Banned hacker's IPs

Thursday, 1 May 2014

[Fail2Ban] SSH: banned 61.174.51.219

Hi,

The IP 61.174.51.219 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.174.51.219:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.174.51.192 - 61.174.51.255'

inetnum: 61.174.51.192 - 61.174.51.255
netname: HANGZHOU-SRT-TECHNOLOGY-CO-LTD
country: CN
descr: HANGZHOU SRT TECHNOLOGY CO., LTD
descr:
admin-c: BB324-AP
tech-c: CH119-AP
mnt-irt: IRT-CHINANET-ZJ
status: ASSIGNED NON-PORTABLE
changed: zjnoc_ip_4@163.com 20130508
mnt-by: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Huzhou
address: No.18 Hongqi Road,Huzhou,Zhejiang.313000
country: CN
phone: +86-572-2022163
fax-no: +86-572-2210609
e-mail: anti_spam@mail.huptt.zj.cn
remarks: send spam reports to anti_spam@mail.huptt.zj.cn
remarks: and abuse reports to anti_spam@mail.huptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH50-AP
tech-c: CH50-AP
nic-hdl: CH119-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Bing Bai
nic-hdl: BB324-AP
e-mail: anti_spam@mail.huptt.zj.cn
address: Huzhou,Zhejiang.Postcode:313000
phone: +86-13666633017
country: CN
changed: zjnoc_ip_3@163.com 20131107
mnt-by: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 42.62.17.250

Hi,

The IP 42.62.17.250 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 42.62.17.250:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '42.62.0.0 - 42.62.127.255'

inetnum: 42.62.0.0 - 42.62.127.255
netname: Forest-Eternal
descr: Forest Eternal Communication Tech. co.ltd
descr: Rm.902,North Real Estate Building, Build. No.3,
descr: #81Yuan,Haidian District,Beijing
country: CN
admin-c: HL2233-AP
tech-c: GT483-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: ipas@cnnic.cn 20110629
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Guo Tao
address: Rm.902,North Real Estate Building, Build. No.3,
address: #81Yuan,Haidian District,Beijing
country: CN
phone: +86-010-51659311
e-mail: gt@lenet.com.cn
nic-hdl: GT483-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110628
source: APNIC

person: Hong Lei
address: Rm.902,North Real Estate Building, Build. No.3,
address: #81Yuan,Haidian District,Beijing
country: CN
phone: +86-010-51659311
e-mail: honglei@lenet.com.cn
nic-hdl: HL2233-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110628
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 187.40.40.75

Hi,

The IP 187.40.40.75 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 187.40.40.75:

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at http://registro.br/termo/en.html ,
% being prohibited its distribution, comercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2014-05-01 10:55:44 (BRT -03:00)

inetnum: 187.40/14
aut-num: AS7738
abuse-c: CGR13
owner: Telemar Norte Leste S.A.
ownerid: 033.000.118/0001-79
responsible: Daniel Advogados
country: BR
owner-c: HAOGO
tech-c: CGR13
inetrev: 187.40/16
nserver: ns4.telemar.net.br
nsstat: 20140429 AA
nslastaa: 20140429
nserver: ns2.telemar.net.br
nsstat: 20140429 AA
nslastaa: 20140429
created: 20090115
changed: 20130307

nic-hdl-br: CGR13
person: Centro de Gerencia de Rede TELEMAR
e-mail: abuse@telemar.net.br
created: 20000605
changed: 20091103

nic-hdl-br: HAOGO
person: Halliny Oliveira Gomes
e-mail: thais.souza@oi.net.br
created: 20060628
changed: 20120224

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/, respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.174.50.224

Hi,

The IP 61.174.50.224 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.174.50.224:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.174.48.0 - 61.174.55.255'

inetnum: 61.174.48.0 - 61.174.55.255
netname: CHINANET-ZJ-HU
country: CN
descr: CHINANET-ZJ Huzhou node network
descr: Zhejiang Telecom
admin-c: CZ4-AP
tech-c: CH119-AP
mnt-irt: IRT-CHINANET-ZJ
status: ALLOCATED NON-PORTABLE
changed: 15325819758@189.cn 20111231
mnt-by: MAINT-CHINANET-ZJ
mnt-lower: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Huzhou
address: No.18 Hongqi Road,Huzhou,Zhejiang.313000
country: CN
phone: +86-572-2022163
fax-no: +86-572-2210609
e-mail: anti_spam@mail.huptt.zj.cn
remarks: send spam reports to anti_spam@mail.huptt.zj.cn
remarks: and abuse reports to anti_spam@mail.huptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH50-AP
tech-c: CH50-AP
nic-hdl: CH119-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

role: CHINANET ZHEJIANG
address: No. 257 Qingjiang Road, Hangzhou, Zhejiang.310066
country: CN
phone: +86-571-86821752
fax-no: +86-571-86988329
e-mail: antispam@dcb.hz.zj.cn
remarks: send spam reports to antispam@dcb.hz.zj.cn
remarks: and abuse reports to antispam@dcb.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CZ61-AP
tech-c: CZ61-AP
nic-hdl: CZ4-AP
mnt-by: MAINT-CHINANET-ZJ
changed: hjh@dcb.hz.zj.cn 20050914
source: APNIC
changed: hm-changed@apnic.net 20111114

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 156.54.62.187

Hi,

The IP 156.54.62.187 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 156.54.62.187:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '156.54.0.0 - 156.54.255.255'

% Abuse contact for '156.54.0.0 - 156.54.255.255' is 'abuse-ripe@telecomitalia.it'

inetnum: 156.54.0.0 - 156.54.255.255
netname: NETSIEL
descr: Telecom Italia S.p.A.
country: IT
org: ORG-TIS3-RIPE
admin-c: CM2687-RIPE
tech-c: CM2687-RIPE
mnt-by: FULCOM-MNT-RIPE
status: EARLY-REGISTRATION
source: RIPE # Filtered

organisation: ORG-TIS3-RIPE
org-name: Telecom Italia S.p.A.
org-type: LIR
address: Telecom Italia S.p.A.
address: Pasquale Mercadante
address: via Oriolo Romano, 257
address: 00189 Roma
address: ITALY
phone: +390636878029
phone: +393351440240
fax-no: +390641862917
descr: abuse-ripe@telecomitalia.it
mnt-ref: FULCOM-MNT-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
admin-c: LM10202-RIPE
admin-c: ITR2-RIPE
admin-c: AP496-RIPE
abuse-c: AT10542-RIPE
source: RIPE # Filtered

person: Cono Miragliotta
address: Via Saverio Dioguardi, 1
address: I-70124 Bari
address: Italy
phone: +39 80 5092610
fax-no: +39 80 5762250
nic-hdl: CM2687-RIPE
source: RIPE # Filtered

% Information related to '156.54.0.0/16AS3269'

route: 156.54.0.0/16
descr: Netsiel S.p.a. network
descr: InterBusiness
origin: AS3269
mnt-by: INTERB-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.174.51.213

Hi,

The IP 61.174.51.213 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.174.51.213:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.174.51.192 - 61.174.51.255'

inetnum: 61.174.51.192 - 61.174.51.255
netname: HANGZHOU-SRT-TECHNOLOGY-CO-LTD
country: CN
descr: HANGZHOU SRT TECHNOLOGY CO., LTD
descr:
admin-c: BB324-AP
tech-c: CH119-AP
mnt-irt: IRT-CHINANET-ZJ
status: ASSIGNED NON-PORTABLE
changed: zjnoc_ip_4@163.com 20130508
mnt-by: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Huzhou
address: No.18 Hongqi Road,Huzhou,Zhejiang.313000
country: CN
phone: +86-572-2022163
fax-no: +86-572-2210609
e-mail: anti_spam@mail.huptt.zj.cn
remarks: send spam reports to anti_spam@mail.huptt.zj.cn
remarks: and abuse reports to anti_spam@mail.huptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH50-AP
tech-c: CH50-AP
nic-hdl: CH119-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Bing Bai
nic-hdl: BB324-AP
e-mail: anti_spam@mail.huptt.zj.cn
address: Huzhou,Zhejiang.Postcode:313000
phone: +86-13666633017
country: CN
changed: zjnoc_ip_3@163.com 20131107
mnt-by: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 116.10.191.185

Hi,

The IP 116.10.191.185 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 116.10.191.185:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '116.8.0.0 - 116.11.255.255'

inetnum: 116.8.0.0 - 116.11.255.255
netname: CHINANET-GX
descr: CHINANET Guangxi province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CR76-AP
tech-c: BD37-AP
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-GX
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20070322
source: APNIC

person: Bin Deng
nic-hdl: BD37-AP
e-mail: 18977164171@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2835112
fax-no: +86-771-2839278
country: CN
changed: rebecca@public.nn.gx.cn 20021023
changed: zhengzm@gsta.com 20140326
mnt-by: MAINT-CHINANET-GX
source: APNIC

person: Cailing Ruan
nic-hdl: CR76-AP
e-mail: 18977164171@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2815987
fax-no: +86-771-2839278
country: CN
changed: rebecca@public.nn.gx.cn 20021023
changed: zhengzm@gsta.com 20140326
mnt-by: MAINT-CHINANET-GX
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

Wednesday, 30 April 2014

[Fail2Ban] SSH: banned 67.205.67.69

Hi,

The IP 67.205.67.69 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 67.205.67.69:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 67.205.67.69"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=67.205.67.69?showDetails=true&showARIN=false&ext=netref2
#

iWeb Dedicated CL IWEB-CL-T128-02SH (NET-67-205-67-64-1) 67.205.67.64 - 67.205.67.95
iWeb Technologies Inc. IWEB-BLK-04 (NET-67-205-64-0-1) 67.205.64.0 - 67.205.127.255

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 123.22.101.60

Hi,

The IP 123.22.101.60 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 123.22.101.60:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '123.22.0.0 - 123.22.255.255'

inetnum: 123.22.0.0 - 123.22.255.255
netname: VNPTinfrastructure-NET
country: vn
descr: Vietnam Posts and Telecommunications(VNPT)
admin-c: NXC1-AP
tech-c: KNH1-AP
status: ASSIGNED NON-PORTABLE
changed: hm-changed@vnnic.net.vn20081016 20081016
mnt-by: MAINT-VN-VNPT
source: APNIC

person: Khanh Nguyen Hien
nic-hdl: KNH1-AP
e-mail: hathm@vdc.com.vn
address: Vietnam Datacommunications Company (VDC)
address: Lo IIA Lang Quoc te Thang Long, Cau Giay, Ha Noi
phone: +84-4-3793 0563
fax-no: +84-4-32811506
country: VN
changed: hm-changed@vnnic.net.vn 20090227
mnt-by: VNPT
source: APNIC

person: Nguyen Xuan Cuong
nic-hdl: NXC1-AP
e-mail: cuongnx@vnpt.com.vn
address: Vietnam Posts and Telecommunications (VNPT)
address: 57 Huynh Thuc Khang
address: Hanoi, Vietnam
phone: +84-4-37741236
fax-no: +84-4-37741205
country: VN
changed: hm-changed@vnnic.net.vn 20090922
mnt-by: MAINT-VN-VNPT
source: APNIC

% Information related to '123.22.96.0/19AS45899'

route: 123.22.96.0/19
descr: VietNam Post and Telecom Corporation (VNPT)
descr: VNPT-AS-AP
country: VN
origin: AS45899
remarks: mailto: noc@vnn.vn
notify: hm-changed@vnnic.net.vn
mnt-by: MAINT-VN-VNPT
changed: hm-changed@vnnic.net.vn 20100810
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.174.51.219

[Fail2Ban] SSH: banned 116.10.191.177

Hi,

The IP 116.10.191.177 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 116.10.191.177:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '116.8.0.0 - 116.11.255.255'

inetnum: 116.8.0.0 - 116.11.255.255
netname: CHINANET-GX
descr: CHINANET Guangxi province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CR76-AP
tech-c: BD37-AP
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-GX
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20070322
source: APNIC

person: Bin Deng
nic-hdl: BD37-AP
e-mail: 18977164171@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2835112
fax-no: +86-771-2839278
country: CN
changed: rebecca@public.nn.gx.cn 20021023
changed: zhengzm@gsta.com 20140326
mnt-by: MAINT-CHINANET-GX
source: APNIC

person: Cailing Ruan
nic-hdl: CR76-AP
e-mail: 18977164171@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2815987
fax-no: +86-771-2839278
country: CN
changed: rebecca@public.nn.gx.cn 20021023
changed: zhengzm@gsta.com 20140326
mnt-by: MAINT-CHINANET-GX
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 41.32.130.214

Hi,

The IP 41.32.130.214 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 41.32.130.214:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.32.0.0 - 41.32.255.255'

inetnum: 41.32.0.0 - 41.32.255.255
netname: All-00
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : admins@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 41.32.0.0 - 41.47.255.255

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 116.10.191.219

Hi,

The IP 116.10.191.219 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 116.10.191.219:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '116.8.0.0 - 116.11.255.255'

inetnum: 116.8.0.0 - 116.11.255.255
netname: CHINANET-GX
descr: CHINANET Guangxi province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CR76-AP
tech-c: BD37-AP
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-GX
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20070322
source: APNIC

person: Bin Deng
nic-hdl: BD37-AP
e-mail: 18977164171@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2835112
fax-no: +86-771-2839278
country: CN
changed: rebecca@public.nn.gx.cn 20021023
changed: zhengzm@gsta.com 20140326
mnt-by: MAINT-CHINANET-GX
source: APNIC

person: Cailing Ruan
nic-hdl: CR76-AP
e-mail: 18977164171@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2815987
fax-no: +86-771-2839278
country: CN
changed: rebecca@public.nn.gx.cn 20021023
changed: zhengzm@gsta.com 20140326
mnt-by: MAINT-CHINANET-GX
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 116.10.191.224

Hi,

The IP 116.10.191.224 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 116.10.191.224:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '116.8.0.0 - 116.11.255.255'

inetnum: 116.8.0.0 - 116.11.255.255
netname: CHINANET-GX
descr: CHINANET Guangxi province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CR76-AP
tech-c: BD37-AP
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-GX
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20070322
source: APNIC

person: Bin Deng
nic-hdl: BD37-AP
e-mail: 18977164171@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2835112
fax-no: +86-771-2839278
country: CN
changed: rebecca@public.nn.gx.cn 20021023
changed: zhengzm@gsta.com 20140326
mnt-by: MAINT-CHINANET-GX
source: APNIC

person: Cailing Ruan
nic-hdl: CR76-AP
e-mail: 18977164171@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2815987
fax-no: +86-771-2839278
country: CN
changed: rebecca@public.nn.gx.cn 20021023
changed: zhengzm@gsta.com 20140326
mnt-by: MAINT-CHINANET-GX
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 137.116.169.112

Hi,

The IP 137.116.169.112 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 137.116.169.112:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 137.116.169.112"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=137.116.169.112?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 137.116.0.0 - 137.116.255.255
CIDR: 137.116.0.0/16
OriginAS:
NetName: MICROSOFT
NetHandle: NET-137-116-0-0-1
Parent: NET-137-0-0-0-0
NetType: Direct Assignment
RegDate: 2011-08-02
Updated: 2013-08-20
Ref: http://whois.arin.net/rest/net/NET-137-116-0-0-1

OrgName: Microsoft Corp
OrgId: MSFT-Z
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 2011-06-22
Updated: 2013-10-03
Comment: To report suspected security issues specific to
Comment: traffic emanating from Microsoft online services,
Comment: including the distribution of malicious content
Comment: or other illicit or illegal material through a
Comment: Microsoft online service, please submit reports
Comment: to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft
Comment: Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft
Comment: products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests,
Comment: please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: http://whois.arin.net/rest/org/MSFT-Z

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: http://whois.arin.net/rest/poc/MAC74-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: http://whois.arin.net/rest/poc/MRPD-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 81.10.32.206

Hi,

The IP 81.10.32.206 has just been banned by Fail2Ban after
6 attempts against SSH.

Here are more information about 81.10.32.206:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '81.10.0.0 - 81.10.127.255'

% No abuse contact registered for 81.10.0.0 - 81.10.127.255

inetnum: 81.10.0.0 - 81.10.127.255
org: ORG-AFNC1-RIPE
netname: AFRINIC-NET-TRANSFERRED-20050223
descr: This network has been transferred to AFRINIC
remarks: These IP addresses are assigned in the AFRINIC region.
remarks: Authoritative registration information for this network
remarks: is available for query and modification in
remarks: the AFRINIC whois database: whois.afrinic.net or
remarks: web site: http://www.afrinic.net
remarks: The routing registry information (route(6) objects)
remarks: may be published in any Routing Registry, including
remarks: RIPE Whois Database
country: EU # country is really somewhere in African Region
admin-c: AFRI-RIPE
tech-c: AFRI-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-routes: RIPE-NCC-RPSL-MNT
source: RIPE # Filtered

organisation: ORG-AFNC1-RIPE
org-name: African Internet Numbers Registry
org-type: RIR
address: see http://www.afrinic.net
admin-c: AFRI-RIPE
tech-c: AFRI-RIPE
remarks: For more information on AFRINIC assigned blocks, use
remarks: AFRINIC's whois database, whois.afrinic.net.
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

role: The African Internet Numbers Registry
org: ORG-AFNC1-RIPE
address: AFRINIC, see http://www.afrinic.net
admin-c: AFRI-RIPE
tech-c: AFRI-RIPE
nic-hdl: AFRI-RIPE
remarks: For more information on AFRINIC assigned blocks, connect
remarks: to AFRINIC's whois database, whois.afrinic.net.
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

% Information related to '81.10.32.0/24AS8452'

route: 81.10.32.0/24
descr: Telecom-Egypt Data
origin: AS8452
mnt-by: TE-Data-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 41.41.227.34

Hi,

The IP 41.41.227.34 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 41.41.227.34:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.40.0.0 - 41.43.255.255'

inetnum: 41.40.0.0 - 41.43.255.255
netname: All-04
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : admins@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 41.32.0.0 - 41.47.255.255

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 196.218.123.34

Hi,

The IP 196.218.123.34 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 196.218.123.34:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '196.218.64.0 - 196.218.127.255'

inetnum: 196.218.64.0 - 196.218.127.255
netname: All-13
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
org: ORG-TD2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : abuse@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 196.218.0.0 - 196.219.255.255

organisation: ORG-TD2-AFRINIC
org-name: TE Data
org-type: LIR
country: EG
address: TE Data,
address: Smart Village, Building A11-B90, Alex Desert Road,
address: 28 Km
address: 6th October 12577
phone: +20233320700
fax-no: +20233320800
admin-c: MH7-AFRINIC
admin-c: IS4100-AFRINIC
tech-c: MH7-AFRINIC
tech-c: IS4100-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: GEGA-MNT
mnt-by: AFRINIC-HM-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 41.32.179.222

Hi,

The IP 41.32.179.222 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 41.32.179.222:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.32.0.0 - 41.32.255.255'

inetnum: 41.32.0.0 - 41.32.255.255
netname: All-00
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : admins@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 41.32.0.0 - 41.47.255.255

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 196.218.246.198

Hi,

The IP 196.218.246.198 has just been banned by Fail2Ban after
6 attempts against SSH.

Here are more information about 196.218.246.198:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '196.218.192.0 - 196.218.255.255'

inetnum: 196.218.192.0 - 196.218.255.255
netname: All-13
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
org: ORG-TD2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : abuse@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 196.218.0.0 - 196.219.255.255

organisation: ORG-TD2-AFRINIC
org-name: TE Data
org-type: LIR
country: EG
address: TE Data,
address: Smart Village, Building A11-B90, Alex Desert Road,
address: 28 Km
address: 6th October 12577
phone: +20233320700
fax-no: +20233320800
admin-c: MH7-AFRINIC
admin-c: IS4100-AFRINIC
tech-c: MH7-AFRINIC
tech-c: IS4100-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: GEGA-MNT
mnt-by: AFRINIC-HM-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 196.202.79.106

Hi,

The IP 196.202.79.106 has just been banned by Fail2Ban after
7 attempts against SSH.

Here are more information about 196.202.79.106:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '196.202.70.0 - 196.202.95.255'

inetnum: 196.202.70.0 - 196.202.95.255
netname: All-15
descr: TE Data
country: EG
admin-c: TDCR2-AFRINIC
tech-c: TDCR1-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : abuse@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 196.202.0.0 - 196.202.127.255

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 200.98.68.101

Hi,

The IP 200.98.68.101 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 200.98.68.101:

[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at http://registro.br/termo/en.html ,
% being prohibited its distribution, comercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2014-04-30 04:07:10 (BRT -03:00)

inetnum: 200.98/16
aut-num: AS15201
abuse-c: SEO50
owner: Universo Online S.A.
ownerid: 001.109.184/0001-95
responsible: Contato da Entidade UOL
country: BR
owner-c: CAU12
tech-c: CAU12
inetrev: 200.98.0/17
nserver: eliot.uol.com.br
nsstat: 20140427 AA
nslastaa: 20140427
nserver: borges.uol.com.br
nsstat: 20140427 AA
nslastaa: 20140427
created: 20030318
changed: 20040323

nic-hdl-br: CAU12
person: Contato Administrativo - UOL
e-mail: l-registrobr-uol@corp.uol.com.br
created: 20031202
changed: 20100106

nic-hdl-br: SEO50
person: Security Office
e-mail: security@uol.com.br
created: 20021114
changed: 20110830

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/, respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 196.218.139.98

Hi,

The IP 196.218.139.98 has just been banned by Fail2Ban after
6 attempts against SSH.

Here are more information about 196.218.139.98:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '196.218.128.0 - 196.218.191.255'

inetnum: 196.218.128.0 - 196.218.191.255
netname: All-13
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
org: ORG-TD2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : abuse@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 196.218.0.0 - 196.219.255.255

organisation: ORG-TD2-AFRINIC
org-name: TE Data
org-type: LIR
country: EG
address: TE Data,
address: Smart Village, Building A11-B90, Alex Desert Road,
address: 28 Km
address: 6th October 12577
phone: +20233320700
fax-no: +20233320800
admin-c: MH7-AFRINIC
admin-c: IS4100-AFRINIC
tech-c: MH7-AFRINIC
tech-c: IS4100-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: GEGA-MNT
mnt-by: AFRINIC-HM-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 41.32.130.214

[Fail2Ban] SSH: banned 193.107.16.206

Hi,

The IP 193.107.16.206 has just been banned by Fail2Ban after
8 attempts against SSH.

Here are more information about 193.107.16.206:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '193.107.16.0 - 193.107.19.255'

% Abuse contact for '193.107.16.0 - 193.107.19.255' is 'ideal.solutions.org@gmail.com'

inetnum: 193.107.16.0 - 193.107.19.255
netname: IDEALSOLUTION
descr: Ideal Solution Ltd
country: SC
org: ORG-IS106-RIPE
admin-c: IS300-RIPE
tech-c: IS300-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: IDEAL-MNT
mnt-routes: IDEAL-MNT
mnt-domains: IDEAL-MNT
mnt-routes: RU-WEBALTA-MNT
mnt-routes: OCOM-MNT
source: RIPE # Filtered

organisation: ORG-IS106-RIPE
org-name: Ideal Solution Ltd
org-type: OTHER
address: Sound & Vision House, Francis Rachel Str.
address: Victoria, Mahe, Seychelles
address: PO box 355
address: IP networks can be routed to different countries
remarks: emergency or sales contact in different language available
remarks:
remarks: Egypt contact (tel): (010) 428-71-91
remarks: Russia contact (tel/fax): (495) 540-43-24
remarks:
abuse-mailbox: ideal.solutions.org@gmail.com
abuse-c: IS300-RIPE
phone: +248 225521
mnt-ref: IDEAL-MNT
mnt-by: IDEAL-MNT
source: RIPE # Filtered

role: Ideal Solution NOC
address: Sound & Vision House, Francis Rachel Str.
address: Victoria, Mahe, Seychelles
remarks: ***************************************
remarks: This is Ideal-Solution.org and 2x4.RU Hosting IP network
remarks: - Shared and virtual hosting services
remarks: - Virtual and Dedicated Servers
remarks: - Adminstraion and programming
remarks: - Telecomunications
remarks: ***************************************
remarks: other information:
remarks: - nothing
remarks: ***************************************
remarks: in case of ABUSE or active issues please contact us
remarks: abuse/administrative email: ideal.solutions.org@gmail.com
remarks: ***************************************
phone: +248 225521
abuse-mailbox: ideal.solutions.org@gmail.com
admin-c: UDF669-RIPE
tech-c: UDF669-RIPE
mnt-by: IDEAL-MNT
nic-hdl: IS300-RIPE
source: RIPE # Filtered

% Information related to '193.107.16.0/24AS58001'

route: 193.107.16.0/24
descr: Ideal Solution
origin: AS58001
mnt-by: IDEAL-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 182.140.140.21

Hi,

The IP 182.140.140.21 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 182.140.140.21:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '182.128.0.0 - 182.143.255.255'

inetnum: 182.128.0.0 - 182.143.255.255
netname: CHINANET-SC
descr: CHINANET Sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: XS16-AP
tech-c: XS16-AP
status: ALLOCATED PORTABLE
notify: zhangys@sctel.com.cn
remarks: service provider
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20100302
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-SC
mnt-routes: MAINT-CHINANET-SC
source: APNIC

person: Xiaodong Shi
nic-hdl: XS16-AP
e-mail: scipadmin2013@189.cn
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
changed: zhengzm@gsta.com 20131230
mnt-by: MAINT-CHINANET-SC
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 196.218.175.82

Hi,

The IP 196.218.175.82 has just been banned by Fail2Ban after
6 attempts against SSH.

Here are more information about 196.218.175.82:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '196.218.128.0 - 196.218.191.255'

inetnum: 196.218.128.0 - 196.218.191.255
netname: All-13
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
org: ORG-TD2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : abuse@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 196.218.0.0 - 196.219.255.255

organisation: ORG-TD2-AFRINIC
org-name: TE Data
org-type: LIR
country: EG
address: TE Data,
address: Smart Village, Building A11-B90, Alex Desert Road,
address: 28 Km
address: 6th October 12577
phone: +20233320700
fax-no: +20233320800
admin-c: MH7-AFRINIC
admin-c: IS4100-AFRINIC
tech-c: MH7-AFRINIC
tech-c: IS4100-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: GEGA-MNT
mnt-by: AFRINIC-HM-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 41.41.233.190

Hi,

The IP 41.41.233.190 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 41.41.233.190:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.40.0.0 - 41.43.255.255'

inetnum: 41.40.0.0 - 41.43.255.255
netname: All-04
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : admins@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 41.32.0.0 - 41.47.255.255

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 196.218.175.178

Hi,

The IP 196.218.175.178 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 196.218.175.178:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '196.218.128.0 - 196.218.191.255'

inetnum: 196.218.128.0 - 196.218.191.255
netname: All-13
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
org: ORG-TD2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : abuse@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 196.218.0.0 - 196.219.255.255

organisation: ORG-TD2-AFRINIC
org-name: TE Data
org-type: LIR
country: EG
address: TE Data,
address: Smart Village, Building A11-B90, Alex Desert Road,
address: 28 Km
address: 6th October 12577
phone: +20233320700
fax-no: +20233320800
admin-c: MH7-AFRINIC
admin-c: IS4100-AFRINIC
tech-c: MH7-AFRINIC
tech-c: IS4100-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: GEGA-MNT
mnt-by: AFRINIC-HM-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 41.41.113.226

Hi,

The IP 41.41.113.226 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 41.41.113.226:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.40.0.0 - 41.43.255.255'

inetnum: 41.40.0.0 - 41.43.255.255
netname: All-04
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : admins@tedata.net
remarks: ====================================================
source: AFRINIC # Filtered
parent: 41.32.0.0 - 41.47.255.255

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban