HideMyAss.com

Sunday, 24 November 2013

[Fail2Ban] SSH: banned 119.84.63.30

Hi,

The IP 119.84.63.30 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 119.84.63.30:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '119.84.0.0 - 119.87.255.255'

inetnum: 119.84.0.0 - 119.87.255.255
netname: CHINANET-CQ
descr: CHINANET Chongqing Province Network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: CQ235-AP
remarks: service provider
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20080129
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-CQ
mnt-routes: MAINT-CHINANET-CQ
source: APNIC

role: CHINANET CQ
address: The mainstreet 3 daping ,chongqing data communication bureau
country: CN
phone: +862368614888
fax-no: +862368602314
e-mail: abuse@cta.cq.cn
remarks: send spam reports to abuse@cta.cq.cn
remarks: and abuse reports to abuse@cta.cq.cn
admin-c: ZL235-AP
tech-c: ZL235-AP
nic-hdl: CQ235-AP
remarks: http://www.cta.cq.cn
notify: abuse@cta.cq.cn
mnt-by: MAINT-CHINANET-CQ
changed: abuse@cta.cq.cn 20030917
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

Saturday, 23 November 2013

[Fail2Ban] SSH: banned 220.181.82.213

Hi,

The IP 220.181.82.213 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 220.181.82.213:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '220.181.0.0 - 220.181.255.255'

inetnum: 220.181.0.0 - 220.181.255.255
netname: CHINANET-IDC-BJ
country: CN
descr: CHINANET Beijing province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
admin-c: CH93-AP
tech-c: HC55-AP
remarks: hostmaster is not for spam complaint,
remarks: please send spam complaint to anti-spam@ns.chinanet.cn.net
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINATELECOM-BJ
status: ALLOCATED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20030620
changed: hm-changed@apnic.net 20050715
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: Hostmaster of Beijing Telecom corporation CHINA TELECOM
nic-hdl: HC55-AP
e-mail: bjnic@bjtelecom.net
address: Beijing Telecom
address: No. 107 XiDan Beidajie, Xicheng District Beijing
phone: +86-010-58503461
fax-no: +86-010-58503054
country: cn
changed: bjnic@bjtelecom.net 20040115
mnt-by: MAINT-CHINATELECOM-BJ
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 221.203.71.132

Hi,

The IP 221.203.71.132 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 221.203.71.132:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '221.200.0.0 - 221.203.255.255'

inetnum: 221.200.0.0 - 221.203.255.255
netname: UNICOM-LN
descr: China Unicom Liaoning Province Network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: GZ84-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-LN
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
mnt-irt: IRT-CU-CN
changed: hm-changed@apnic.net 20030612
changed: hm-changed@apnic.net 20060126
changed: hm-changed@apnic.net 20090508
source: APNIC

irt: IRT-CU-CN
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
e-mail: zhouxm@chinaunicom.cn
abuse-mailbox: zhouxm@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
changed: zhouxm@chinaunicom.cn 20101110
changed: hm-changed@apnic.net 20101116
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@cnc-noc.net
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: abuse@cnc-noc.net 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Guangyu Zhan
nic-hdl: GZ84-AP
e-mail: abuse@online.ln.cn
address: DATA Communication Bureau of Liaoning Province,China
address: 38 Lianhe Road,Dadong District Shenyang 110044,China
phone: +86-24-22800809
fax-no: +86-24-22800077
country: CN
changed: jinjl@lntelecom.com 20090803
mnt-by: MAINT-CNCGROUP-LN
source: APNIC

% Information related to '221.200.0.0/14AS4837'

route: 221.200.0.0/14
descr: CNC Group CHINA169 Liaoning Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 203.201.42.237

Hi,

The IP 203.201.42.237 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 203.201.42.237:

[Querying whois.apnic.net]
[Redirected to whois.twnic.net]
[Querying whois.twnic.net]
[whois.twnic.net]

Netname: APT-TW
Netblock: 203.201.32.0/20

Administrator contact:
adm@aptg.com.tw

Technical contact:
spam@aptg.com.tw

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 211.42.249.127

Hi,

The IP 211.42.249.127 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 211.42.249.127:

[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 211.42.249.127


# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 211.42.224.0 - 211.42.255.255 (/19)
서비스명 : BORANET
기관명 : 주ì&lsqauo;íšŒì‚¬ 엘지유í"ŒëŸ¬ìŠ¤
기관고유번호 : ORG572
주소 : 서울특별ì&lsqauo;œ ì¤'구 소ì›"ë¡œ2길 30 (남대문로5ê°€)
우편번호 : 100-095
í• ë&lsqauo;¹ì¼ìž : 20030613

[ IPv4주소 책임자 정보 ]
이름 : IP주소관리자
ì „í™"번호 : +82-2-6928-3087
전자우편 : ipadm@lguplus.co.kr

[ IPv4주소 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : IP주소관리자
ì „í™"번호 : +82-2-6928-3087
전자우편 : ipadm@lguplus.co.kr

[ 스팸 해킹 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : Network Abuse ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-2089-0101
전자우편 : security@bora.net

--------------------------------------------------------------------------------

조회하ì&lsqauo;  IPv4주소ëŠ" 위의 관리대행자로부터 아래의 사용자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 211.42.248.0 - 211.42.251.255 (/22)
네트워크 이름 : BORANET-INFRA
기관명 : 주ì&lsqauo;íšŒì‚¬ 엘지유í"ŒëŸ¬ìŠ¤
기관고유번호 : ORG572
주소 : 서울특별ì&lsqauo;œ ì¤'구 소ì›"ë¡œ2길
우편번호 : 100-095
í• ë&lsqauo;¹ë‚´ì—­ ë"±ë¡ì¼ : 20110215
공개여부 : N

[ 네트워크 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
기관명 : BORANET
주소 : 서울특별ì&lsqauo;œ ì¤'구 소ì›"ë¡œ2길
우편번호 : 100-095
전자우편 : ipadm@lguplus.co.kr


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 211.42.224.0 - 211.42.255.255 (/19)
Service Name : BORANET
Organization Name : LG DACOM Corporation
Organization ID : ORG572
Address : 827, Seoul Jung-gu Sowol-ro 2-gil
Zip Code : 100-095
Registration Date : 20030613

[ Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-6928-3087
E-Mail : ipadm@lguplus.co.kr

[ Tech Contact Information ]
Name : IP ADMIN
Phone : +82-2-6928-3087
E-Mail : ipadm@lguplus.co.kr

[ Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-2089-0101
E-Mail : security@bora.net

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 211.42.248.0 - 211.42.251.255 (/22)
Network Name : BORANET-INFRA
Organization Name : LG DACOM Corporation
Organization ID : ORG572
Address : Seoul Jung-gu Sowol-ro 2-gil
Zip Code : 100-095
Registration Date : 20110215
Publishes : N

[ Technical Contact Information ]
Organization Name : LG DACOM Corporation
Address : Seoul Jung-gu Sowol-ro 2-gil
Zip Code : 100-095
E-Mail : ipadm@lguplus.co.kr


- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 188.190.98.6

Hi,

The IP 188.190.98.6 has just been banned by Fail2Ban after
6 attempts against SSH.


Here are more information about 188.190.98.6:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '188.190.96.0 - 188.190.127.255'

% Abuse contact for '188.190.96.0 - 188.190.127.255' is 'abusemail@infiumhost.com'

inetnum: 188.190.96.0 - 188.190.127.255
netname: INFIUM
descr: Infium LLC
descr: Datacenter Kharkov
country: UA
org: ORG-IL316-RIPE
admin-c: INF20-RIPE
tech-c: INF20-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: INFIUM-MNT
mnt-routes: INFIUM-MNT
mnt-domains: INFIUM-MNT
source: RIPE # Filtered

organisation: ORG-IL316-RIPE
org-name: Infium LLC
org-type: LIR
address: Infium LLC
address: Valerii Lolin
address: Traktorostroiteley 156/41 office 301
address: Kharkov
address: 61129
address: UKRAINE
phone: +380639797654
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: INFIUM-UAB-MNT
mnt-by: RIPE-NCC-HM-MNT
abuse-mailbox: abusemail@infiumhost.com
abuse-c: INF200-RIPE
source: RIPE # Filtered

person: Infium Ltd
address: 61129, Kharkov, Ukraine
address: Traktorostroiteley 156/41, office 301
phone: +380-931-700-701
abuse-mailbox: abusemail@infiumhost.com
remarks:
remarks: *************************************************
remarks: * For spam/abuse/security issues please contact *
remarks: * abusemail@infiumhost.com, not this address *
remarks: *************************************************
remarks:
nic-hdl: INF20-RIPE
mnt-by: INFIUM-MNT
source: RIPE # Filtered

% Information related to '188.190.98.0/24AS197145'

route: 188.190.98.0/24
descr: Infium LTD
origin: AS197145
mnt-by: INFIUM-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 58.150.33.164

Hi,

The IP 58.150.33.164 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 58.150.33.164:

[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 58.150.33.164


# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 58.150.0.0 - 58.151.255.255 (/15)
서비스명 : BORANET
기관명 : 주ì&lsqauo;íšŒì‚¬ 엘지유í"ŒëŸ¬ìŠ¤
기관고유번호 : ORG572
주소 : 서울특별ì&lsqauo;œ ì¤'구 소ì›"ë¡œ2길 30 (남대문로5ê°€)
우편번호 : 100-095
í• ë&lsqauo;¹ì¼ìž : 20050527

[ IPv4주소 책임자 정보 ]
이름 : IP주소관리자
ì „í™"번호 : +82-2-6928-3087
전자우편 : ipadm@lguplus.co.kr

[ IPv4주소 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : IP주소관리자
ì „í™"번호 : +82-2-6928-3087
전자우편 : ipadm@lguplus.co.kr

[ 스팸 해킹 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : Network Abuse ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-2089-0101
전자우편 : security@bora.net

--------------------------------------------------------------------------------

조회하ì&lsqauo;  IPv4주소ëŠ" 위의 관리대행자로부터 아래의 사용자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 58.150.33.128 - 58.150.33.255 (/25)
네트워크 이름 : BORA4069849C
기관명 : 미션#1장미원점
기관고유번호 : ORG807469
주소 : 서울ì&lsqauo;œ 강북구 수유6동
우편번호 : 142-882
í• ë&lsqauo;¹ë‚´ì—­ ë"±ë¡ì¼ : 20061110
공개여부 : N

[ 네트워크 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
기관명 : 미션#1장미원점
주소 : 서울ì&lsqauo;œ 강북구 수유6동
우편번호 : 142-882
전자우편 : b4069849@users.bora.net


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 58.150.0.0 - 58.151.255.255 (/15)
Service Name : BORANET
Organization Name : LG DACOM Corporation
Organization ID : ORG572
Address : 827, Seoul Jung-gu Sowol-ro 2-gil
Zip Code : 100-095
Registration Date : 20050527

[ Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-6928-3087
E-Mail : ipadm@lguplus.co.kr

[ Tech Contact Information ]
Name : IP ADMIN
Phone : +82-2-6928-3087
E-Mail : ipadm@lguplus.co.kr

[ Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-2089-0101
E-Mail : security@bora.net

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 58.150.33.128 - 58.150.33.255 (/25)
Network Name : BORA4069849C
Organization Name : .
Organization ID : ORG807469
Address : SEOUL Kangbuk-gu Suyu6-dong
Zip Code : 142-882
Registration Date : 20061110
Publishes : N

[ Technical Contact Information ]
Organization Name : .
Address : SEOUL Kangbuk-gu Suyu6-dong
Zip Code : 142-882
E-Mail : b4069849@users.bora.net


- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 223.4.240.25

Hi,

The IP 223.4.240.25 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 223.4.240.25:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '223.4.0.0 - 223.7.255.255'

inetnum: 223.4.0.0 - 223.7.255.255
netname: ALIBABA-CN-NET
descr: Hangzhou Alibaba Advertising Co.,Ltd.
descr: No.699, Wangshang RD., Hangzhou, China
country: CN
admin-c: ZM678-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: hm-changed@apnic.net 20090122
status: ALLOCATED PORTABLE
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Shuo Yu
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: shuo.yus@alibaba-inc.com
e-mail: shuo.yus@aliyun-inc.com
nic-hdl: ZM678-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20110614
source: APNIC

person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: guoxin.gao@aliyun-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20130705
source: APNIC

person: security trouble
e-mail: cloud-cc-sqcloud@list.alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen’er Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
changed: ipas@cnnic.cn 20130708
source: APNIC

person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: guowei.pangw@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20130709
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 212.83.144.128

Hi,

The IP 212.83.144.128 has just been banned by Fail2Ban after
6 attempts against SSH.


Here are more information about 212.83.144.128:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '212.83.128.0 - 212.83.153.255'

% Abuse contact for '212.83.128.0 - 212.83.153.255' is 'abuse@proxad.net'

inetnum: 212.83.128.0 - 212.83.153.255
netname: FRWOL
descr: Tiscali France
country: FR
admin-c: BG34
admin-c: LTAD1-RIPE
tech-c: TTFR1-RIPE
status: ASSIGNED PA
remarks: ******************
remarks: All abuse requests MUST be sent to 'abuse@tiscali.fr'
remarks: and the logs must include the timezone and GMT offset.
remarks: ripe-mnt@net.tiscali.fr IS NOT the mail to use to report abuses
remarks: Toute requete abuse DOIT etre envoyee a 'abuse@tiscali.fr'
remarks: en les logs doivent inclure l'heure exacte et le decalage GMT.
remarks: ripe-mnt@net.tiscali.fr N'EST PAS le mail a utiliser pour signaler un abuse.
remarks: ******************
mnt-by: MNT-TISCALIFR
mnt-lower: MNT-TISCALIFR
remarks: Tag: Int
source: RIPE # Filtered

role: LIBERTYSURF TELECOM ABUSE DEPARTMENT
remarks: now known as Online S.A.S. / Iliad-Entreprises
address: 8, rue de la ville l'eveque
address: 75008 Paris
address: France
admin-c: IENT-RIPE
tech-c: IENT-RIPE
nic-hdl: LTAD1-RIPE
mnt-by: MNT-TISCALIFR
source: RIPE # Filtered

role: Tiscali Telecom France Registry
remarks: now known as Online S.A.S. / Iliad-Entreprises
address: 8 rue de la ville l'évèque
address: 75008 Paris
address: France
abuse-mailbox: abuse@iliad-entreprises.fr
admin-c: IENT-RIPE
tech-c: IENT-RIPE
tech-c: NR1053-RIPE
nic-hdl: TTFR1-RIPE
mnt-by: MNT-TISCALIFR
source: RIPE # Filtered

person: Benoit Grange
address: Tiscali Telecom
address: 37 bis rue Greneta
address: 75002 Paris - France
phone: +33 1 45 08 20 00
fax-no: +33 1 45 08 20 01
remarks: +-----------------------------------------------------------------------+
remarks: | ATTENTION: Pour nous signaler un probleme (intrusion, spam, etc), |
remarks: | merci de respecter la procedure suivante: |
remarks: | Envoyer un mail a "abuse@tiscali.fr" avec les informations suivantes: |
remarks: | - date & heure (y compris le fuseau horaire ou l'heure GMT) |
remarks: | - adresse IP source ou toutes les en-tetes du mail |
remarks: | - nature du probleme (en quelques mots) |
remarks: | Nous ne repondons pas aux demandes par telephone. |
remarks: | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
remarks: | Je ne suis que le representant legal de Tiscali et non pas |
remarks: | l'utilisateur final de l'adresse IP renvoyee par votre firewall |
remarks: | Les adresses IP sont generalement allouees dynamiquement a nos abonnes|
remarks: | et donc votre logiciel ne peut PAS connaitre le nom de l'utilisateur |
remarks: | reel de l'IP. Merci d'avoir lu jusqu'au bout. |
remarks: +-----------------------------------------------------------------------+
nic-hdl: BG34
mnt-by: MNT-TISCALIFR
source: RIPE # Filtered

% Information related to '212.83.128.0/19AS12876'

route: 212.83.128.0/19
descr: Online SAS
descr: Paris, France
origin: AS12876
mnt-by: MNT-TISCALIFR
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 210.51.10.65

Hi,

The IP 210.51.10.65 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 210.51.10.65:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '210.51.0.0 - 210.51.19.255'

inetnum: 210.51.0.0 - 210.51.19.255
netname: CNC-BJ-IDC
country: CN
descr: Beijing Tongtai IDC of China Netcom
admin-c: CH140-AP
tech-c: TJ35-AP
status: ALLOCATED NON-PORTABLE
changed: cncipaddr@china-netcom.com 20040227
mnt-by: MAINT-CN-ZM28
mnt-lower: MAINT-CN-BJIDC
source: APNIC

role: CNCIDC hostmaster
address: No.1,Beihuan Donglu,BDA,Beijing,China
country: CN
phone: +8610 6787 5599
fax-no: +8610 6787 8624
e-mail: cncipaddr@china-netcom.com
remarks: send spam and abuse reports to tech-group@china-netcom.com
remarks: Please include detailed information and times in UTC
admin-c: TJ35-AP
tech-c: TC254-AP
nic-hdl: Ch140-AP
notify: cncipaddr@china-netcom.com
mnt-by: MAINT-CN-ZM28
changed: hm-changed@apnic.net 20040226
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Tao Jiang
nic-hdl: TJ35-AP
e-mail: bjidc-ipaddr@cnc.cn
address: No.1,Beihuan Donglu, Beijing Economic
address: -TechnologicalDevelopment Area,Beijing
phone: +8610-67878534
fax-no: +8610-67878538
country: CN
changed: jiangtao@cnc.cn 20080221
mnt-by: MAINT-CN-BJIDC
source: APNIC

% Information related to '210.51.0.0/16AS9929'

route: 210.51.0.0/16
descr: CNC Group CncNet
country: CN
origin: AS9929
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060330
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

Friday, 22 November 2013

[Fail2Ban] SSH: banned 61.160.232.195

Hi,

The IP 61.160.232.195 has just been banned by Fail2Ban after
6 attempts against SSH.


Here are more information about 61.160.232.195:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.160.0.0 - 61.160.255.255'

inetnum: 61.160.0.0 - 61.160.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostmaster@ns.chinanet.cn.net 20020209
changed: hostmaster@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% Information related to '61.160.0.0/16AS23650'

route: 61.160.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 219.232.240.12

Hi,

The IP 219.232.240.12 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 219.232.240.12:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '219.232.240.0 - 219.232.247.255'

inetnum: 219.232.240.0 - 219.232.247.255
netname: KuanjieNet
descr: Beijing KuanjieNet Technology Co.,Ltd.
descr: 420,Exacutive Tower, No.83 Fuxing Road,
descr: Haidian District, Beijing China ,100856
country: CN
admin-c: YF999-AP
tech-c: YF999-AP
status: allocated non-portable
mnt-by: MAINT-AP-CNISP
mnt-irt: IRT-CNISP-CN
changed: ip@cnisp.org.cn 20130802
source: APNIC

irt: IRT-CNISP-CN
address: CNISP-Union Technology (Beijing) Co., Ltd
e-mail: ip@cnisp.org.cn
abuse-mailbox: ip@cnisp.org.cn
admin-c: DY1-AUTO
tech-c: WF1-AUTO
auth: # Filtered
mnt-by: MAINT-AP-CNISP
changed: ip@cnisp.org.cn 20101109
changed: hm-changed@apnic.net 20101111
source: APNIC

person: Yijiang Feng
address: 420,Exacutive Tower,No.83fu xing Road,
address: Haidian District,Beijing
country: CN
phone: +86-10-51606076
e-mail: fengyijiang@cncitynet.net
nic-hdl: YF999-AP
mnt-by: MAINT-NET-AP
changed: ip@sslchina.cn 20130601
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 58.64.166.10

Hi,

The IP 58.64.166.10 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 58.64.166.10:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '58.64.166.0 - 58.64.166.255'

inetnum: 58.64.166.0 - 58.64.166.255
netname: NWTiDC-HK
descr: NWT iDC Data Service
country: HK
admin-c: NC315-AP
admin-c: IDC1-AP
tech-c: IW110-AP
tech-c: KW315-AP
status: ASSIGNED NON-PORTABLE
remarks: For network abuse email <abuse@newworldtel.com>
mnt-irt: IRT-NEWWORLDTEL-HK
changed: kmmwong@newworldtel.com 20101208
mnt-by: MAINT-HK-NEWWORLDTEL
source: APNIC

irt: IRT-NEWWORLDTEL-HK
address: 17/F Chevalier Commercial Centre,8 Wang Hoi Road, Kowloon Bay,Hong Kong.
e-mail: abuse@newworldtel.com
abuse-mailbox: abuse@newworldtel.com
admin-c: KW315-AP
tech-c: IDC1-AP
tech-c: NC315-AP
auth: # Filtered
mnt-by: MAINT-HK-NEWWORLDTEL
changed: abuse@newworldtel.com 20101207
source: APNIC

person: internet Data Centre
address: 17/F Chevalier Commercial Centre,8 Wang Hoi Road, Kowloon Bay, Hong Kong
country: HK
phone: +852-2133 4277
e-mail: idc@newworldtel.com
nic-hdl: IDC1-AP
mnt-by: MAINT-HK-NEWWORLDTEL
changed: kmmwong@newworldtel.com 20101004
source: APNIC

person: Ivan Wong
address: 17/F Chevalier Commercial Centre,8 Wang Hoi Road, Kowloon Bay, Hong Kong
country: HK
phone: +852-2133 4091
e-mail: ivanwong@newworldtel.com
nic-hdl: IW110-AP
mnt-by: MAINT-HK-NEWWORLDTEL
changed: kmmwong@newworldtel.com 20101004
source: APNIC

person: Kwong Ming Wong
nic-hdl: KW315-AP
e-mail: kmmwong@newworldtel.com
address: 17/F Chevalier Commercial Centre,8 Wang Hoi Road, Kowloon Bay,Hong Kong.
phone: +852-21300120
fax-no: + 852 - 2133 2175
country: HK
changed: kmmwong@newworldtel.com 20060814
mnt-by: MAINT-HK-NEWWORLDTEL
source: APNIC

person: Network Management Center
nic-hdl: NC315-AP
e-mail: nmc@newworldtel.com
address: 17/F Chevalier Commercial Centre,
address: 8 Wang Hoi Road, Kowloon Bay,
address: Hong Kong.
phone: + 852 - 2130-0120
fax-no: + 852 - 2133 2175
country: HK
changed: kmmwong@newworldtel.com 20080804
mnt-by: MAINT-HK-NEWWORLDTEL
source: APNIC

% Information related to '58.64.166.0/24AS17444'

route: 58.64.166.0/24
descr: NWT Route Object
origin: AS17444
mnt-by: MAINT-HK-NEWWORLDTEL
changed: kmmwong@newworldtel.com 20110114
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 58.240.17.250

Hi,

The IP 58.240.17.250 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 58.240.17.250:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '58.240.17.248 - 58.240.17.255'

inetnum: 58.240.17.248 - 58.240.17.255
netname: ShengFenXinXiHuaBu
country: CN
descr: ShengFenXinXiHuaBu,NANJING,JIANGSU PROVINCE
admin-c: LL58-AP
tech-c: LL58-AP
status: ASSIGNED NON-PORTABLE
changed: chenxy@chinaunicom.cn 20100126
mnt-by: MAINT-CNCGROUP-JS
source: APNIC

person: Lan Li
nic-hdl: LL58-AP
e-mail: js-cu-ipmanage@chinaunicom.cn
address: No. 65 Beijing West Road,Nanjing,China
phone: +86257900060
fax-no: +86252900280
country: CN
changed: js-cu-ipmanage@chinaunicom.cn 20130815
mnt-by: MAINT-NEW
source: APNIC

% Information related to '58.240.0.0/15AS4837'

route: 58.240.0.0/15
descr: CNC Group Jiangsu province network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20050603
changed: hm-changed@apnic.net 20050622
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 175.198.158.210

Hi,

The IP 175.198.158.210 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 175.198.158.210:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.nic.or.kr]
[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query : 175.198.158.210


# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 175.192.0.0 - 175.215.255.255 (/12+/13)
서비스명 : KORNET
기관명 : 주ì&lsqauo;íšŒì‚¬ 케이í&lsqauo;°
기관고유번호 : ORG1600
주소 : 경기도 성남ì&lsqauo;œ 분ë&lsqauo;¹êµ¬ 불정로 90 (정자동) 한국통ì&lsqauo;  e-Biz본부 기획팀
우편번호 : 463-711
í• ë&lsqauo;¹ì¼ìž : 20100211

[ IPv4주소 책임자 정보 ]
이름 : IP주소관리자
ì „í™"번호 : +82-2-500-6630
전자우편 : kornet_ip@kt.com

[ IPv4주소 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : IP주소ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-500-6630
전자우편 : kornet_ip@kt.com

[ 스팸 해킹 ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
이름 : 스팸/해킹ë&lsqauo;´ë&lsqauo;¹
ì „í™"번호 : +82-2-100-0000
전자우편 : abuse@kornet.net

--------------------------------------------------------------------------------

조회하ì&lsqauo;  IPv4주소에 대한 위 관리대행자의 사용자 í• ë&lsqauo;¹ì •ë³´ê°€ 존재하지 않습ë&lsqauo;ˆë&lsqauo;¤.


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 175.192.0.0 - 175.215.255.255 (/12+/13)
Service Name : KORNET
Organization Name : Korea Telecom
Organization ID : ORG1600
Address : 206, Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro
Zip Code : 463-711
Registration Date : 20100211

[ Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

[ Tech Contact Information ]
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

[ Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-100-0000
E-Mail : abuse@kornet.net


- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 132.248.59.129

Hi,

The IP 132.248.59.129 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 132.248.59.129:

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-11-22 17:47:43 (BRST -02:00)

inetnum: 132.248/16
status: assigned
aut-num: N/A
owner: Universidad Nacional Autonoma de Mexico
ownerid: MX-UNAM1-LACNIC
responsible: DGTIC - NICUNAM
address: Ciudad Universitaria, circuito exterior, s/n,
address: 04510 - Mexico - DF
country: MX
phone: +52 55 56228884 []
owner-c: CIR
tech-c: CIR
abuse-c: CIR
inetrev: 132.248/16
nserver: NS3.UNAM.MX
nsstat: 20131120 AA
nslastaa: 20131120
nserver: NS4.UNAM.MX
nsstat: 20131120 AA
nslastaa: 20131120
created: 19890331
changed: 20030206

nic-hdl: CIR
person: ALEJANDRO CRUZ SANTOS
e-mail: nic@UNAM.MX
address: DGTIC Ciudad Universitaria, circuito exterior, s/n, NICUNAM
address: 04510 - Mexico - DF
country: MX
phone: +52 55 56228884 []
created: 20041202
changed: 20110217

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 118.97.221.60

Hi,

The IP 118.97.221.60 has just been banned by Fail2Ban after
6 attempts against SSH.


Here are more information about 118.97.221.60:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '118.97.208.0 - 118.97.223.255'

inetnum: 118.97.208.0 - 118.97.223.255
netname: TLKM_NAS_AST_CUSTOMER
country: ID
descr: PT TELKOM INDONESIA
descr: Menara Multimedia Lt. 7
descr: Jl. Kebonsirih No.12
descr: JAKARTA
admin-c: AR165-AP
tech-c: HM444-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-TELKOMNET
mnt-irt: IRT-IDTELKOM-ID
changed: hostmaster@telkom.net.id 20101202
source: APNIC

irt: IRT-IDTELKOM-ID
address: PT. TELKOM INDONESIA
address: Menara Multimedia Lt. 7
address: Jl. Kebon sirih No.12
address: JAKARTA
e-mail: abuse@telkom.net.id
abuse-mailbox: abuse@telkom.net.id
admin-c: DF99-AP
tech-c: AR165-AP
auth: # Filtered
mnt-by: MAINT-TELKOMNET
changed: abuse@telkom.net.id 20120420
changed: hm-changed@apnic.net 20120420
source: APNIC

role: PT Telkom Indonesia APNIC Resources Management
address: PT. TELKOM INDONESIA
address: Menara Multimedia Lt. 7
address: Jl. Kebonsirih No.12
address: JAKARTA
country: ID
phone: +62-21-3860500
fax-no: +62-21-3861215
e-mail: ip-admin@telkom.net.id
admin-c: HM444-AP
tech-c: HM444-AP
nic-hdl: AR165-AP
notify: hostmaster@telkom.net.id
mnt-by: MAINT-TELKOMNET
changed: hostmaster@telkom.net.id 20060105
source: APNIC

person: PT Telkom Indonesia Hostmaster
nic-hdl: HM444-AP
e-mail: hostmaster@telkom.net.id
address: PT. TELKOM INDONESIA
address: Menara Multimedia Lt. 7
address: Jl. Kebonsirih No.12
address: JAKARTA
phone: +62-21-3860500
fax-no: +62-21-3861215
country: ID
notify: hostmaster@telkom.net.id
mnt-by: MAINT-TELKOMNET
changed: hostmaster@telkom.net.id 20060105
source: APNIC

% Information related to '118.97.208.0/20AS17974'

route: 118.97.208.0/20
descr: PT. TELKOM INDONESIA
descr: Menara Multimedia Lt. 7
descr: Jln. Kebonsirih No.12
descr: JAKARTA
country: ID
origin: AS17974
mnt-by: MAINT-TELKOMNET
changed: hostmaster@telkom.net.id 20130612
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 210.21.110.54

Hi,

The IP 210.21.110.54 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 210.21.110.54:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '210.21.0.0 - 210.21.127.255'

inetnum: 210.21.0.0 - 210.21.127.255
netname: UNICOM-GD
descr: China Unicom Guangdong province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: RP181-AP
remarks: service provider
mnt-by: MAINT-CNCGROUP
mnt-lower: MAINT-CNCGROUP-GD
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
changed: abuse@cnc-noc.net 20050118
status: ALLOCATED NON-PORTABLE
changed: hm-changed@apnic.net 20050616
changed: hm-changed@apnic.net 20060126
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

irt: IRT-CU-CN
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
e-mail: zhouxm@chinaunicom.cn
abuse-mailbox: zhouxm@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
changed: zhouxm@chinaunicom.cn 20101110
changed: hm-changed@apnic.net 20101116
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@cnc-noc.net
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: abuse@cnc-noc.net 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: runkeng pan
nic-hdl: RP181-AP
e-mail: wangjj238@chinaunicom.cn
address: XinShiKong Plaza,No 666 Huangpu Rd. Guangzhou 510627,China
phone: +86-20-22214174
fax-no: +86-20-22212266-4174
country: CN
changed: wangjj238@chinaunicom.cn 20071221
mnt-by: MAINT-CNCGROUP-GD
source: APNIC

% Information related to '210.21.0.0/17AS17816'

route: 210.21.0.0/17
descr: CNC Group CHINA169 Guangdong Province Network
country: CN
origin: AS17816
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 206.53.51.16

Hi,

The IP 206.53.51.16 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 206.53.51.16:

[Querying whois.arin.net]
[Redirected to rwhois.velcom.com:4321]
[Querying rwhois.velcom.com]
[rwhois.velcom.com]
%rwhois V-1.5:003eff:00 rwhois.velcom.com (by Network Solutions, Inc. V-1.5.9.5)
network:Auth-Area:206.53.48.0/20
network:Class-Name:network
network:ID:NET-206-53-51-0-24
network:Network-Name:Velcom.com
Virtual Hosting
network:IP-Network:206.53.51.0/24
network:Org-Name:VELCOM
network:Street-Address:50
Delta Park Blvd., Unit 4
network:City:Brampton
network:State:ON
network:Postal-Code:L6T-5E8
network:Country-Code:CA
network:Tech-Contact:support@velcom.com
network:Updated:2011-04-26
network:Updated-By:roman@velcom.com

network:Auth-Area:206.53.48.0/20
network:Class-Name:network
network:ID:NET-206-53-48-0-20
network:Network-Name:Velcom.com
IP Pool
network:IP-Network:206.53.48.0/20
network:Org-Name:VELCOM
network:Street-Address:50
Delta Park Blvd., Unit 4
network:City:Brampton
network:State:ON
network:Postal-Code:L6T-5E8
network:Country-Code:CA
network:Tech-Contact:support@velcom.com
network:Updated:2011-04-26
network:Updated-By:roman@velcom.com

%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 213.165.80.81

Hi,

The IP 213.165.80.81 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 213.165.80.81:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '213.165.80.0 - 213.165.95.255'

% Abuse contact for '213.165.80.0 - 213.165.95.255' is 'abuse@oneandone.net'

inetnum: 213.165.80.0 - 213.165.95.255
netname: SCHLUND-CUSTOMERS
descr: 1&1 Internet AG
country: DE
admin-c: IPAD-RIPE
tech-c: IPOP-RIPE
remarks: INFRA-AW
remarks: in case of abuse or spam, please mailto: abuse@oneandone.net
status: ASSIGNED PA
mnt-by: AS8560-MNT
source: RIPE # Filtered

role: IP Administration
address: 1&1 Internet AG
admin-c: AFI5-RIPE
admin-c: RME9-RIPE
admin-c: JR2342-RIPE
admin-c: LTO3-RIPE
admin-c: ZIG-RIPE
admin-c: MI-RIPE
admin-c: MINK-RIPE
admin-c: VR-RIPE
tech-c: AFI5-RIPE
tech-c: RME9-RIPE
tech-c: JR2342-RIPE
tech-c: LTO3-RIPE
nic-hdl: IPAD-RIPE
abuse-mailbox: abuse@oneandone.net
mnt-by: AS8560-MNT
source: RIPE # Filtered

role: IP Operations
address: 1&1 Internet AG
admin-c: AFI5-RIPE
admin-c: RME9-RIPE
admin-c: JR2342-RIPE
admin-c: LTO3-RIPE
tech-c: AFI5-RIPE
tech-c: RME9-RIPE
tech-c: JR2342-RIPE
tech-c: LTO3-RIPE
nic-hdl: IPOP-RIPE
abuse-mailbox: abuse@oneandone.net
mnt-by: AS8560-MNT
source: RIPE # Filtered

% Information related to '213.165.64.0/19AS8560'

route: 213.165.64.0/19
descr: SCHLUND-GMX-213-165-64-0
origin: AS8560
mnt-by: AS8560-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS2)

Regards,

Fail2Ban

Thursday, 21 November 2013

[Fail2Ban] SSH: banned 219.232.231.208

Hi,

The IP 219.232.231.208 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 219.232.231.208:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '219.232.224.0 - 219.232.231.255'

inetnum: 219.232.224.0 - 219.232.231.255
netname: KuanjieNet
descr: Beijing KuanjieNet Technology Co.,Ltd.
descr: 420,Exacutive Tower, No.83 Fuxing Road,
descr: Haidian District, Beijing China ,100856
country: CN
admin-c: YF999-AP
tech-c: YF999-AP
status: allocated non-portable
mnt-by: MAINT-AP-CNISP
mnt-irt: IRT-CNISP-CN
changed: ip@cnisp.org.cn 20130802
source: APNIC

irt: IRT-CNISP-CN
address: CNISP-Union Technology (Beijing) Co., Ltd
e-mail: ip@cnisp.org.cn
abuse-mailbox: ip@cnisp.org.cn
admin-c: DY1-AUTO
tech-c: WF1-AUTO
auth: # Filtered
mnt-by: MAINT-AP-CNISP
changed: ip@cnisp.org.cn 20101109
changed: hm-changed@apnic.net 20101111
source: APNIC

person: Yijiang Feng
address: 420,Exacutive Tower,No.83fu xing Road,
address: Haidian District,Beijing
country: CN
phone: +86-10-51606076
e-mail: fengyijiang@cncitynet.net
nic-hdl: YF999-AP
mnt-by: MAINT-NET-AP
changed: ip@sslchina.cn 20130601
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 36.72.229.51

Hi,

The IP 36.72.229.51 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 36.72.229.51:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '36.72.224.0 - 36.72.239.255'

inetnum: 36.72.224.0 - 36.72.239.255
netname: TLKM_BB_SERVICE_36_72_DIVRE3-4
country: ID
descr: PT TELKOM INDONESIA
descr: STO Gambir 3rd Floor
descr: Jl. Medan Merdeka Selatan No. 12
descr: Jakarta 10110
admin-c: AR165-AP
tech-c: HM444-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-TELKOMNET
mnt-irt: IRT-IDTELKOM-ID
changed: hostmaster@telkom.net.id 20120509
source: APNIC

irt: IRT-IDTELKOM-ID
address: PT. TELKOM INDONESIA
address: Menara Multimedia Lt. 7
address: Jl. Kebon sirih No.12
address: JAKARTA
e-mail: abuse@telkom.net.id
abuse-mailbox: abuse@telkom.net.id
admin-c: DF99-AP
tech-c: AR165-AP
auth: # Filtered
mnt-by: MAINT-TELKOMNET
changed: abuse@telkom.net.id 20120420
changed: hm-changed@apnic.net 20120420
source: APNIC

role: PT Telkom Indonesia APNIC Resources Management
address: PT. TELKOM INDONESIA
address: Menara Multimedia Lt. 7
address: Jl. Kebonsirih No.12
address: JAKARTA
country: ID
phone: +62-21-3860500
fax-no: +62-21-3861215
e-mail: ip-admin@telkom.net.id
admin-c: HM444-AP
tech-c: HM444-AP
nic-hdl: AR165-AP
notify: hostmaster@telkom.net.id
mnt-by: MAINT-TELKOMNET
changed: hostmaster@telkom.net.id 20060105
source: APNIC

person: PT Telkom Indonesia Hostmaster
nic-hdl: HM444-AP
e-mail: hostmaster@telkom.net.id
address: PT. TELKOM INDONESIA
address: Menara Multimedia Lt. 7
address: Jl. Kebonsirih No.12
address: JAKARTA
phone: +62-21-3860500
fax-no: +62-21-3861215
country: ID
notify: hostmaster@telkom.net.id
mnt-by: MAINT-TELKOMNET
changed: hostmaster@telkom.net.id 20060105
source: APNIC

% Information related to '36.72.228.0/22AS17974'

route: 36.72.228.0/22
descr: PT. TELKOM INDONESIA
country: ID
origin: AS17974
mnt-by: MAINT-TELKOMNET
changed: djimie@telin.co.id 20130818
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 199.168.140.242

Hi,

The IP 199.168.140.242 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 199.168.140.242:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 199.168.140.242"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=199.168.140.242?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 199.168.136.0 - 199.168.143.255
CIDR: 199.168.136.0/21
OriginAS: AS46664
NetName: VOLUMEDRIVE
NetHandle: NET-199-168-136-0-1
Parent: NET-199-0-0-0-0
NetType: Direct Allocation
RegDate: 2011-06-17
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-199-168-136-0-1

OrgName: VolumeDrive
OrgId: VOLUM-2
Address: 1143 Northern Blvd
City: Clarks Summit
StateProv: PA
PostalCode: 18411
Country: US
RegDate: 2008-08-26
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/VOLUM-2

OrgTechHandle: VOLUM1-ARIN
OrgTechName: VolumeDrive POC
OrgTechPhone: +1-862-266-1083
OrgTechEmail: info@volumedrive.com
OrgTechRef: http://whois.arin.net/rest/poc/VOLUM1-ARIN

OrgAbuseHandle: VOLUM1-ARIN
OrgAbuseName: VolumeDrive POC
OrgAbusePhone: +1-862-266-1083
OrgAbuseEmail: info@volumedrive.com
OrgAbuseRef: http://whois.arin.net/rest/poc/VOLUM1-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 222.43.96.226

Hi,

The IP 222.43.96.226 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 222.43.96.226:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '222.32.0.0 - 222.63.255.255'

inetnum: 222.32.0.0 - 222.63.255.255
netname: CTTNET
descr: China TieTong Telecommunications Corporation
descr: Jinze Mansion, 2 Guangningbo Street,
descr: Xicheng District, Beijing, China, 100032
country: CN
admin-c: WP188-AP
tech-c: LM273-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CN-CRTC
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: hm-changed@apnic.net 20090430
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: liu min
nic-hdl: LM273-AP
e-mail: crnet_mgr@chinatietong.com
address: 22F Yuetan Mansion, Xicheng District, Beijing, P.R.China
phone: +86-10-51848796
fax-no: +86-10-51842426
country: CN
changed: ipas@cnnic.net.cn 20120320
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Wang Pei
nic-hdl: WP188-AP
e-mail: crnet_mgr@chinatietong.com
address: Jinze Mansion, 2 Guangningbo Street,
address: Xicheng District, Beijing, China, 100032
phone: +21-51892106
fax-no: +21-51847802
country: CN
changed: ipas@cnnic.net.cn 20060926
mnt-by: MAINT-CNNIC-AP
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 199.168.140.242

Hi,

The IP 199.168.140.242 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 199.168.140.242:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 199.168.140.242"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=199.168.140.242?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 199.168.136.0 - 199.168.143.255
CIDR: 199.168.136.0/21
OriginAS: AS46664
NetName: VOLUMEDRIVE
NetHandle: NET-199-168-136-0-1
Parent: NET-199-0-0-0-0
NetType: Direct Allocation
RegDate: 2011-06-17
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-199-168-136-0-1

OrgName: VolumeDrive
OrgId: VOLUM-2
Address: 1143 Northern Blvd
City: Clarks Summit
StateProv: PA
PostalCode: 18411
Country: US
RegDate: 2008-08-26
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/VOLUM-2

OrgAbuseHandle: VOLUM1-ARIN
OrgAbuseName: VolumeDrive POC
OrgAbusePhone: +1-862-266-1083
OrgAbuseEmail: info@volumedrive.com
OrgAbuseRef: http://whois.arin.net/rest/poc/VOLUM1-ARIN

OrgTechHandle: VOLUM1-ARIN
OrgTechName: VolumeDrive POC
OrgTechPhone: +1-862-266-1083
OrgTechEmail: info@volumedrive.com
OrgTechRef: http://whois.arin.net/rest/poc/VOLUM1-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 199.168.140.242

Hi,

The IP 199.168.140.242 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 199.168.140.242:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 199.168.140.242"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=199.168.140.242?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 199.168.136.0 - 199.168.143.255
CIDR: 199.168.136.0/21
OriginAS: AS46664
NetName: VOLUMEDRIVE
NetHandle: NET-199-168-136-0-1
Parent: NET-199-0-0-0-0
NetType: Direct Allocation
RegDate: 2011-06-17
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-199-168-136-0-1

OrgName: VolumeDrive
OrgId: VOLUM-2
Address: 1143 Northern Blvd
City: Clarks Summit
StateProv: PA
PostalCode: 18411
Country: US
RegDate: 2008-08-26
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/VOLUM-2

OrgTechHandle: VOLUM1-ARIN
OrgTechName: VolumeDrive POC
OrgTechPhone: +1-862-266-1083
OrgTechEmail: info@volumedrive.com
OrgTechRef: http://whois.arin.net/rest/poc/VOLUM1-ARIN

OrgAbuseHandle: VOLUM1-ARIN
OrgAbuseName: VolumeDrive POC
OrgAbusePhone: +1-862-266-1083
OrgAbuseEmail: info@volumedrive.com
OrgAbuseRef: http://whois.arin.net/rest/poc/VOLUM1-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 49.212.96.241

Hi,

The IP 49.212.96.241 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 49.212.96.241:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '49.212.0.0 - 49.212.255.255'

inetnum: 49.212.0.0 - 49.212.255.255
netname: SAKURA-OSAKA
descr: SAKURA Internet Inc.
descr: 1-8-14, Minami Honmachi, Chuo-ku, Osaka 541-0054, Japan
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
status: ALLOCATED PORTABLE
remarks: Email address for spam or abuse complaints : abuse@sakura.ad.jp
changed: hm-changed@apnic.net 20101207
mnt-irt: IRT-JPNIC-JP
mnt-by: MAINT-JPNIC
mnt-lower: MAINT-JPNIC
source: APNIC

irt: IRT-JPNIC-JP
address: Urbannet-Kanda Bldg 4F, 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047, Japan
e-mail: abuse@apnic.net
abuse-mailbox: abuse@apnic.net
admin-c: JNIC1-AP
tech-c: JNIC1-AP
auth: # Filtered
mnt-by: MAINT-JPNIC
changed: abuse@apnic.net 20101108
changed: hm-changed@apnic.net 20101111
source: APNIC

role: Japan Network Information Center
address: Urbannet-Kanda Bldg 4F
address: 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047,Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: hostmaster@nic.ad.jp
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
changed: hm-changed@apnic.net 20041222
changed: hm-changed@apnic.net 20050324
changed: ip-apnic@nic.ad.jp 20051027
changed: ip-apnic@nic.ad.jp 20120828
source: APNIC

% Information related to '49.212.96.0 - 49.212.96.255'

inetnum: 49.212.96.0 - 49.212.96.255
netname: SAKURA-NET
descr: SAKURA Internet Inc.
country: JP
admin-c: KT749JP
tech-c: KW419JP
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: apnic-ftp@nic.ad.jp 20110602
source: JPNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban