Banned hacker's IPs

Monday, 16 December 2013

[Fail2Ban] SSH: banned 77.242.223.124

Hi,

The IP 77.242.223.124 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 77.242.223.124:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '77.242.214.0 - 77.242.223.255'

% Abuse contact for '77.242.214.0 - 77.242.223.255' is 'hostmaster@telecomitalia.sm'

inetnum: 77.242.214.0 - 77.242.223.255
netname: TISM-XDSL
descr: Telecom Italia San Marino S.p.A. is the International
descr: Telecomunications Company of the Republic of San Marino,
descr: entrusted to carry all the International services
descr: (Voice, Data and Added Value Services) of the Rupublic,
descr: where TISM is located and registered.
country: SM
admin-c: TISM1-RIPE
tech-c: TISM1-RIPE
remarks: rev-srv: dns.omniway.sm
remarks: rev-srv: dns.intelcom.sm
status: ASSIGNED PA
mnt-by: TISM-MNT
remarks: INFRA-AW
source: RIPE # Filtered
remarks: rev-srv attribute deprecated by RIPE NCC on 02/09/2009

person: Telecom Italia San Marino Hostmaster
address: Telecom Italia San Marino S.p.A.
address: Strada degli Angariari, 3
address: 47891 Rovereta
address: Republic of San Marino
phone: +378 0549 886111
fax-no: +378 0549 908654
nic-hdl: TISM1-RIPE
mnt-by: TISM-MNT
source: RIPE # Filtered

% Information related to '77.242.223.0/24AS15433'

route: 77.242.223.0/24
descr: TISM
origin: AS15433
mnt-by: TISM-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 222.189.239.72

Hi,

The IP 222.189.239.72 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 222.189.239.72:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '222.184.0.0 - 222.191.255.255'

inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your
remarks: organisation account name in the subject line.
changed: hm-changed@apnic.net 20040223
status: ALLOCATED PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 212.146.83.246

Hi,

The IP 212.146.83.246 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 212.146.83.246:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '212.146.83.0 - 212.146.83.255'

% Abuse contact for '212.146.83.0 - 212.146.83.255' is 'abuse@gtstelecom.ro'

inetnum: 212.146.83.0 - 212.146.83.255
netname: SPLIT-CUSTOMERS-212-146-83
descr: GTS TELECOM
country: RO
admin-c: GTRO1-RIPE
tech-c: GTRO1-RIPE
status: ASSIGNED PA
mnt-by: AS5606-MNT
source: RIPE # Filtered

role: GTS Telecom Romania Operations
address: GTS Telecom Romania
address: Electromagnetica Business Park
address: Calea Rahovei 266-268, Corp 3, Et. 1
address: 050912, Sector 5, Bucharest
address: Romania
phone: +40 31 220 0455
fax-no: +40 31 220 0299
abuse-mailbox: abuse@gtstelecom.ro
admin-c: VI2-RIPE
tech-c: CCM4-RIPE
tech-c: VI2-RIPE
nic-hdl: GTRO1-RIPE
mnt-by: AS5606-MNT
source: RIPE # Filtered

% Information related to '212.146.64.0/18AS5588'

route: 212.146.64.0/18
descr: GTS Telecom
descr: Member of GTS Central Europe
descr: Bucharest / ROMANIA
origin: AS5588
mnt-by: GTSCE-MNT
source: RIPE # Filtered

% Information related to '212.146.64.0/18AS5606'

route: 212.146.64.0/18
descr: GTS Telecom
descr: Member of GTS Central Europe
descr: Bucharest / ROMANIA
origin: AS5606
mnt-by: AS5606-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 60.190.186.202

Hi,

The IP 60.190.186.202 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 60.190.186.202:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '60.190.186.200 - 60.190.186.207'

inetnum: 60.190.186.200 - 60.190.186.207
netname: SHAOXING-TELECOM-LTD
country: CN
descr: Shaoxing Telecom Co.,Ltd
descr:
admin-c: FK82-AP
tech-c: CS64-AP
status: ASSIGNED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20081201
mnt-by: MAINT-CN-CHINANET-ZJ-SX
source: APNIC

role: CHINANET-ZJ Shaoxing
address: No.9 Sima Road,Shaoxing,Zhejiang.312000
country: CN
phone: +86-575-5136199
fax-no: +86-575-5114449
e-mail: anti-spam@mail.sxptt.zj.cn
remarks: send spam reports to anti-spam@mail.sxptt.zj.cn
remarks: and abuse reports to anti-spam@mail.sxptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH109-AP
tech-c: CH109-AP
nic-hdl: CS64-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Feng Ke
nic-hdl: FK82-AP
e-mail: anti-spam@mail.sxptt.zj.cn
address: Shaoxing,Zhejiang.Postcode:312000
phone: +86-575-85880635
country: CN
changed: auto-dbm@dcb.hz.zj.cn 20081201
mnt-by: MAINT-CN-CHINANET-ZJ-SX
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 91.211.124.77

Hi,

The IP 91.211.124.77 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 91.211.124.77:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '91.211.124.0 - 91.211.127.255'

% Abuse contact for '91.211.124.0 - 91.211.127.255' is 'abuse@overta.ru'

inetnum: 91.211.124.0 - 91.211.127.255
netname: RTC-ORENBURG-NET
descr: CJSC "Comstar-Regions"
descr: Regional Technical Center CJSC
descr: affiliate RTC-Orenburg
descr: CJS Komstar-Regiony
country: RU
org: ORG-TOL1-RIPE
admin-c: OZ67-RIPE
tech-c: OZ67-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-by: MNT-RTC-ORENBURG
mnt-lower: RIPE-NCC-END-MNT
mnt-routes: MNT-RTC-ORENBURG
mnt-domains: MNT-RTC-ORENBURG
source: RIPE # Filtered

organisation: ORG-TOL1-RIPE
org-name: CJSC "Comstar-Regions"
org-type: LIR
address: Privolgsky Branch CJSC "Comstar-Regions"
address: Aleksandr Volnov
address: Vavilova 38/114, Business Center "Kovcheg", 5 th Floor
address: 410017 Saratov
address: RUSSIAN FEDERATION
phone: +78452480003
fax-no: +78452489998
mnt-ref: OVERTA-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
admin-c: NL799-RIPE
admin-c: EVK10-RIPE
admin-c: AG572-RIPE
admin-c: LY10-RIPE
admin-c: VVS41-RIPE
abuse-c: OIC2-RIPE
source: RIPE # Filtered

person: Oleg Zavalishin
address: RTC-Orenburg
address: 14,Karavannaya st.,
address: 460000 Orenburg Russia
phone: +7 3532 372111
fax-no: +7 3532 375204
nic-hdl: OZ67-RIPE
source: RIPE # Filtered
mnt-by: MNT-RTC-ORENBURG

% Information related to '91.211.124.0/24AS48612'

route: 91.211.124.0/24
descr: Regional Technical Center CJSC
descr: affiliate RTC-Orenburg
origin: AS48612
mnt-by: MNT-RTC-ORENBURG
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS2)

Regards,

Fail2Ban

Sunday, 15 December 2013

[Fail2Ban] SSH: banned 121.52.220.66

Hi,

The IP 121.52.220.66 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 121.52.220.66:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '121.52.216.0 - 121.52.223.255'

inetnum: 121.52.216.0 - 121.52.223.255
netname: TopnewNET
descr: Beijing Topnew Info&Tech co., LTD.
descr: No.9, Jintaili, Chaoyang District,
descr: Beijing, China 100026
country: CN
admin-c: LC1626-AP
tech-c: XW1364-AP
mnt-by: MAINT-AP-CNISP
mnt-irt: IRT-CNISP-CN
status: allocated non-portable
changed: ip@cnisp.org.cn 20130814
source: APNIC

irt: IRT-CNISP-CN
address: CNISP-Union Technology (Beijing) Co., Ltd
e-mail: ip@cnisp.org.cn
abuse-mailbox: ip@cnisp.org.cn
admin-c: DY1-AUTO
tech-c: WF1-AUTO
auth: # Filtered
mnt-by: MAINT-AP-CNISP
changed: ip@cnisp.org.cn 20101109
changed: hm-changed@apnic.net 20101111
source: APNIC

person: Li Chaocheng
nic-hdl: LC1626-AP
e-mail: lcc@topnew.cn
address: No.9 A Jintaili District Chaoyang Beijing China
phone: +10-52081208
fax-no: +10-52081280
country: CN
changed: ipas@cnnic.cn 20081103
mnt-by: MAINT-CN-PUTIAN
source: APNIC

person: Xiaoli Wang
nic-hdl: XW1364-AP
e-mail: wxl@topnew.cn
address: No.9 A Jintaili District Chaoyang Beijing China
phone: +10-52081238
fax-no: +10-52081280
country: CN
changed: ipas@cnnic.cn 20081103
mnt-by: MAINT-CN-PUTIAN
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 198.172.23.11

Hi,

The IP 198.172.23.11 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 198.172.23.11:

[Querying whois.arin.net]
[Redirected to rwhois.gin.ntt.net:4321]
[Querying rwhois.gin.ntt.net]
[rwhois.gin.ntt.net]
%rwhois V-1.5:0078b6:00 rwhois.gin.ntt.net (Vipar 0.1a. Comments to vipar@us.ntt.net)
network:Class-Name:network
network:Auth-Area:198.172.20.0/22
network:ID:NETBLK-W015-198-172-23-0-24.127.0.0.1/32
network:Handle:NETBLK-W015-198-172-23-0-24
network:Network-Name:W015-198-172-23-0-24
network:IP-Network:198.172.23.0/24
network:In-Addr-Server;I:NS8629-HST.127.0.0.1/32
network:In-Addr-Server;I:NS8630-HST.127.0.0.1/32
network:IP-Network-Block:198.172.23.0 - 198.172.23.255
network:Org-Name:Verio Web Hosting - Orem
network:Street-Address:1203 North Research Way
network:City:Orem
network:State:UT
network:Postal-Code:84097
network:Country-Code:US
network:Tech-Contact;I:IA20254-VRIO.127.0.0.1/32
network:Created:2010-05-18 16:12:57.580695+00
network:Updated:2010-05-18 16:12:57.580695+00

network:Class-Name:network
network:Auth-Area:198.172.20.0/22
network:ID:NETBLK-W015-198-172-020.127.0.0.1/32
network:Handle:NETBLK-W015-198-172-020
network:Network-Name:W015-198-172-020
network:IP-Network:198.172.20.0/22
network:In-Addr-Server;I:NS3820-VRIO-HST.127.0.0.1/32
network:In-Addr-Server;I:NS3821-VRIO-HST.127.0.0.1/32
network:IP-Network-Block:198.172.20.0 - 198.172.23.255
network:Org-Name:Verio Web Hosting - Orem
network:Street-Address:1203 North Research Way
network:City:Orem
network:State:UT
network:Postal-Code:84097
network:Country-Code:US
network:Tech-Contact;I:IA20254-VRIO.127.0.0.1/32
network:Created:2009-07-21 22:04:14.931405+00
network:Updated:2009-07-21 22:04:14.931405+00

%ok

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.160.251.140

Hi,

The IP 61.160.251.140 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.160.251.140:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.160.0.0 - 61.160.255.255'

inetnum: 61.160.0.0 - 61.160.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostmaster@ns.chinanet.cn.net 20020209
changed: hostmaster@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% Information related to '61.160.0.0/16AS23650'

route: 61.160.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 211.202.2.135

Hi,

The IP 211.202.2.135 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 211.202.2.135:

[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 211.202.2.135

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 211.200.0.0 - 211.205.255.255 (/14+/15)
ì„œë¹„ìŠ¤ëª… : broadNnet
ê¸°ê´€ëª… : ì—ìŠ¤ì¼€ì´ë¸Œë¡œë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG3930
ì£¼ì†Œ : ì„œìš¸íŠ¹ë³„ì&lsqauo;œ ì¤'êµ¬ í‡´ê³„ë¡œ 24, SKë‚¨ì‚°ê·¸ë¦°ë¹Œë"© (ë‚¨ëŒ€ë¬¸ë¡œ5ê°€)
ìš°íŽ¸ë²ˆí˜¸ : 100-711
í• ë&lsqauo;¹ì¼ìž : 20000823

[ IPv4ì£¼ì†Œ ì±…ìž„ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com

[ IPv4ì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com

[ ìŠ¤íŒ¸ í•´í‚¹ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : abuse@skbroadband.com

--------------------------------------------------------------------------------

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 211.202.0.0 - 211.202.3.255 (/22)
ë„¤íŠ¸ì›Œí¬ ì´ë¦„ : HANANET-INFRA
ê¸°ê´€ëª… : ì—ìŠ¤ì¼€ì´ë¸Œë¡œë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG3930
ì£¼ì†Œ : ì„œìš¸íŠ¹ë³„ì&lsqauo;œ ì¤'êµ¬ í‡´ê³„ë¡œ 24, SKë‚¨ì‚°ê·¸ë¦°ë¹Œë"© (ë‚¨ëŒ€ë¬¸ë¡œ5ê°€)
ìš°íŽ¸ë²ˆí˜¸ : 100-711
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20041015
ê³µê°œì—¬ë¶€ : Y

[ ë„¤íŠ¸ì›Œí¬ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ê¸°ê´€ëª… : broadNnet
ì£¼ì†Œ : ì„œìš¸íŠ¹ë³„ì&lsqauo;œ ì¤'êµ¬ í‡´ê³„ë¡œ 24, SKë‚¨ì‚°ê·¸ë¦°ë¹Œë"© (ë‚¨ëŒ€ë¬¸ë¡œ5ê°€)
ìš°íŽ¸ë²ˆí˜¸ : 100-711
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 211.200.0.0 - 211.205.255.255 (/14+/15)
Service Name : broadNnet
Organization Name : SK Broadband Co Ltd
Organization ID : ORG3930
Address : 267, Seoul Jung-gu Toegye-ro
Zip Code : 100-711
Registration Date : 20000823

[ Admin Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Tech Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Network Abuse Contact Information ]
Name : manager
Phone : +82-2-106-2
E-Mail : abuse@skbroadband.com

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 211.202.0.0 - 211.202.3.255 (/22)
Network Name : HANANET-INFRA
Organization Name : SK Broadband Co Ltd
Organization ID : ORG3930
Address : 267, Seoul Jung-gu Toegye-ro
Zip Code : 100-711
Registration Date : 20041015
Publishes : Y

[ Technical Contact Information ]
Name : IP manager
Organization Name : SK Broadband Co Ltd
Address : 267, Seoul Jung-gu Toegye-ro
Zip Code : 100-711
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 190.114.254.151

Hi,

The IP 190.114.254.151 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 190.114.254.151:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net

% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-12-15 12:01:15 (BRST -02:00)

inetnum: 190.114.252/22
status: allocated
aut-num: N/A
owner: ZAM LTDA.
ownerid: CL-ZALT-LACNIC
responsible: Chi-Yin Feng
address: Arturo Prat, 549,
address: 3341656 - Curico - MA
country: CL
phone: +56 75 543220 []
owner-c: CCF3
tech-c: CCF3
abuse-c: ZAL2
inetrev: 190.114.252/22
nserver: NS1.NSPRIVADO.NET
nsstat: 20131215 AA
nslastaa: 20131215
nserver: NS2.NSPRIVADO.NET
nsstat: 20131215 AA
nslastaa: 20131215
created: 20120227
changed: 20120812

nic-hdl: CCF3
person: Chan Chun Feng
e-mail: lacnic@ZAMLTDA.COM
address: Arturo Prat, 549,
address: 3341656 - Curico - MA
country: CL
phone: +56 75 543220 [1]
created: 20111227
changed: 20131118

nic-hdl: ZAL2
person: Zam Ltda
e-mail: abuso@ZAMLTDA.COM
address: Arturo Prat, 549,
address: 3341656 - Curico - Ma
country: CL
phone: +56 75 543220 []
created: 20120703
changed: 20120703

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 122.4.79.69

Hi,

The IP 122.4.79.69 has just been banned by Fail2Ban after
6 attempts against SSH.

Here are more information about 122.4.79.69:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '122.4.0.0 - 122.7.255.255'

inetnum: 122.4.0.0 - 122.7.255.255
netname: CHINANET-SD
descr: CHINANET SHANDONG PROVINCE NETWORK
descr: Shandong Telecom Corporation
descr: No.999,Shunhua road,Jinan,Shandong
country: CN
admin-c: XR55-AP
tech-c: CH93-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-SD
mnt-routes: MAINT-CHINANET-SD
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20060920
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: Xin Ruosheng
nic-hdl: XR55-AP
e-mail: ipreport@sdtele.com
address: No.999, road Shunhua, Jinan, Shandong province,China
phone: +86-531-83190000
fax-no: +86-531-83190000
country: CN
changed: ipreport@sdtele.com 20060905
mnt-by: MAINT-CHINANET-SD
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 60.169.22.118

Hi,

The IP 60.169.22.118 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 60.169.22.118:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '60.166.0.0 - 60.175.255.255'

inetnum: 60.166.0.0 - 60.175.255.255
netname: CHINANET-AH
descr: CHINANET anhui province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: JW89-AP
mnt-by: APNIC-HM
mnt-routes: MAINT-CHINANET-AH
mnt-lower: MAINT-CHINANET-AH
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20040721
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: Jinneng Wang
address: 17/F, Postal Building No.120 Changjiang
address: Middle Road, Hefei, Anhui, China
country: CN
phone: +86-551-2659073
fax-no: +86-551-2659287
e-mail: wang@mail.hf.ah.cninfo.net
nic-hdl: JW89-AP
mnt-by: MAINT-NEW
changed: wang@mail.hf.ah.cninfo.net 19990818
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 195.154.15.225

Hi,

The IP 195.154.15.225 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 195.154.15.225:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '195.154.0.0 - 195.154.127.255'

% Abuse contact for '195.154.0.0 - 195.154.127.255' is 'abuse@proxad.net'

inetnum: 195.154.0.0 - 195.154.127.255
netname: FR-ILIAD-ENTREPRISES-CUSTOMERS
descr: Iliad Entreprises Customers
country: FR
admin-c: IENT-RIPE
tech-c: IENT-RIPE
status: LIR-PARTITIONED PA
mnt-by: MNT-TISCALIFR-B2B
source: RIPE # Filtered

role: Iliad Entreprises Admin and Tech Contact
remarks: Iliad Entreprises is an hosting and services provider
address: 8, rue de la ville l'eveque
address: 75008 Paris
address: France
phone: +33 1 73 50 20 00
fax-no: +33 1 73 50 29 01
abuse-mailbox: abuse@online.net
tech-c: NLI-RIPE
nic-hdl: IENT-RIPE
mnt-by: ONLINE-NET-MNT
source: RIPE # Filtered

% Information related to '195.154.0.0/16AS12876'

route: 195.154.0.0/16
descr: Online SAS
descr: Paris, France
origin: AS12876
mnt-by: MNT-TISCALIFR
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 103.23.244.22

Hi,

The IP 103.23.244.22 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 103.23.244.22:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '103.23.244.0 - 103.23.244.255'

inetnum: 103.23.244.0 - 103.23.244.255
netname: UPI-ID
descr: Universitas Pendidikan Indonesia
descr: University / Direct Member IDNIC
descr: Jl. Dr. Setiabudhi no. 229
descr: Bandung Jawa Barat
country: ID
admin-c: MRS8-AP
tech-c: MRS8-AP
remarks: Send Spam& Abuse Reports to munir@upi.edu
mnt-by: MNT-APJII-ID
mnt-routes: MAINT-ID-UPI
mnt-irt: IRT-UPI-ID
status: ASSIGNED PORTABLE
changed: hm-changed@apnic.net 20111212
changed: hostmaster@idnic.net 20111219
source: APNIC

irt: IRT-UPI-ID
address: Universitas Pendidikan Indonesia
address: Jl. Dr. Setiabudhi no. 229
address: Bandung Jawa Barat
e-mail: munir@upi.edu
abuse-mailbox: munir@upi.edu
admin-c: MRS8-AP
tech-c: MRS8-AP
auth: # Filtered
mnt-by: MAINT-ID-UPI
changed: munir@upi.edu 20111216
source: APNIC

person: Moh Riky Saadilah
address: Jl. Dr.Setiabudhi No. 229
address: Bandung 40154
address: Jawa Barat - Indonesia
country: ID
phone: +62-22-70619000
fax-no: +62-22-2013651
e-mail: riky@upi.edu
nic-hdl: MRS8-AP
mnt-by: MAINT-ID-UPI
changed: hostmaster@idnic.net 20111202
source: APNIC

% Information related to '103.23.244.0/24AS18394'

route: 103.23.244.0/24
descr: Universitas Pendidikan Indonesia
descr: University / Direct Member IDNIC
descr: Jl. Dr. Setiabudhi no. 229
descr: Bandung - Jawa Barat
country: ID
origin: AS18394
mnt-by: MAINT-ID-UPI
changed: hostmaster@telkom.net.id 20111223
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 206.220.193.189

Hi,

The IP 206.220.193.189 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 206.220.193.189:

[Querying whois.arin.net]
[Redirected to rwhois.voinetworks.net:4321]
[Querying rwhois.voinetworks.net]
[rwhois.voinetworks.net]
%rwhois V-1.5:003eff:00 rwhois.voinetworks.net (by Network Solutions, Inc. V-1.5.9.6)
network:Class-Name:network
network:ID:206.220.193.160/27
network:Auth-Area:206.220.192.0/21
network:Network-Name:QKSTREAM-206.220.193.160/27
network:IP-Network:206.220.193.160/27
network:IP-Network-Block:206.220.193.160 - 206.220.193.191
network:Organization;I:QuickStream Wireless Internet
network:Created:20121212
network:Updated:20121214
network:Updated-By:internet.operations@noc.voinetworks.net

network:Class-Name:network
network:ID:NETBLK-VOINET.206.220.192.0/21
network:Auth-Area:206.220.192.0/21
network:Network-Name:VOINET-1
network:IP-Network:206.220.192.0/21
network:IP-Network-Block:206.220.192.0 - 206.220.199.255
network:Organization;I:Voi Networks Inc
network:Tech-Contact;I:internet.operations@noc.voinetworks.net
network:Admin-Contact;I:NETWO2905-ARIN
network:Created:20081201
network:Updated:20121212
network:Updated-By:internet.operations@noc.voinetworks.net

%ok

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 142.0.41.156

Hi,

The IP 142.0.41.156 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 142.0.41.156:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 142.0.41.156"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=142.0.41.156?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 142.0.32.0 - 142.0.47.255
CIDR: 142.0.32.0/20
OriginAS: AS46664
NetName: VOLUM-ARIN
NetHandle: NET-142-0-32-0-1
Parent: NET-142-0-0-0-0
NetType: Direct Allocation
RegDate: 2012-05-30
Updated: 2012-05-30
Ref: http://whois.arin.net/rest/net/NET-142-0-32-0-1

OrgName: VolumeDrive
OrgId: VOLUM-2
Address: 1143 Northern Blvd
City: Clarks Summit
StateProv: PA
PostalCode: 18411
Country: US
RegDate: 2008-08-26
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/VOLUM-2

OrgAbuseHandle: VOLUM1-ARIN
OrgAbuseName: VolumeDrive POC
OrgAbusePhone: +1-862-266-1083
OrgAbuseEmail: info@volumedrive.com
OrgAbuseRef: http://whois.arin.net/rest/poc/VOLUM1-ARIN

OrgTechHandle: VOLUM1-ARIN
OrgTechName: VolumeDrive POC
OrgTechPhone: +1-862-266-1083
OrgTechEmail: info@volumedrive.com
OrgTechRef: http://whois.arin.net/rest/poc/VOLUM1-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

Saturday, 14 December 2013

[Fail2Ban] SSH: banned 1.93.26.149

Hi,

The IP 1.93.26.149 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 1.93.26.149:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '1.93.0.0 - 1.93.255.255'

inetnum: 1.93.0.0 - 1.93.255.255
netname: HSOFT
descr: Beijing hsoft technologies inc
descr: Beijing City, Haidian District Madian 8 South Road
descr: crown sea building three layer
country: CN
admin-c: ZT587-AP
tech-c: ZT587-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: hm-changed@apnic.net 20121122
status: ALLOCATED PORTABLE
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Zhang Tao
address: Beijing City, Haidian District Madian 8 South Road crown sea building three layer
country: CN
phone: +86-13051336272
e-mail: 13051336272@wo.com.cn
nic-hdl: ZT587-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20121107
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 125.140.114.215

Hi,

The IP 125.140.114.215 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 125.140.114.215:

[Querying whois.apnic.net]
[Redirected to whois.nic.or.kr]
[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query : 125.140.114.215

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 125.128.0.0 - 125.159.255.255 (/11)
ì„œë¹„ìŠ¤ëª… : KORNET
ê¸°ê´€ëª… : ì£¼ì&lsqauo;íšŒì‚¬ ì¼€ì´í&lsqauo;°
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG1600
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ 90 (ì •ìžë™) í•œêµí†µì&lsqauo; e-Bizë³¸ë¶€ ê¸°íšíŒ€
ìš°íŽ¸ë²ˆí˜¸ : 463-711
í• ë&lsqauo;¹ì¼ìž : 20050822

[ IPv4ì£¼ì†Œ ì±…ìž„ìž ì •ë³´ ]
ì´ë¦„ : IPì£¼ì†Œê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

[ IPv4ì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : IPì£¼ì†Œë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

[ ìŠ¤íŒ¸ í•´í‚¹ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ìŠ¤íŒ¸/í•´í‚¹ë&lsqauo;´ë&lsqauo;¹
ì „í™"ë²ˆí˜¸ : +82-2-100-0000
ì „ìžìš°íŽ¸ : abuse@kornet.net

--------------------------------------------------------------------------------

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
ë„¤íŠ¸ì›Œí¬ ì´ë¦„ : KORNET-INFRA000001
ê¸°ê´€ëª… : ì£¼ì&lsqauo;íšŒì‚¬ ì¼€ì´í&lsqauo;°
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG1600
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ
ìš°íŽ¸ë²ˆí˜¸ : 463-711
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20130320
ê³µê°œì—¬ë¶€ : N

[ ë„¤íŠ¸ì›Œí¬ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ê¸°ê´€ëª… : KORNET
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ
ìš°íŽ¸ë²ˆí˜¸ : 463-711
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 125.128.0.0 - 125.159.255.255 (/11)
Service Name : KORNET
Organization Name : Korea Telecom
Organization ID : ORG1600
Address : 206, Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro
Zip Code : 463-711
Registration Date : 20050822

[ Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

[ Tech Contact Information ]
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

[ Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-100-0000
E-Mail : abuse@kornet.net

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
Network Name : KORNET-INFRA000001
Organization Name : Korea Telecom
Organization ID : ORG1600
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro
Zip Code : 463-711
Registration Date : 20130320
Publishes : N

[ Technical Contact Information ]
Organization Name : Korea Telecom
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro
Zip Code : 463-711
E-Mail : kornet_ip@kt.com

- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 222.189.239.126

Hi,

The IP 222.189.239.126 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 222.189.239.126:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '222.184.0.0 - 222.191.255.255'

inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your
remarks: organisation account name in the subject line.
changed: hm-changed@apnic.net 20040223
status: ALLOCATED PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.147.116.54

Hi,

The IP 61.147.116.54 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.147.116.54:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.147.0.0 - 61.147.255.255'

inetnum: 61.147.0.0 - 61.147.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostmaster@ns.chinanet.cn.net 20020209
changed: hostmaster@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% Information related to '61.147.0.0/16AS23650'

route: 61.147.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 123.232.122.162

Hi,

The IP 123.232.122.162 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 123.232.122.162:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '123.232.122.160 - 123.232.122.175'

inetnum: 123.232.122.160 - 123.232.122.175
netname: JN-jnsjswyh
country: CN
descr: JiNan-JINANSHIJIANSHEWEIYUANHUI
admin-c: DS95-AP
tech-c: DS95-AP
status: ASSIGNED NON-PORTABLE
changed: ip@sdinfo.net 20071231
mnt-by: MAINT-CNCGROUP-SD
source: APNIC

person: Data Communication Bureau Shandong
nic-hdl: DS95-AP
e-mail: ip@sdinfo.net
address: No.77 Jingsan Road,Jinan,Shandong,P.R.China
phone: +86-531-6052611
fax-no: +86-531-6052414
country: CN
changed: ip@sdinfo.net 20050330
mnt-by: MAINT-CNCGROUP-SD
source: APNIC

% Information related to '123.232.0.0/14AS4837'

route: 123.232.0.0/14
descr: CNC Group CHINA169 Shandong Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20070215
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 211.104.100.90

Hi,

The IP 211.104.100.90 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 211.104.100.90:

[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query : 211.104.100.90

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 211.104.0.0 - 211.105.255.255 (/15)
ì„œë¹„ìŠ¤ëª… : KORNET
ê¸°ê´€ëª… : ì£¼ì&lsqauo;íšŒì‚¬ ì¼€ì´í&lsqauo;°
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG1600
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ 90 (ì •ìžë™) í•œêµí†µì&lsqauo; e-Bizë³¸ë¶€ ê¸°íšíŒ€
ìš°íŽ¸ë²ˆí˜¸ : 463-711
í• ë&lsqauo;¹ì¼ìž : 20000424

[ IPv4ì£¼ì†Œ ì±…ìž„ìž ì •ë³´ ]
ì´ë¦„ : IPì£¼ì†Œê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

[ IPv4ì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : IPì£¼ì†Œë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

[ ìŠ¤íŒ¸ í•´í‚¹ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ìŠ¤íŒ¸/í•´í‚¹ë&lsqauo;´ë&lsqauo;¹
ì „í™"ë²ˆí˜¸ : +82-2-100-0000
ì „ìžìš°íŽ¸ : abuse@kornet.net

--------------------------------------------------------------------------------

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
ë„¤íŠ¸ì›Œí¬ ì´ë¦„ : KORNET-INFRA000001
ê¸°ê´€ëª… : ì£¼ì&lsqauo;íšŒì‚¬ ì¼€ì´í&lsqauo;°
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG1600
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ
ìš°íŽ¸ë²ˆí˜¸ : 463-711
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20120307
ê³µê°œì—¬ë¶€ : N

[ ë„¤íŠ¸ì›Œí¬ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ê¸°ê´€ëª… : KORNET
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ
ìš°íŽ¸ë²ˆí˜¸ : 463-711
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 211.104.0.0 - 211.105.255.255 (/15)
Service Name : KORNET
Organization Name : Korea Telecom
Organization ID : ORG1600
Address : 206, Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro
Zip Code : 463-711
Registration Date : 20000424

[ Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

[ Tech Contact Information ]
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

[ Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-100-0000
E-Mail : abuse@kornet.net

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
Network Name : KORNET-INFRA000001
Organization Name : Korea Telecom
Organization ID : ORG1600
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro
Zip Code : 463-711
Registration Date : 20120307
Publishes : N

[ Technical Contact Information ]
Organization Name : Korea Telecom
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro
Zip Code : 463-711
E-Mail : kornet_ip@kt.com

- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 58.215.133.52

Hi,

The IP 58.215.133.52 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 58.215.133.52:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '58.208.0.0 - 58.223.255.255'

inetnum: 58.208.0.0 - 58.223.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20050624
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

Friday, 13 December 2013

[Fail2Ban] SSH: banned 112.91.240.230

Hi,

The IP 112.91.240.230 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 112.91.240.230:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '112.91.240.0 - 112.91.247.255'

inetnum: 112.91.240.0 - 112.91.247.255
netname: UNICOM-GDJY
descr: China Unicom Jieyang city network, Leased line address
descr: China Unicom Jieyang Branch
country: CN
admin-c: CG272-AP
tech-c: CG272-AP
status: ALLOCATED NON-PORTABLE
changed: wangjj238@chinaunicom.cn 20090514
mnt-by: MAINT-CNCGROUP-GD
mnt-irt: IRT-CU-CN
source: APNIC

irt: IRT-CU-CN
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
e-mail: zhouxm@chinaunicom.cn
abuse-mailbox: zhouxm@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
changed: zhouxm@chinaunicom.cn 20101110
changed: hm-changed@apnic.net 20101116
source: APNIC

role: CNCGROUP GD
nic-hdl: CG272-AP
e-mail: gdipnoc@chinaunicom.cn
address: XinShiKong Plaza,No 666 Huangpu Rd. Guangzhou 510627,China
phone: +86-20-22214226
fax-no: +86-20-22214228
admin-c: RP181-AP
tech-c: RP181-AP
country: CN
changed: wangjj238@chinaunicom.cn 20090414
mnt-by: MAINT-CNCGROUP-GD
source: APNIC

% Information related to '112.88.0.0/13AS17816'

route: 112.88.0.0/13
descr: China Unicom CHINA169 Guangdong Province Network
country: CN
origin: AS17816
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20090112
source: APNIC

% Information related to '112.88.0.0/13AS4837'

route: 112.88.0.0/13
descr: China Unicom CHINA169 Guangdong Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20090112
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 210.83.234.198

Hi,

The IP 210.83.234.198 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 210.83.234.198:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '210.83.234.128 - 210.83.234.255'

inetnum: 210.83.234.128 - 210.83.234.255
netname: changsiyuan-advertisement-corp
country: cn
descr: haerbin city,heilongjiang province
admin-c: TC254-AP
tech-c: TC254-AP
status: ASSIGNED NON-PORTABLE
changed: t-wangxy2@china-netcom.com 20021105
mnt-by: MAINT-CN-ZM28
source: APNIC

person: TECH GROUP CNC
nic-hdl: TC254-AP
address: 9/F, Building A, Corporate Square, No. 35 Financial Street,
address: Xicheng District, Beijing 100032, P.R.China
country: CN
phone: +86-10-88093588
fax-no: +86-10-88091442
e-mail: abuse@cnc-noc.net
mnt-by: MAINT-CN-ZM28
changed: abuse@cnc-noc.net 20100714
source: APNIC

% Information related to '210.83.224.0/19AS17816'

route: 210.83.224.0/19
descr: CNC Group CHINA169 Guangdong Province Network
country: CN
origin: AS17816
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 67.214.168.252

Hi,

The IP 67.214.168.252 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 67.214.168.252:

[Querying whois.arin.net]
[Redirected to rwhois.netwrx.net:4321]
[Querying rwhois.netwrx.net]
[rwhois.netwrx.net]
%rwhois V-1.5:003eff:00 rwhois.netwrx.net. (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-ahmedag14.67.214.168.248/29
network:Auth-Area:67.214.168.248/29
network:Network-Name:ahmed.ag.14
network:IP-Network:67.214.168.248/29
network:Organization;I:NETBLK-ahmed.ag.14
network:Tech-Contact;I:ahmed321q@hotmail.com
network:Admin-Contact;I:ahmed321q@hotmail.com
network:Created:131213
network:City:South.Bend
network:State:IN
network:Country-Code:US

network:Class-Name:network
network:ID:NETBLK-ahmedag14.67.214.168.248/29
network:Auth-Area:67.214.168.248/29
network:Network-Name:ahmed.ag.14
network:IP-Network:67.214.168.248/29
network:Organization;I:NETBLK-ahmed.ag.14
network:Tech-Contact;I:ahmed321q@hotmail.com
network:Admin-Contact;I:ahmed321q@hotmail.com
network:Created:131213
network:City:South.Bend
network:State:IN
network:Country-Code:US

%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 201.244.16.146

Hi,

The IP 201.244.16.146 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 201.244.16.146:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net

% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2013-12-13 14:48:50 (BRST -02:00)

inetnum: 201.244.16.144/29
status: reallocated
owner: CONTACT CENTER AMERICAS
ownerid: CO-CCAM4-LACNIC
responsible: IVON JARAMILLO
address: Av. EL DORADO, 84A55, LOCAL 150
address: 9999 - BOGOTA - CU
country: CO
phone: +57 313 4333004 []
owner-c: IVJ2
tech-c: IVJ2
abuse-c: IVJ2
created: 20110302
changed: 20110302
inetnum-up: 201.244/16

nic-hdl: IVJ2
person: IVON JARAMILLO
e-mail: maria.rodriguezs.pr@ETB.COM.CO
address: Av. EL DORADO, 84A55, LOCAL 150
address: 9999 - BOGOTA - CU
country: CO
phone: +57 313 4333004 []
created: 20070910
changed: 20070910

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

Regards,

Fail2Ban

Thursday, 12 December 2013

[Fail2Ban] SSH: banned 113.240.245.243

Hi,

The IP 113.240.245.243 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 113.240.245.243:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '113.240.0.0 - 113.247.255.255'

inetnum: 113.240.0.0 - 113.247.255.255
netname: CHINANET-HN
descr: CHINANET HUNAN PROVINCE NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: CH636-AP
remarks: service provider
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HN
mnt-routes: MAINT-CHINANET-HN
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20081216
source: APNIC

role: CHINANET HUNAN
address: No.1 TuanJie road,ChangSha,Hunan 410005
country: CN
phone: +86 731 4792092
fax-no: +86 731 4792007
e-mail: abuse.szx@2118.com.cn
remarks: send spam reports to spam.szx@2118.com.cn
remarks: and abuse reports to abuse.szx@2118.com.cn
remarks: Please include detailed information and
remarks: times in UTC
admin-c: CH632-AP
tech-c: CS499-AP
nic-hdl: CH636-AP
mnt-by: MAINT-CHINANET-HN
changed: ipaddress@hntelecom.net.cn 20050816
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 87.197.110.96

Hi,

The IP 87.197.110.96 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 87.197.110.96:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '87.197.110.0 - 87.197.110.255'

% Abuse contact for '87.197.110.0 - 87.197.110.255' is 'abuse@telekom.sk'

inetnum: 87.197.110.0 - 87.197.110.255
netname: ST-xDSL-SBLOCK-87-197-110
descr: Splitblock of STATIC IPs for broadband customers
descr: Slovak Telekom, a.s.
descr: Bratislava
descr: Slovak Republic
country: SK
admin-c: JK1887-RIPE
tech-c: STIP-RIPE
remarks: In case of security problem notify abuse@telekom.sk
status: ASSIGNED PA
mnt-by: SK-TELECOM-MNT
source: RIPE # Filtered

role: Slovak Telecom Network Administrator
address: Slovak Telekom, a.s.
address: Bajkalska 28, 81762 Bratislava, Slovak republic
abuse-mailbox: abuse@telekom.sk
admin-c: JK1887-RIPE
tech-c: JK1887-RIPE
tech-c: PET-RIPE
tech-c: MP9876-RIPE
tech-c: MM34621-RIPE
nic-hdl: STIP-RIPE
mnt-by: SK-TELECOM-MNT
source: RIPE # Filtered

person: Jan Katuska
address: Slovak Telekom, a.s.
address: Skolska 10
address: Banska Bystrica
address: 97401
address: Slovakia
phone: +421 48 4134175
nic-hdl: JK1887-RIPE
mnt-by: SK-TELECOM-MNT
source: RIPE # Filtered

% Information related to '87.197.0.0/16AS6855'

route: 87.197.0.0/16
descr: routes from Slovak Telecom AS6855
origin: AS6855
mnt-by: SK-TELECOM-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 54.207.26.9

Hi,

The IP 54.207.26.9 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 54.207.26.9:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 54.207.26.9"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=54.207.26.9?showDetails=true&showARIN=false&ext=netref2
#

Amazon Technologies Inc. AMAZON-2011L (NET-54-192-0-0-1) 54.192.0.0 - 54.207.255.255
Amazon.com, Inc. AMAZO-ZGRU2 (NET-54-207-0-0-1) 54.207.0.0 - 54.207.255.255

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban