Saturday, 21 September 2013

[Fail2Ban] SSH: banned 82.165.134.33

Hi,

The IP 82.165.134.33 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 82.165.134.33:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '82.165.128.0 - 82.165.143.255'

% Abuse contact for '82.165.128.0 - 82.165.143.255' is 'abuse@oneandone.net'

inetnum: 82.165.128.0 - 82.165.143.255
netname: SCHLUND-CUSTOMERS
descr: 1&1 Internet AG
country: DE
admin-c: IPAD-RIPE
tech-c: IPOP-RIPE
remarks: INFRA-AW
remarks: in case of abuse or spam, please mailto: abuse@oneandone.net
status: ASSIGNED PA
mnt-by: AS8560-MNT
mnt-lower: AS8560-MNT
mnt-domains: AS8560-MNT
mnt-routes: AS8560-MNT
source: RIPE # Filtered

role: IP Administration
address: 1&1 Internet AG
admin-c: AFI5-RIPE
admin-c: RME9-RIPE
admin-c: JR2342-RIPE
admin-c: KHO13-RIPE
admin-c: LTO3-RIPE
admin-c: ZIG-RIPE
admin-c: MI-RIPE
admin-c: MINK-RIPE
admin-c: VR-RIPE
tech-c: AFI5-RIPE
tech-c: RME9-RIPE
tech-c: JR2342-RIPE
tech-c: KHO13-RIPE
tech-c: LTO3-RIPE
nic-hdl: IPAD-RIPE
abuse-mailbox: abuse@oneandone.net
mnt-by: AS8560-MNT
source: RIPE # Filtered

role: IP Operations
address: 1&1 Internet AG
admin-c: AFI5-RIPE
admin-c: RME9-RIPE
admin-c: JR2342-RIPE
admin-c: KHO13-RIPE
admin-c: LTO3-RIPE
tech-c: AFI5-RIPE
tech-c: RME9-RIPE
tech-c: JR2342-RIPE
tech-c: KHO13-RIPE
tech-c: LTO3-RIPE
nic-hdl: IPOP-RIPE
abuse-mailbox: abuse@oneandone.net
mnt-by: AS8560-MNT
source: RIPE # Filtered

% Information related to '82.165.128.0/21AS8560'

route: 82.165.128.0/21
descr: AS8560 RIPE more specific
origin: AS8560
org: ORG-SA12-RIPE
mnt-by: AS8560-MNT
mnt-lower: AS8560-MNT
mnt-routes: AS8560-MNT
source: RIPE # Filtered

organisation: ORG-SA12-RIPE
org-name: 1&1 Internet AG
org-type: LIR
address: 1&1 Internet AG Axel Fischer Brauerstr.48 76135 Karlsruhe GERMANY
phone: +49 721 91374 0
fax-no: +49 721 91374 212
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: AS8560-MNT
mnt-ref: SCHLUND-MNT
mnt-by: RIPE-NCC-HM-MNT
admin-c: IPAD-RIPE
admin-c: RME9-RIPE
admin-c: AFI5-RIPE
admin-c: JR2342-RIPE
abuse-c: ABDE2-RIPE
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.68.1 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 123.215.15.156

Hi,

The IP 123.215.15.156 has just been banned by Fail2Ban after
6 attempts against SSH.


Here are more information about 123.215.15.156:

[Querying whois.apnic.net]
[Redirected to whois.nic.or.kr]
[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query: 123.215.15.156

# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 123.212.0.0 - 123.215.255.255 (/14)
서비스명 : broadNnet
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
기관고유번호 : ORG3930
주소 : 서울 ì¤'구 남대문로5ê°€ 267번지 SK남산빌ë"©
우편번호 : 100-711
í• ë&lsqauo;¹ì¼ìž : 20070212

[ IPv4주소 책임자 정보 ]
이름 : 관리자
ì „í™"번호 : +82-2-106-2
전자우편 : ip-adm@skbroadband.com

[ IPv4주소 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 관리자
ì „í™"번호 : +82-2-106-2
전자우편 : ip-adm@skbroadband.com

[ 스팸 해킹 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 관리자
ì „í™"번호 : +82-2-106-2
전자우편 : abuse@skbroadband.com

--------------------------------------------------------------------------------

조회하ì&lsqauo;  IPv4주소ëŠ" 위의 관리대행자로부터 아래의 사용자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 123.215.0.0 - 123.215.15.255 (/20)
네트워크 이름 : HANANET-INFRA
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
기관고유번호 : ORG3930
주소 : 서울 ì¤'구 남대문로5ê°€ 267번지 SK남산빌ë"©
우편번호 : 100-711
í• ë&lsqauo;¹ë‚´ì—­ ë"±ë¡ì¼ : 20070419
공개여부 : Y

[ 네트워크 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 관리자
기관명 : broadNnet
주소 : 서울 ì¤'구 남대문로5ê°€ 267번지 SK남산빌ë"©
우편번호 : 100-711
ì „í™"번호 : +82-2-106-2
전자우편 : ip-adm@skbroadband.com


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 123.212.0.0 - 123.215.255.255 (/14)
Service Name : broadNnet
Organization Name : SK Broadband Co Ltd
Organization ID : ORG3930
Address : 267, Seoul Namdaemunno 5(o)-ga Jung-gu SK NamsanGreen Bldg.
Zip Code : 100-711
Registration Date : 20070212

[ Admin Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Tech Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Network Abuse Contact Information ]
Name : manager
Phone : +82-2-106-2
E-Mail : abuse@skbroadband.com

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 123.215.0.0 - 123.215.15.255 (/20)
Network Name : HANANET-INFRA
Organization Name : SK Broadband Co Ltd
Organization ID : ORG3930
Address : 267, Seoul Namdaemunno 5(o)-ga Jung-gu SK NamsanGreen Bldg.
Zip Code : 100-711
Registration Date : 20070419
Publishes : Y

[ Technical Contact Information ]
Name : IP manager
Organization Name : SK Broadband Co Ltd
Address : 267, Seoul Namdaemunno 5(o)-ga Jung-gu SK NamsanGreen Bldg.
Zip Code : 100-711
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com


상기 ì •ë³´ëŠ" UTF-8 인ì½"ë"©ë˜ì–´ 서비스되고 있습ë&lsqauo;ˆë&lsqauo;¤.
EUC-KR 인ì½"ë"© 서비스ëŠ" oldwhois.kisa.or.kr에서 서비스 되고 있습ë&lsqauo;ˆë&lsqauo;¤.
The above information is encoded with UTF-8
EUC-KR encoding WHOIS is being serviced in this URL:oldwhois.kisa.or.kr

- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 85.25.242.226

Hi,

The IP 85.25.242.226 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 85.25.242.226:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '85.25.0.0 - 85.25.255.255'

% Abuse contact for '85.25.0.0 - 85.25.255.255' is 'abuse@plusserver.de'

inetnum: 85.25.0.0 - 85.25.255.255
netname: DE-INTERGENIA-20050301
descr: intergenia AG
country: DE
org: ORG-iGCK1-RIPE
admin-c: TS12776-RIPE
tech-c: IT1309-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: INTERGENIA-MNT
mnt-routes: INTERGENIA-MNT
source: RIPE # Filtered

organisation: ORG-iGCK1-RIPE
org-name: intergenia AG
org-type: LIR
address: PlusServer AG
address: Network Management
address: Daimlerstr.9-11
address: 50354
address: Huerth
address: GERMANY
phone: +49 2233 6120
fax-no: +49 2233 612 53500
mnt-ref: INTERGENIA-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
admin-c: MOPS1337-RIPE
admin-c: ANPS1-RIPE
admin-c: ADPS-RIPE
admin-c: CDPS-RIPE
admin-c: TS12776-RIPE
admin-c: NPA10-RIPE
admin-c: JO1299-RIPE
abuse-c: AIA48-RIPE
source: RIPE # Filtered

role: Intergenia Technik
address: intergenia AG
address: Daimlerstr. 9-11
address: 50354 Huerth
fax-no: +49 2233 612 53500
remarks: trouble: Information Contact info@plusserver.de
remarks: trouble: Abuse Contact abuse@plusserver.de
remarks: trouble: for more information http://www.plusserver.de
admin-c: NPA10-RIPE
tech-c: NPA10-RIPE
nic-hdl: IT1309-RIPE
mnt-by: INTERGENIA-MNT
source: RIPE # Filtered
abuse-mailbox: abuse@plusserver.de

person: Thomas Strohe
address: Daimlerstr. 9-11
address: 50354 Huerth
address: Germany
phone: +49 2233 612 0
nic-hdl: TS12776-RIPE
mnt-by: INTERGENIA-MNT
source: RIPE # Filtered

% Information related to '85.25.0.0/16AS8972'

route: 85.25.0.0/16
descr: PlusServer AG
origin: AS8972
mnt-by: INTERGENIA-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.68.1 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 123.215.15.156

Hi,

The IP 123.215.15.156 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 123.215.15.156:

[Querying whois.apnic.net]
[Redirected to whois.nic.or.kr]
[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query: 123.215.15.156

# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 123.212.0.0 - 123.215.255.255 (/14)
서비스명 : broadNnet
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
기관고유번호 : ORG3930
주소 : 서울 ì¤'구 남대문로5ê°€ 267번지 SK남산빌ë"©
우편번호 : 100-711
í• ë&lsqauo;¹ì¼ìž : 20070212

[ IPv4주소 책임자 정보 ]
이름 : 관리자
ì „í™"번호 : +82-2-106-2
전자우편 : ip-adm@skbroadband.com

[ IPv4주소 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 관리자
ì „í™"번호 : +82-2-106-2
전자우편 : ip-adm@skbroadband.com

[ 스팸 해킹 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 관리자
ì „í™"번호 : +82-2-106-2
전자우편 : abuse@skbroadband.com

--------------------------------------------------------------------------------

조회하ì&lsqauo;  IPv4주소ëŠ" 위의 관리대행자로부터 아래의 사용자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 123.215.0.0 - 123.215.15.255 (/20)
네트워크 이름 : HANANET-INFRA
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
기관고유번호 : ORG3930
주소 : 서울 ì¤'구 남대문로5ê°€ 267번지 SK남산빌ë"©
우편번호 : 100-711
í• ë&lsqauo;¹ë‚´ì—­ ë"±ë¡ì¼ : 20070419
공개여부 : Y

[ 네트워크 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 관리자
기관명 : broadNnet
주소 : 서울 ì¤'구 남대문로5ê°€ 267번지 SK남산빌ë"©
우편번호 : 100-711
ì „í™"번호 : +82-2-106-2
전자우편 : ip-adm@skbroadband.com


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 123.212.0.0 - 123.215.255.255 (/14)
Service Name : broadNnet
Organization Name : SK Broadband Co Ltd
Organization ID : ORG3930
Address : 267, Seoul Namdaemunno 5(o)-ga Jung-gu SK NamsanGreen Bldg.
Zip Code : 100-711
Registration Date : 20070212

[ Admin Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Tech Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Network Abuse Contact Information ]
Name : manager
Phone : +82-2-106-2
E-Mail : abuse@skbroadband.com

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 123.215.0.0 - 123.215.15.255 (/20)
Network Name : HANANET-INFRA
Organization Name : SK Broadband Co Ltd
Organization ID : ORG3930
Address : 267, Seoul Namdaemunno 5(o)-ga Jung-gu SK NamsanGreen Bldg.
Zip Code : 100-711
Registration Date : 20070419
Publishes : Y

[ Technical Contact Information ]
Name : IP manager
Organization Name : SK Broadband Co Ltd
Address : 267, Seoul Namdaemunno 5(o)-ga Jung-gu SK NamsanGreen Bldg.
Zip Code : 100-711
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com


상기 ì •ë³´ëŠ" UTF-8 인ì½"ë"©ë˜ì–´ 서비스되고 있습ë&lsqauo;ˆë&lsqauo;¤.
EUC-KR 인ì½"ë"© 서비스ëŠ" oldwhois.kisa.or.kr에서 서비스 되고 있습ë&lsqauo;ˆë&lsqauo;¤.
The above information is encoded with UTF-8
EUC-KR encoding WHOIS is being serviced in this URL:oldwhois.kisa.or.kr

- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.64.114.103

Hi,

The IP 218.64.114.103 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 218.64.114.103:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.64.114.96 - 218.64.114.127'

inetnum: 218.64.114.96 - 218.64.114.127
netname: XY-yushui-borough-agriculture-bureau
descr: Jiangxi province,xinyu city,yushui-borough-agriculture-bureau
country: CN
admin-c: XY1-AP
tech-c: WZ377-AP
changed: lixm@public1.nc.jx.cn 20041116
mnt-by: MAINT-IP-WWF
status: ASSIGNED NON-PORTABLE
source: APNIC

person: Wanshu Zhou
address: Data Communication Bureau MPT
address: 40 Xueyuan Rd.
address: Beijing China 100083
country: CN
phone: +86-10-205-3992
fax-no: +86-10-205-3994
e-mail: zhouws@public.bta.net.cn
nic-hdl: WZ377-AP
notify: zhouws@public.bta.net.cn
notify: zhang@usai.asiainfo.com
mnt-by: MAINT-NULL
changed: zhang@usai.asiainfo.com 19960115
changed: hm-changed@apnic.net 20040927
source: APNIC
changed: hm-changed@apnic.net 20111122

person: Xu Yongzhong
address: Data Communication Bireau
address: Ministry of Posts and Telecommunications
address: A12 Xin-jie-kou-wai Street
address: Beijing 100088
country: CN
phone: +86-10-62053991
fax-no: +86-10-62053995
e-mail: yzxu@publicf.bta.net.cn
nic-hdl: XY1-AP
mnt-by: MAINT-NULL
changed: hostmaster@apnic.net 19960319
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 112.78.3.234

Hi,

The IP 112.78.3.234 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 112.78.3.234:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '112.78.0.0 - 112.78.15.255'

inetnum: 112.78.0.0 - 112.78.15.255
netname: ODS-VNNIC-VN
descr: Cong ty Co phan Dich vu du lieu Truc tuyen
descr: Online data services JSC
descr: 123 Truong Dinh, dist 3, HCMC
country: VN
admin-c: HTV3-AP
tech-c: HNT6-AP
status: ALLOCATED PORTABLE
remarks: send spam and abuse report to vanht@ods.vn
mnt-by: MAINT-VN-VNNIC
mnt-lower: MAINT-VN-VNNIC
changed: hm-changed@apnic.net 20100205
source: APNIC

person: Hoang Ngoc Tuyen
nic-hdl: HNT6-AP
e-mail: tuyenhn@ods.vn
address: 123 Truong Dinh, District3, HCMC
phone: +84-8-62888999
fax-no: +84-8-39320299
country: vn
changed: hm-changed@vnnic.net.vn 20100203
mnt-by: MAINT-VN-VNNIC
source: APNIC

person: Huynh Trong Van
nic-hdl: HTV3-AP
e-mail: vanht@ods.vn
address: 123 Truong Dinh, District3, HCMC
phone: +84-8-62888999
fax-no: +84-8-39320299
country: vn
changed: hm-changed@vnnic.net.vn 20100203
mnt-by: MAINT-VN-VNNIC
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 211.147.80.2

Hi,

The IP 211.147.80.2 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 211.147.80.2:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '211.147.64.0 - 211.147.95.255'

inetnum: 211.147.64.0 - 211.147.95.255
netname: DSNET
descr: Shanghai Data Solution Co., Ltd.
country: CN
admin-c: WH127-AP
tech-c: YA31-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20010801
changed: ipas@cnnic.net.cn 20070525
status: ALLOCATED PORTABLE
source: APNIC

person: Wu Haochen
address: Rm. 3301-3307, 3trd Building, 498 Guoshoujing Rd.
country: CN
phone: +86-21-50800818-223
fax-no: +86-21-50800926
e-mail: wuhc@shuxun.net
nic-hdl: WH127-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20010625
source: APNIC

person: Yao Alex
address: Rm. 3301-3307, 3trd Building, 498 Guoshoujing Rd.
country: CN
phone: +86-21-50800818-112
fax-no: +86-21-50800926
e-mail: alexyao@shuxun.net
nic-hdl: YA31-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20010716
source: APNIC

% Information related to '211.147.64.0/19AS17779'

route: 211.147.64.0/19
descr: Shanghai Data Solution Co., Ltd.
origin: AS17779
notify: zhigang.he@sst.net.cn
mnt-by: MAINT-CNNIC-AP
changed: hm-changed@apnic.net 20010819
changed: ipas@cnnic.net.cn 20070525
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 212.68.54.178

Hi,

The IP 212.68.54.178 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 212.68.54.178:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '212.68.54.0 - 212.68.54.255'

inetnum: 212.68.54.0 - 212.68.54.255
netname: Mars-Customer77
descr: Mars-Customer77
remarks: www.marsglobaldatacenter.com
country: TR
org: ORG-MGDS1-RIPE
admin-c: MN4961-RIPE
tech-c: MN4961-RIPE
status: ASSIGNED PA
mnt-by: MNT-MARSNET
source: RIPE # Filtered

organisation: ORG-MGDS1-RIPE
org-name: Mars Global Datacenter Services LLC
remarks: www.marsglobaldatacenter.com
org-type: OTHER
address: Pobrezni 118, Prague, Czech Republic Turkey
mnt-ref: MNT-MARSNET
mnt-by: MNT-MARSNET
source: RIPE # Filtered

person: Mars Noc
address: Nadiama St. No:28 Turkey
remarks: www.marsglobaldatacenter.com
mnt-by: MNT-MARSNET
phone: +90 213 437 87 87
nic-hdl: MN4961-RIPE
source: RIPE # Filtered

% Information related to '212.68.54.0/24AS42910'

route: 212.68.54.0/24
descr: MarsGlobal1-Net1
origin: AS42910
mnt-by: MNT-MARSNET
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.68.1 (WHOIS1)

Regards,

Fail2Ban

Friday, 20 September 2013

[Fail2Ban] SSH: banned 24.120.206.135

Hi,

The IP 24.120.206.135 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 24.120.206.135:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 24.120.206.135"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=24.120.206.135?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 24.120.0.0 - 24.120.255.255
CIDR: 24.120.0.0/16
OriginAS:
NetName: NETBLK-LV-CBS-24-120-0-0
NetHandle: NET-24-120-0-0-1
Parent: NET-24-0-0-0-0
NetType: Direct Allocation
Comment: For legal requests/assistance please use the following contact information:
Comment:
Comment: Cox Subpoena Phone: 404-269-0100
Comment:
Comment: Cox Subpoena Info: http://www.cox.com/policy/leainformation/default.asp
RegDate: 2001-02-21
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-24-120-0-0-1

OrgName: Cox Communications Inc.
OrgId: CXA
Address: 1400 Lake Hearn Dr.
City: Atlanta
StateProv: GA
PostalCode: 30319
Country: US
RegDate:
Updated: 2012-10-04
Comment: For legal requests/assistance please use the
Comment: following contact information:
Comment: Cox Subpoena Phone: 404-269-0100
Comment: Cox Subpoena Info: http://www.cox.com/policy/leainformation/default.asp
Ref: http://whois.arin.net/rest/org/CXA

OrgAbuseHandle: IC146-ARIN
OrgAbuseName: Cox Communications Inc
OrgAbusePhone: +1-404-269-7626
OrgAbuseEmail: abuse@cox.net
OrgAbuseRef: http://whois.arin.net/rest/poc/IC146-ARIN

OrgTechHandle: BAABO-ARIN
OrgTechName: BA, Aboubakr
OrgTechPhone: +1-404-269-7626
OrgTechEmail: abuse@cox.net
OrgTechRef: http://whois.arin.net/rest/poc/BAABO-ARIN

OrgTechHandle: RWA196-ARIN
OrgTechName: Waldron, Roderick
OrgTechPhone: +1-404-269-7626
OrgTechEmail: abuse@cox.net
OrgTechRef: http://whois.arin.net/rest/poc/RWA196-ARIN

RTechHandle: IC146-ARIN
RTechName: Cox Communications Inc
RTechPhone: +1-404-269-7626
RTechEmail: abuse@cox.net
RTechRef: http://whois.arin.net/rest/poc/IC146-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 190.220.62.5

Hi,

The IP 190.220.62.5 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 190.220.62.5:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-09-20 20:13:18 (BRT -03:00)

inetnum: 190.220.0/17
status: allocated
aut-num: N/A
owner: Techtel LMDS Comunicaciones Interactivas S.A.
ownerid: AR-TLCI-LACNIC
responsible: Administrador de Direcciones IP - CLARO
address: Garay, 34,
address: C1063AB - Buenos Aires -
country: AR
phone: +54 11 4000-3000 [3270]
owner-c: JPL3
tech-c: JPL3
abuse-c: JPL3
inetrev: 190.220.62/24
nserver: NS1.TELMEX.NET.AR
nsstat: 20130919 AA
nslastaa: 20130919
nserver: NS2.TELMEX.NET.AR
nsstat: 20130919 AA
nslastaa: 20130919
created: 20071030
changed: 20071030

nic-hdl: JPL3
person: Sebastian Motta
e-mail: sebastian.motta@CLARO.COM.AR
address: Av. Juan de Garay, 34,
address: C1063ABN - Buenos Aires -
country: AR
phone: +54 11 4000 [3000]
created: 20061121
changed: 20120913

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 162.213.188.50

Hi,

The IP 162.213.188.50 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 162.213.188.50:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 162.213.188.50"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=162.213.188.50?showDetails=true&showARIN=false&ext=netref2
#

A&A Marketing AA-MARKETING (NET-162-213-188-11-1) 162.213.188.11 - 162.213.188.60
Chi Networks QTOPI2 (NET-162-213-188-0-1) 162.213.188.0 - 162.213.191.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 121.196.16.71

Hi,

The IP 121.196.16.71 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 121.196.16.71:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '121.196.0.0 - 121.199.255.255'

inetnum: 121.196.0.0 - 121.199.255.255
netname: ALIBABA-CN-NET
descr: Hangzhou Alibaba Advertising Co.,Ltd.
descr: No.699, Wangshang RD., Hangzhou, China
country: CN
admin-c: ZM678-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: hm-changed@apnic.net 20090122
status: ALLOCATED PORTABLE
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Shuo Yu
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: shuo.yus@alibaba-inc.com
e-mail: shuo.yus@aliyun-inc.com
nic-hdl: ZM678-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20110614
source: APNIC

person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: guoxin.gao@aliyun-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20130705
source: APNIC

person: security trouble
e-mail: cloud-cc-sqcloud@list.alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen’er Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
changed: ipas@cnnic.cn 20130708
source: APNIC

person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: guowei.pangw@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20130709
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 114.247.134.7

Hi,

The IP 114.247.134.7 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 114.247.134.7:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '114.240.0.0 - 114.255.255.255'

inetnum: 114.240.0.0 - 114.255.255.255
netname: UNICOM-BJ
descr: China Unicom Beijing province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: SY21-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-BJ
mnt-routes: MAINT-CNCGROUP-RR
remarks: service provider
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
mnt-irt: IRT-CU-CN
changed: hm-changed@apnic.net 20080624
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

irt: IRT-CU-CN
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
e-mail: zhouxm@chinaunicom.cn
abuse-mailbox: zhouxm@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
mnt-by: MAINT-CNCGROUP
changed: zhouxm@chinaunicom.cn 20101110
changed: hm-changed@apnic.net 20101116
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@cnc-noc.net
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: abuse@cnc-noc.net 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: sun ying
address: fu xing men nei da jie 97, Xicheng District
address: Beijing 100800
country: CN
phone: +86-10-66030657
fax-no: +86-10-66078815
e-mail: hostmast@publicf.bta.net.cn
nic-hdl: SY21-AP
mnt-by: MAINT-CNCGROUP-BJ
changed: suny@publicf.bta.net.cn 19980824
changed: hm-changed@apnic.net 20060717
changed: hostmast@publicf.bta.net.cn 20090630
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 113.107.233.100

Hi,

The IP 113.107.233.100 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 113.107.233.100:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '113.96.0.0 - 113.111.255.255'

inetnum: 113.96.0.0 - 113.111.255.255
netname: CHINANET-GD
descr: CHINANET Guangdong province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: IC83-AP
remarks: service provider
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-GD
mnt-routes: MAINT-CHINANET-GD
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20081103
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: ipadm@189.cn
address: NO.1,RO.DONGYUANHENG,YUEXIUNAN,GUANGZHOU
phone: +86-20-83877223
fax-no: +86-20-83877223
country: CN
changed: ipadm@189.cn 20110418
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse_gdnoc@189.cn
abuse-mailbox: abuse_gdnoc@189.cn
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.142.106.34

Hi,

The IP 61.142.106.34 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 61.142.106.34:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.140.0.0 - 61.146.255.255'

inetnum: 61.140.0.0 - 61.146.255.255
netname: CHINANET-GD
descr: CHINANET Guangdong province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: IC83-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-GD
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20040914
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: ipadm@189.cn
address: NO.1,RO.DONGYUANHENG,YUEXIUNAN,GUANGZHOU
phone: +86-20-83877223
fax-no: +86-20-83877223
country: CN
changed: ipadm@189.cn 20110418
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse_gdnoc@189.cn
abuse-mailbox: abuse_gdnoc@189.cn
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (WHOIS2)

Regards,

Fail2Ban

Thursday, 19 September 2013

[Fail2Ban] SSH: banned 188.132.176.143

Hi,

The IP 188.132.176.143 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 188.132.176.143:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '188.132.176.0 - 188.132.176.255'

inetnum: 188.132.176.0 - 188.132.176.255
netname: Mars-Customer192
descr: Mars-Customer192
remarks: www.marsglobaldatacenter.com
country: TR
org: ORG-MGDS1-RIPE
admin-c: MN4961-RIPE
tech-c: MN4961-RIPE
status: ASSIGNED PA
mnt-by: MNT-MARSNET
source: RIPE # Filtered

organisation: ORG-MGDS1-RIPE
org-name: Mars Global Datacenter Services LLC
remarks: www.marsglobaldatacenter.com
org-type: OTHER
address: Pobrezni 118, Prague, Czech Republic Turkey
mnt-ref: MNT-MARSNET
mnt-by: MNT-MARSNET
source: RIPE # Filtered

person: Mars Noc
address: Nadiama St. No:28 Turkey
remarks: www.marsglobaldatacenter.com
mnt-by: MNT-MARSNET
phone: +90 213 437 87 87
nic-hdl: MN4961-RIPE
source: RIPE # Filtered

% Information related to '188.132.176.0/24AS42910'

route: 188.132.176.0/24
descr: MarsGlobal1-Net1
origin: AS42910
mnt-by: MNT-MARSNET
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.68.1 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 112.137.164.237

Hi,

The IP 112.137.164.237 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 112.137.164.237:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '112.137.160.0 - 112.137.175.254'

inetnum: 112.137.160.0 - 112.137.175.254
netname: TM-VADS-DC
descr: TM VADS DC Hosting
country: MY
admin-c: MSS13-AP
tech-c: SLMY1-AP
status: ALLOCATED NON-PORTABLE
notify: idc@vads.com
mnt-by: MAINT-MY-EASTGATE
mnt-lower: MAINT-MY-EASTGATE
mnt-routes: MAINT-MY-EASTGATE
mnt-irt: IRT-EASTGATE-MY
changed: msobri@tmnet.com.my 20101112
source: APNIC

irt: IRT-EASTGATE-MY
address: 3rd Floor, TM IT Complex
address: 3300 Lingkaran Usahawan 1 Timur
address: 63000 Cyber Jaya Selangor
e-mail: idc@vads.com
abuse-mailbox: abuse@netmyne.com
admin-c: MSS13-AP
tech-c: SLMY1-AP
mnt-by: MAINT-MY-EASTGATE
changed: hm-changed@apnic.net 20101116
source: APNIC

person: Mohd Sobri Salamon
address: TM IT Complex
country: MY
phone: +603-83184634
e-mail: idc@vads.com
abuse-mailbox: abuse@netmyne.com
nic-hdl: MSS13-AP
mnt-by: MAINT-MY-EASTGATE
changed: idc@vads.com 20130313
source: APNIC

person: Syahrul Liza Mat Yaabit
address: TM IT COMPLEX
country: MY
phone: +603-83184634
e-mail: idc@vads.com
nic-hdl: SLMY1-AP
mnt-by: MAINT-MY-EASTGATE
changed: idc@vads.com 20130313
source: APNIC

% Information related to '112.137.160.0/20AS17971'

route: 112.137.160.0/20
descr: TM VADS DC route-object
descr: TM IT Complex Cyberjaya
country: MY
origin: AS17971
notify: idc@netmyne.com
mnt-by: MAINT-MY-EASTGATE
changed: msobri@tmnet.com.my 20101112
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (WHOIS4)

Regards,

Fail2Ban

Wednesday, 18 September 2013

[Fail2Ban] SSH: banned 218.108.0.91

Hi,

The IP 218.108.0.91 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 218.108.0.91:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.108.0.0 - 218.109.255.255'

inetnum: 218.108.0.0 - 218.109.255.255
netname: WASU
descr: WASU TV & Communication Holding Co.,Ltd.
descr: 6/F, Jian Gong Building, NO.20 Wen San Road, Hangzhou,
descr: Zhejiang province, P.R.China 310012
country: CN
admin-c: XZ1291-AP
tech-c: TF142-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
changed: hm-changed@apnic.net 20080123
source: APNIC

person: Tao Feng
nic-hdl: TF142-AP
e-mail: fengtao@chinahcn.com
address: No.9 ShuGuang Road,HangZhou City,ZheJiang Province
phone: +86-0571-28958888-8108
fax-no: +86-0571-85214455
country: CN
changed: ipas@cnnic.cn 20100513
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Xianlong Zeng
nic-hdl: XZ1291-AP
e-mail: allon@chinahcn.com
address: No.9 ShuGuang Road,HangZhou City,ZheJiang Province
phone: +86-0571-28958852
fax-no: +86-0571-85214455
country: CN
changed: ipas@cnnic.cn 20071123
mnt-by: MAINT-CNNIC-AP
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.64.114.103

Hi,

The IP 218.64.114.103 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 218.64.114.103:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.64.114.96 - 218.64.114.127'

inetnum: 218.64.114.96 - 218.64.114.127
netname: XY-yushui-borough-agriculture-bureau
descr: Jiangxi province,xinyu city,yushui-borough-agriculture-bureau
country: CN
admin-c: XY1-AP
tech-c: WZ377-AP
changed: lixm@public1.nc.jx.cn 20041116
mnt-by: MAINT-IP-WWF
status: ASSIGNED NON-PORTABLE
source: APNIC

person: Wanshu Zhou
address: Data Communication Bureau MPT
address: 40 Xueyuan Rd.
address: Beijing China 100083
country: CN
phone: +86-10-205-3992
fax-no: +86-10-205-3994
e-mail: zhouws@public.bta.net.cn
nic-hdl: WZ377-AP
notify: zhouws@public.bta.net.cn
notify: zhang@usai.asiainfo.com
mnt-by: MAINT-NULL
changed: zhang@usai.asiainfo.com 19960115
changed: hm-changed@apnic.net 20040927
source: APNIC
changed: hm-changed@apnic.net 20111122

person: Xu Yongzhong
address: Data Communication Bireau
address: Ministry of Posts and Telecommunications
address: A12 Xin-jie-kou-wai Street
address: Beijing 100088
country: CN
phone: +86-10-62053991
fax-no: +86-10-62053995
e-mail: yzxu@publicf.bta.net.cn
nic-hdl: XY1-AP
mnt-by: MAINT-NULL
changed: hostmaster@apnic.net 19960319
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 122.224.130.147

Hi,

The IP 122.224.130.147 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 122.224.130.147:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '122.224.130.144 - 122.224.130.151'

inetnum: 122.224.130.144 - 122.224.130.151
netname: BOYI-NETWORK-LIMITED
country: CN
descr: ZHEJIANG BOYI Network Limited
descr:
admin-c: BY306-AP
tech-c: CH122-AP
status: ASSIGNED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20070807
mnt-by: MAINT-CN-CHINANET-ZJ-HZ
source: APNIC

role: CHINANET-ZJ Hangzhou
address: No.352 Tiyuchang Road,Hangzhou,Zhejiang.310003
country: CN
phone: +86-571-85157929
fax-no: +86-571-85102776
e-mail: anti_spam@mail.hz.zj.cn
remarks: send spam reports to anti_spam@mail.hz.zj.cn
remarks: and abuse reports to anti_spam@mail.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH54-AP
tech-c: CH54-AP
nic-hdl: CH122-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

person: biao yang
nic-hdl: BY306-AP
e-mail: DKHXTB@MAIL.ZJ.HZ.CN
address: Hangzhou,Zhejiang.Postcode:310000
phone: +86-571-87831312
country: CN
changed: auto-dbm@dcb.hz.zj.cn 20070725
mnt-by: MAINT-CN-CHINANET-ZJ-HZ
source: APNIC

% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)

Regards,

Fail2Ban