Banned hacker's IPs

Saturday, 11 January 2014

[Fail2Ban] SSH: banned 94.75.205.134

Hi,

The IP 94.75.205.134 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 94.75.205.134:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '94.75.205.0 - 94.75.205.255'

% Abuse contact for '94.75.205.0 - 94.75.205.255' is 'abuse@leaseweb.com'

inetnum: 94.75.205.0 - 94.75.205.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: www.leaseweb.com
remarks: Please send email to "abuse@leaseweb.com" for complaints
remarks: regarding portscans, DoS attacks and spam.
remarks: assignment LEASEWEB 20080723
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: LEASEWEB-MNT
source: RIPE # Filtered

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
nic-hdl: LSW1-RIPE
mnt-by: OCOM-MNT
source: RIPE # Filtered

% Information related to '94.75.192.0/18AS16265'

route: 94.75.192.0/18
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.174.51.214

Hi,

The IP 61.174.51.214 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.174.51.214:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.174.51.192 - 61.174.51.255'

inetnum: 61.174.51.192 - 61.174.51.255
netname: HANGZHOU-SRT-TECHNOLOGY-CO-LTD
country: CN
descr: HANGZHOU SRT TECHNOLOGY CO., LTD
descr:
admin-c: BB324-AP
tech-c: CH119-AP
mnt-irt: IRT-CHINANET-ZJ
status: ASSIGNED NON-PORTABLE
changed: zjnoc_ip_4@163.com 20130508
mnt-by: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Huzhou
address: No.18 Hongqi Road,Huzhou,Zhejiang.313000
country: CN
phone: +86-572-2022163
fax-no: +86-572-2210609
e-mail: anti_spam@mail.huptt.zj.cn
remarks: send spam reports to anti_spam@mail.huptt.zj.cn
remarks: and abuse reports to anti_spam@mail.huptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH50-AP
tech-c: CH50-AP
nic-hdl: CH119-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Bing Bai
nic-hdl: BB324-AP
e-mail: anti_spam@mail.huptt.zj.cn
address: Huzhou,Zhejiang.Postcode:313000
phone: +86-13666633017
country: CN
changed: zjnoc_ip_3@163.com 20131107
mnt-by: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.160.215.35

Hi,

The IP 61.160.215.35 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.160.215.35:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.160.0.0 - 61.160.255.255'

inetnum: 61.160.0.0 - 61.160.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostmaster@ns.chinanet.cn.net 20020209
changed: hostmaster@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% Information related to '61.160.0.0/16AS23650'

route: 61.160.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 222.189.239.138

Hi,

The IP 222.189.239.138 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 222.189.239.138:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '222.184.0.0 - 222.191.255.255'

inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your
remarks: organisation account name in the subject line.
changed: hm-changed@apnic.net 20040223
status: ALLOCATED PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 220.113.8.147

Hi,

The IP 220.113.8.147 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 220.113.8.147:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '220.112.0.0 - 220.115.255.255'

inetnum: 220.112.0.0 - 220.115.255.255
netname: GXBLnet
descr: BeiJing Guoxin bilin Telecom Technology Co.,Ltd
descr: B305,3 layer,33 floor,Kechuang Fourteenth Street No.99,
descr: Economic & Technological Development Zone
descr: Beijing,China
country: CN
admin-c: ML1879-AP
tech-c: ML1879-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20130419
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Fred Xu
address: No.11 Hepingli east Dongcheng District, Beijing,China
country: CN
phone: +86-010-52206257
e-mail: tomsxu7926@sina.com
nic-hdl: ML1879-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20130418
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 220.164.141.19

Hi,

The IP 220.164.141.19 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 220.164.141.19:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '220.163.0.0 - 220.165.255.255'

inetnum: 220.163.0.0 - 220.165.255.255
netname: CHINANET-YN
descr: CHINANET yunnan province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CH93-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-YN
changed: hostmaster@ns.chinanet.cn.net 20010711
status: ALLOCATED NON-PORTABLE
changed: hm-changed@apnic.net 20081210
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 153.122.29.57

Hi,

The IP 153.122.29.57 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 153.122.29.57:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '153.122.0.0 - 153.123.255.255'

inetnum: 153.122.0.0 - 153.123.255.255
netname: DIX
descr: DIX Co., Ltd.
descr: 10F CERULEAN TOWER, 26-1, Sakuragaoka-cho, Shibuya-ku, Tokyo 150-8512, Japan
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
status: ALLOCATED PORTABLE
remarks: Email address for spam or abuse complaints : abuse_@dix.jp
mnt-irt: IRT-JPNIC-JP
mnt-by: MAINT-JPNIC
mnt-lower: MAINT-JPNIC
changed: hm-changed@apnic.net 20121011
changed: hm-changed@apnic.net 20121109
changed: ip-apnic@nic.ad.jp 20121112
source: APNIC

irt: IRT-JPNIC-JP
address: Urbannet-Kanda Bldg 4F, 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047, Japan
e-mail: abuse@apnic.net
abuse-mailbox: abuse@apnic.net
admin-c: JNIC1-AP
tech-c: JNIC1-AP
auth: # Filtered
mnt-by: MAINT-JPNIC
changed: abuse@apnic.net 20101108
changed: hm-changed@apnic.net 20101111
source: APNIC

role: Japan Network Information Center
address: Urbannet-Kanda Bldg 4F
address: 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047,Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: hostmaster@nic.ad.jp
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
changed: hm-changed@apnic.net 20041222
changed: hm-changed@apnic.net 20050324
changed: ip-apnic@nic.ad.jp 20051027
changed: ip-apnic@nic.ad.jp 20120828
source: APNIC

% Information related to '153.122.28.0 - 153.122.31.255'

inetnum: 153.122.28.0 - 153.122.31.255
netname: DIX-CL
descr: DIX Co., Ltd.
country: JP
admin-c: JP00086257
tech-c: JP00086257
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: apnic-ftp@nic.ad.jp 20121113
source: JPNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 1.93.32.212

Hi,

The IP 1.93.32.212 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 1.93.32.212:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '1.93.0.0 - 1.93.255.255'

inetnum: 1.93.0.0 - 1.93.255.255
netname: HSOFT
descr: Beijing hsoft technologies inc
descr: Beijing City, Haidian District Madian 8 South Road
descr: crown sea building three layer
country: CN
admin-c: ZT587-AP
tech-c: ZT587-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: hm-changed@apnic.net 20121122
status: ALLOCATED PORTABLE
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Zhang Tao
address: Beijing City, Haidian District Madian 8 South Road crown sea building three layer
country: CN
phone: +86-13051336272
e-mail: 13051336272@wo.com.cn
nic-hdl: ZT587-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20121107
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 183.129.249.106

Hi,

The IP 183.129.249.106 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 183.129.249.106:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '183.129.128.0 - 183.129.255.255'

inetnum: 183.129.128.0 - 183.129.255.255
netname: CHINANET-ZJ-HZ
country: cn
descr: CHINANET-ZJ Hangzhou node network
descr: Zhejiang Telecom
admin-c: CZ4-AP
tech-c: CH122-AP
mnt-irt: IRT-CHINANET-ZJ
status: ALLOCATED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20110909
mnt-by: MAINT-CHINANET-ZJ
mnt-lower: MAINT-CN-CHINANET-ZJ-HZ
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Hangzhou
address: No.352 Tiyuchang Road,Hangzhou,Zhejiang.310003
country: CN
phone: +86-571-85157929
fax-no: +86-571-85102776
e-mail: anti_spam@mail.hz.zj.cn
remarks: send spam reports to anti_spam@mail.hz.zj.cn
remarks: and abuse reports to anti_spam@mail.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH54-AP
tech-c: CH54-AP
nic-hdl: CH122-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

role: CHINANET ZHEJIANG
address: No. 257 Qingjiang Road, Hangzhou, Zhejiang.310066
country: CN
phone: +86-571-86821752
fax-no: +86-571-86988329
e-mail: antispam@dcb.hz.zj.cn
remarks: send spam reports to antispam@dcb.hz.zj.cn
remarks: and abuse reports to antispam@dcb.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CZ61-AP
tech-c: CZ61-AP
nic-hdl: CZ4-AP
mnt-by: MAINT-CHINANET-ZJ
changed: hjh@dcb.hz.zj.cn 20050914
source: APNIC
changed: hm-changed@apnic.net 20111114

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 129.24.135.44

Hi,

The IP 129.24.135.44 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 129.24.135.44:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 129.24.135.44"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=129.24.135.44?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 129.24.0.0 - 129.24.255.255
CIDR: 129.24.0.0/16
OriginAS: AS3388
NetName: UNM-CDCN
NetHandle: NET-129-24-0-0-1
Parent: NET-129-0-0-0-0
NetType: Direct Assignment
RegDate: 1987-07-17
Updated: 2007-05-07
Ref: http://whois.arin.net/rest/net/NET-129-24-0-0-1

OrgName: University of New Mexico
OrgId: UNM
Address: 2701 Campus Blvd., NE
City: Albuquerque
StateProv: NM
PostalCode: 87131-6046
Country: US
RegDate: 1987-07-17
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/UNM

OrgTechHandle: UNMIP-ARIN
OrgTechName: UNM Backbone
OrgTechPhone: +1-505-277-4322
OrgTechEmail: backbone@unm.edu
OrgTechRef: http://whois.arin.net/rest/poc/UNMIP-ARIN

OrgAbuseHandle: UNMIP-ARIN
OrgAbuseName: UNM Backbone
OrgAbusePhone: +1-505-277-4322
OrgAbuseEmail: backbone@unm.edu
OrgAbuseRef: http://whois.arin.net/rest/poc/UNMIP-ARIN

RAbuseHandle: ABUSE1596-ARIN
RAbuseName: Abuse
RAbusePhone: +1-505-277-4646
RAbuseEmail: security@unm.edu
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE1596-ARIN

RTechHandle: UNMIP-ARIN
RTechName: UNM Backbone
RTechPhone: +1-505-277-4322
RTechEmail: backbone@unm.edu
RTechRef: http://whois.arin.net/rest/poc/UNMIP-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 103.23.244.22

Hi,

The IP 103.23.244.22 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 103.23.244.22:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '103.23.244.0 - 103.23.244.255'

inetnum: 103.23.244.0 - 103.23.244.255
netname: UPI-ID
descr: Universitas Pendidikan Indonesia
descr: University / Direct Member IDNIC
descr: Jl. Dr. Setiabudhi no. 229
descr: Bandung Jawa Barat
country: ID
admin-c: MRS8-AP
tech-c: MRS8-AP
remarks: Send Spam& Abuse Reports to munir@upi.edu
mnt-by: MNT-APJII-ID
mnt-routes: MAINT-ID-UPI
mnt-irt: IRT-UPI-ID
status: ASSIGNED PORTABLE
changed: hm-changed@apnic.net 20111212
changed: hostmaster@idnic.net 20111219
source: APNIC

irt: IRT-UPI-ID
address: Universitas Pendidikan Indonesia
address: Jl. Dr. Setiabudhi no. 229
address: Bandung Jawa Barat
e-mail: munir@upi.edu
abuse-mailbox: munir@upi.edu
admin-c: MRS8-AP
tech-c: MRS8-AP
auth: # Filtered
mnt-by: MAINT-ID-UPI
changed: munir@upi.edu 20111216
source: APNIC

person: Moh Riky Saadilah
address: Jl. Dr.Setiabudhi No. 229
address: Bandung 40154
address: Jawa Barat - Indonesia
country: ID
phone: +62-22-70619000
fax-no: +62-22-2013651
e-mail: riky@upi.edu
nic-hdl: MRS8-AP
mnt-by: MAINT-ID-UPI
changed: hostmaster@idnic.net 20111202
source: APNIC

% Information related to '103.23.244.0/24AS18394'

route: 103.23.244.0/24
descr: Universitas Pendidikan Indonesia
descr: University / Direct Member IDNIC
descr: Jl. Dr. Setiabudhi no. 229
descr: Bandung - Jawa Barat
country: ID
origin: AS18394
mnt-by: MAINT-ID-UPI
changed: hostmaster@telkom.net.id 20111223
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.147.103.102

Hi,

The IP 61.147.103.102 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.147.103.102:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.147.0.0 - 61.147.255.255'

inetnum: 61.147.0.0 - 61.147.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostmaster@ns.chinanet.cn.net 20020209
changed: hostmaster@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% Information related to '61.147.0.0/16AS23650'

route: 61.147.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 117.41.182.242

Hi,

The IP 117.41.182.242 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 117.41.182.242:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '117.40.0.0 - 117.43.255.255'

inetnum: 117.40.0.0 - 117.43.255.255
netname: CHINANET-JX
descr: CHINANET Jiangxi province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: JN113-AP
remarks: service provider
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-IP-WWF
mnt-routes: MAINT-IP-WWF
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20070912
source: APNIC

role: JXDCB NET
address: Jiangxi telecom network operation support department
address: No.2009, Beijing East Road , nanchangÃƒÂ¯Ã‚Â¼Ã‚ÂŒjiangxi province
country: CN
phone: +86 79186600000
e-mail: wzzx_2013@189.cn
remarks: send spam reports to wzzx_2013@189.cn
remarks: and abuse reports to wzzx_2013@189.cn
remarks: http://www.online.jx.cn
admin-c: XY1-AP
tech-c: WZ1-CN
tech-c: WW49-AP
nic-hdl: JN113-AP
notify: wzzx_2013@189.cn
mnt-by: MAINT-IP-WWF
changed: hm-changed@apnic.net 20020812
changed: chenyiq@gsta.com 20130221
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 221.11.64.118

Hi,

The IP 221.11.64.118 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 221.11.64.118:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '221.11.64.0 - 221.11.64.255'

inetnum: 221.11.64.0 - 221.11.64.255
netname: PPPoe
country: CN
descr: XiAnCity-IpAddressPool-80
admin-c: CH679-AP
tech-c: CH679-AP
status: ASSIGNED NON-PORTABLE
changed: chengj@169cnc.com 20081010
mnt-by: MAINT-CNCGROUP-SN
source: APNIC

person: CNCGroup-SN Hostmaster
nic-hdl: CH679-AP
e-mail: quyj@china-netcom.com
address: China Network Communication ,SVT
address: NO.2 GuangDe Road, High Tec Zone
address: Xi'an, Shannxi, China
phone: +86-29-88192060
fax-no: +86-29-88192037
country: CN
changed: quyj@china-netcom.com 20060119
mnt-by: MAINT-CNCGROUP-SN
source: APNIC

% Information related to '221.11.0.0/17AS4837'

route: 221.11.0.0/17
descr: CNC Group CHINA169 Shanxi Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 202.85.221.153

Hi,

The IP 202.85.221.153 has just been banned by Fail2Ban after
7 attempts against SSH.

Here are more information about 202.85.221.153:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '202.85.208.0 - 202.85.223.255'

inetnum: 202.85.208.0 - 202.85.223.255
netname: Elink-space
descr: Elink-space (Beijing) Technology Co,. Ltd '
descr: OUYUAN 4-2215,Maliandao Street, Xicheng District
descr: Beijing, China, 100055
country: CN
admin-c: ZM673-AP
tech-c: ZM674-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20110628
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Lin Jia
address: OUYUAN 4-2215,Maliandao Street, Xicheng District
address: Beijing, China, 100055
country: CN
phone: +86-010- 52882179
fax-no: +86-010- 63354662
e-mail: jialin88@163.com
nic-hdl: ZM673-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20110609
source: APNIC

person: Tony Zhang
address: OUYUAN 4-2215,Maliandao Street, Xicheng District
address: Beijing, China, 100055
country: CN
phone: +86-010- 52882179
fax-no: +86-010- 63354662
e-mail: jialin88@163.com
nic-hdl: ZM674-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net 20110609
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 222.186.34.140

Hi,

The IP 222.186.34.140 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 222.186.34.140:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '222.184.0.0 - 222.191.255.255'

inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your
remarks: organisation account name in the subject line.
changed: hm-changed@apnic.net 20040223
status: ALLOCATED PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 50.115.169.186

Hi,

The IP 50.115.169.186 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 50.115.169.186:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 50.115.169.186"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=50.115.169.186?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 50.115.160.0 - 50.115.175.255
CIDR: 50.115.160.0/20
OriginAS: AS29761, AS32875, AS17139
NetName: DNSSLAVE5
NetHandle: NET-50-115-160-0-1
Parent: NET-50-0-0-0-0
NetType: Direct Allocation
RegDate: 2011-09-16
Updated: 2013-10-24
Ref: http://whois.arin.net/rest/net/NET-50-115-160-0-1

OrgName: DNSSLAVE.COM
OrgId: VIRPU-1
Address: 324 E 11th Street
Address: Ste 1000
City: Kansas City
StateProv: MO
PostalCode: 64106
Country: US
RegDate: 2008-03-31
Updated: 2011-09-14
Ref: http://whois.arin.net/rest/org/VIRPU-1

OrgAbuseHandle: NETWO2357-ARIN
OrgAbuseName: Virpus Network Operations
OrgAbusePhone: +1-877-484-7787
OrgAbuseEmail: abuse@myvirpus.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NETWO2357-ARIN

OrgTechHandle: NETWO2357-ARIN
OrgTechName: Virpus Network Operations
OrgTechPhone: +1-877-484-7787
OrgTechEmail: abuse@myvirpus.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO2357-ARIN

OrgNOCHandle: NETWO2357-ARIN
OrgNOCName: Virpus Network Operations
OrgNOCPhone: +1-877-484-7787
OrgNOCEmail: abuse@myvirpus.com
OrgNOCRef: http://whois.arin.net/rest/poc/NETWO2357-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 192.188.51.31

Hi,

The IP 192.188.51.31 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 192.188.51.31:

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net

% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2014-01-11 11:42:44 (BRST -02:00)

inetnum: 192.188.51/24
status: assigned
aut-num: N/A
owner: Universidad Tecnologica Equinoccial
ownerid: EC-UTEQ-LACNIC
responsible: Dr. Alvaro Trueba Barahona
address: Borgeois y Rumipamba, 210,
address: 17012764 - Quito - pi
country: EC
phone: +593 2 2990800 [2526]
owner-c: EVR
tech-c: EVR
abuse-c: EVR
inetrev: 192.188.51/24
nserver: UIO.TELCONET.NET
nsstat: 20140111 AA
nslastaa: 20140111
nserver: IO.TELCONET.NET
nsstat: 20140111 AA
nslastaa: 20140111
created: 19920619
changed: 20110215

nic-hdl: EVR
person: Edwin Vivanco Rios
e-mail: evivanco@UTE.EDU.EC
address: 17012764, 210,
address: 17012764 - Quito - Pi
country: EC
phone: +593 2 2990800 [2526]
created: 20110207
changed: 20130917

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 46.201.175.195

Hi,

The IP 46.201.175.195 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 46.201.175.195:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '46.201.128.0 - 46.201.255.255'

% Abuse contact for '46.201.128.0 - 46.201.255.255' is 'aremiga@ukrtel.net'

inetnum: 46.201.128.0 - 46.201.255.255
netname: UKRTELNET-ADSL
descr: NCC #2012011594 Approved IP assignment
country: ua
remarks: E-mail for SPAM and abuse postmaster@ukrtel.net
admin-c: ARM42-RIPE
tech-c: ARM42-RIPE
status: ASSIGNED PA
mnt-by: AS6849-MNT
source: RIPE # Filtered

person: Remiga Alexander
address: JSC UKRTELECOM
address: 18, Shevchenko blvd
address: Ukraine, Kiev
phone: +380 (44) 230-9024
nic-hdl: ARM42-RIPE
mnt-by: AS6849-MNT
source: RIPE # Filtered

% Information related to '46.201.0.0/16AS6849'

route: 46.201.0.0/16
descr: AGGREGATE BLOCK FOR UKRTELECOM
origin: AS6849
mnt-by: AS6849-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 114.80.246.200

Hi,

The IP 114.80.246.200 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 114.80.246.200:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '114.80.0.0 - 114.95.255.255'

inetnum: 114.80.0.0 - 114.95.255.255
netname: CHINANET-SH
descr: CHINANET SHANGHAI PROVINCE NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: WWQ4-AP
tech-c: WWQ4-AP
remarks: service provider
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SH
changed: hm-changed@apnic.net 20080514
source: APNIC

person: Weng Wen Qian
address: Room 2405,357 Songlin Road,Shanghai 200122
country: CN
phone: +86-21-68405784
fax-no: +86-21-50623458
e-mail: wengwq@online.sh.cn
nic-hdl: WWQ4-AP
mnt-by: MAINT-CHINANET-SH
changed: ip-admin@mail.online.sh.cn 20050403
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 125.39.22.154

Hi,

The IP 125.39.22.154 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 125.39.22.154:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '125.36.0.0 - 125.39.255.255'

inetnum: 125.36.0.0 - 125.39.255.255
netname: UNICOM-TJ
descr: China Unicom Tianjin province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: HZ19-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-TJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
mnt-irt: IRT-CU-CN
changed: hm-changed@apnic.net 20051230
changed: hm-changed@apnic.net 20090508
source: APNIC

irt: IRT-CU-CN
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
e-mail: zhouxm@chinaunicom.cn
abuse-mailbox: zhouxm@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
changed: zhouxm@chinaunicom.cn 20101110
changed: hm-changed@apnic.net 20101116
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@cnc-noc.net
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: abuse@cnc-noc.net 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: huang zheng
nic-hdl: HZ19-AP
e-mail: tj-ipaddr3@chinaunicom.cn
address: 76 NO, ShiZiLin Street ,HeBei district of Tianjin,China
phone: +86-22-24459190
fax-no: +86-22-24454499
country: CN
changed: tj-ipaddr3@chinaunicom.cn 20120713
mnt-by: MAINT-CNCGROUP-TJ
source: APNIC

% Information related to '125.36.0.0/14AS4837'

route: 125.36.0.0/14
descr: CNC Group CHINA169 Tianjin Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 112.91.240.230

Hi,

The IP 112.91.240.230 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 112.91.240.230:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '112.91.240.0 - 112.91.247.255'

inetnum: 112.91.240.0 - 112.91.247.255
netname: UNICOM-GDJY
descr: China Unicom Jieyang city network, Leased line address
descr: China Unicom Jieyang Branch
country: CN
admin-c: CG272-AP
tech-c: CG272-AP
status: ALLOCATED NON-PORTABLE
changed: wangjj238@chinaunicom.cn 20090514
mnt-by: MAINT-CNCGROUP-GD
mnt-irt: IRT-CU-CN
source: APNIC

irt: IRT-CU-CN
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
e-mail: zhouxm@chinaunicom.cn
abuse-mailbox: zhouxm@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
changed: zhouxm@chinaunicom.cn 20101110
changed: hm-changed@apnic.net 20101116
source: APNIC

role: CNCGROUP GD
nic-hdl: CG272-AP
e-mail: gdipnoc@chinaunicom.cn
address: XinShiKong Plaza,No 666 Huangpu Rd. Guangzhou 510627,China
phone: +86-20-22214226
fax-no: +86-20-22214228
admin-c: RP181-AP
tech-c: RP181-AP
country: CN
changed: wangjj238@chinaunicom.cn 20090414
mnt-by: MAINT-CNCGROUP-GD
source: APNIC

% Information related to '112.88.0.0/13AS17816'

route: 112.88.0.0/13
descr: China Unicom CHINA169 Guangdong Province Network
country: CN
origin: AS17816
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20090112
source: APNIC

% Information related to '112.88.0.0/13AS4837'

route: 112.88.0.0/13
descr: China Unicom CHINA169 Guangdong Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20090112
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

Friday, 10 January 2014

[Fail2Ban] SSH: banned 1.179.175.22

Hi,

The IP 1.179.175.22 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 1.179.175.22:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '1.179.175.20 - 1.179.175.23'

inetnum: 1.179.175.20 - 1.179.175.23
netname: Maelanoi-Municipality
notify: abuse@totisp.net
descr: Maelanoi Municipality,Saraburi Province
country: th
admin-c: ag100-ap
tech-c: ws431-ap
status: assigned non-portable
mnt-by: MAINT-TH-TOT
mnt-irt: IRT-TOT-TH
changed: apipolg@tot.co.th 20130808
source: APNIC

irt: IRT-TOT-TH
address: TOT Public Company Limited
address: 89/2 Moo 3 Chaengwattana Rd, Laksi,Bangkok 10210 THAILAND
e-mail: apipolg@tot.co.th
abuse-mailbox: abuse@totisp.net
admin-c: pa82-ap
tech-c: ag100-ap
auth: # Filtered
mnt-by: MAINT-TH-TOT
changed: abuse@totisp.net 20101108
source: APNIC

person: Apipol Gunabhibal
nic-hdl: AG100-AP
e-mail: apipolg@tot.co.th
address: TOT Public Company Limited
address: 89/2 Moo 3 Chaengwattana Rd, Laksi, Bangkok 10210 THAILAND
phone: +66-2574-9178
fax-no: +66-2574-8401
country: TH
changed: apipolg@tot.co.th 20110215
mnt-by: MAINT-TH-TOT
source: APNIC

person: Worawat Songwiwat
nic-hdl: WS431-AP
e-mail: worawat@totbb.com
address: TOT Public Company Limited
address: 89/2 Moo 3, Chaengwattana Rd, Tungsonghong, Laksi, Bangkok 10210
phone: +66-81-876-8917
country: TH
changed: worawat@totbb.com 20061102
mnt-by: MAINT-TH-TOT
source: APNIC

% Information related to '1.179.160.0/19AS9737'

route: 1.179.160.0/19
descr: TOT Public Company Limited
origin: AS9737
mnt-by: MAINT-TH-TOT
changed: boy@totbb.net 20111222
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 58.215.133.52

Hi,

The IP 58.215.133.52 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 58.215.133.52:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '58.208.0.0 - 58.223.255.255'

inetnum: 58.208.0.0 - 58.223.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20050624
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 222.239.255.73

Hi,

The IP 222.239.255.73 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 222.239.255.73:

[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 222.239.255.73

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 222.232.0.0 - 222.239.255.255 (/13)
ì„œë¹„ìŠ¤ëª… : broadNnet
ê¸°ê´€ëª… : ì—ìŠ¤ì¼€ì´ë¸Œë¡œë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG3930
ì£¼ì†Œ : ì„œìš¸íŠ¹ë³„ì&lsqauo;œ ì¤'êµ¬ í‡´ê³„ë¡œ 24, SKë‚¨ì‚°ê·¸ë¦°ë¹Œë"© (ë‚¨ëŒ€ë¬¸ë¡œ5ê°€)
ìš°íŽ¸ë²ˆí˜¸ : 100-711
í• ë&lsqauo;¹ì¼ìž : 20040402

[ IPv4ì£¼ì†Œ ì±…ìž„ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com

[ IPv4ì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com

[ ìŠ¤íŒ¸ í•´í‚¹ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : abuse@skbroadband.com

--------------------------------------------------------------------------------

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†Œì— ëŒ€í•œ ìœ„ ê´€ë¦¬ëŒ€í–‰ìžì˜ ì‚¬ìš©ìž í• ë&lsqauo;¹ì •ë³´ê°€ ì¡´ìž¬í•˜ì§€ ì•ŠìŠµë&lsqauo;ˆë&lsqauo;¤.

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 222.232.0.0 - 222.239.255.255 (/13)
Service Name : broadNnet
Organization Name : SK Broadband Co Ltd
Organization ID : ORG3930
Address : 267, Seoul Jung-gu Toegye-ro
Zip Code : 100-711
Registration Date : 20040402

[ Admin Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Tech Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Network Abuse Contact Information ]
Name : manager
Phone : +82-2-106-2
E-Mail : abuse@skbroadband.com

- KISA/KRNIC Whois Service -

Regards,

Fail2Ban

Thursday, 9 January 2014

[Fail2Ban] SSH: banned 1.93.37.230

Hi,

The IP 1.93.37.230 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 1.93.37.230:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '1.93.0.0 - 1.93.255.255'

inetnum: 1.93.0.0 - 1.93.255.255
netname: HSOFT
descr: Beijing hsoft technologies inc
descr: Beijing City, Haidian District Madian 8 South Road
descr: crown sea building three layer
country: CN
admin-c: ZT587-AP
tech-c: ZT587-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: hm-changed@apnic.net 20121122
status: ALLOCATED PORTABLE
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Zhang Tao
address: Beijing City, Haidian District Madian 8 South Road crown sea building three layer
country: CN
phone: +86-13051336272
e-mail: 13051336272@wo.com.cn
nic-hdl: ZT587-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20121107
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

Wednesday, 8 January 2014

[Fail2Ban] SSH: banned 220.181.82.213

Hi,

The IP 220.181.82.213 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 220.181.82.213:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '220.181.0.0 - 220.181.255.255'

inetnum: 220.181.0.0 - 220.181.255.255
netname: CHINANET-IDC-BJ
country: CN
descr: CHINANET Beijing province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
admin-c: CH93-AP
tech-c: HC55-AP
remarks: hostmaster is not for spam complaint,
remarks: please send spam complaint to anti-spam@ns.chinanet.cn.net
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINATELECOM-BJ
status: ALLOCATED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20030620
changed: hm-changed@apnic.net 20050715
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: Hostmaster of Beijing Telecom corporation CHINA TELECOM
nic-hdl: HC55-AP
e-mail: bjnic@bjtelecom.net
address: Beijing Telecom
address: No. 107 XiDan Beidajie, Xicheng District Beijing
phone: +86-010-58503461
fax-no: +86-010-58503054
country: cn
changed: bjnic@bjtelecom.net 20040115
mnt-by: MAINT-CHINATELECOM-BJ
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 123.30.210.11

Hi,

The IP 123.30.210.11 has just been banned by Fail2Ban after
6 attempts against SSH.

Here are more information about 123.30.210.11:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '123.30.0.0 - 123.31.255.255'

inetnum: 123.30.0.0 - 123.31.255.255
netname: VDC-NET
country: vn
descr: VietNam Data Communication Company (VDC)
admin-c: VIG1-AP
tech-c: VIG1-AP
status: ALLOCATED NON-PORTABLE
changed: hm-changed@vnnic.net.vn 20090325
mnt-by: MAINT-VN-VNPT
source: APNIC

role: VDC IPADMIN GROUP
address: Internet Building, Block II, Thang Long Inter Village
address: Nguyen Phong Sac str, Cau Giay Dist, Ha Noi
country: VN
phone: +84-912-800008
fax-no: +84-4-9430427
e-mail: hathm@vdc.com.vn
remarks: send spam reports to abuse@vdc.com.vn
remarks: and abuse reports to abuse@vnn.vn
admin-c: THMH1-AP
tech-c: THMH1-AP
nic-hdl: VIG1-AP
notify: hm-changed@vnnic.net.vn
mnt-by: MAINT-VN-VNPT
changed: hm-changed@vnnic.net.vn 20090325
source: APNIC
changed: hm-changed@apnic.net 20111114

% Information related to '123.30.192.0/18AS7643'

route: 123.30.192.0/18
descr: VietNam Post and Telecom Corporation (VNPT)
descr: VNPT-AS-AP
country: VN
origin: AS7643
remarks: mailto: noc@vnn.vn
notify: hm-changed@vnnic.net.vn
mnt-by: MAINT-VN-VNPT
changed: hm-changed@vnnic.net.vn 20100121
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 46.105.109.70

Hi,

The IP 46.105.109.70 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 46.105.109.70:

Regards,

Fail2Ban