Banned hacker's IPs

Tuesday, 30 December 2014

[Fail2Ban] SSH: banned 69.32.224.129

Hi,

The IP 69.32.224.129 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 69.32.224.129:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 69.32.224.129"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=69.32.224.129?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 69.32.0.0 - 69.32.255.255
CIDR: 69.32.0.0/16
NetName: CENGAGENET
NetHandle: NET-69-32-0-0-1
Parent: NET69 (NET-69-0-0-0-0)
NetType: Direct Assignment
OriginAS: AS27365
Organization: Cengage Learning Inc (CENGA-5)
RegDate: 2003-03-20
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-69-32-0-0-1

OrgName: Cengage Learning Inc
OrgId: CENGA-5
Address: 5191 Natorp Blvd
Address: Attn Communications in CSO
City: Mason
StateProv: OH
PostalCode: 45040
Country: US
RegDate: 2009-04-17
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/CENGA-5

OrgTechHandle: NETAD1-ARIN
OrgTechName: Network Administration
OrgTechPhone: +1-800-443-3941
OrgTechEmail: netadmin@cengage.com
OrgTechRef: http://whois.arin.net/rest/poc/NETAD1-ARIN

OrgAbuseHandle: NETAD1-ARIN
OrgAbuseName: Network Administration
OrgAbusePhone: +1-800-443-3941
OrgAbuseEmail: netadmin@cengage.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NETAD1-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 221.208.245.210

Hi,

The IP 221.208.245.210 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 221.208.245.210:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '221.208.0.0 - 221.212.255.255'

inetnum: 221.208.0.0 - 221.212.255.255
netname: UNICOM-HL
descr: China Unicom Heilongjiang Province Network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: BG63-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HL
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
mnt-irt: IRT-CU-CN
changed: hm-changed@apnic.net 20031110
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090508
source: APNIC

irt: IRT-CU-CN
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
e-mail: zhouxm@chinaunicom.cn
abuse-mailbox: zhouxm@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
changed: zhouxm@chinaunicom.cn 20101110
changed: hm-changed@apnic.net 20101116
source: APNIC

person: Binghui Gao
nic-hdl: BG63-AP
e-mail: luanfuyu@vip.hl.cn
address: Shuniu Building,No.155 Zhongshan road,Harbin,Heilongjiang
phone: +86-451-82651467
fax-no: +86-451-82651464
country: CN
changed: luanfuyu@vip.hl.cn 20100310
mnt-by: MAINT-CNCGROUP-HL
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@cnc-noc.net
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: abuse@cnc-noc.net 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

% Information related to '221.208.0.0/14AS4837'

route: 221.208.0.0/14
descr: CNC Group CHINA169 Heilongjiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 82.80.232.34

Hi,

The IP 82.80.232.34 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 82.80.232.34:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '82.80.204.0 - 82.80.239.255'

% Abuse contact for '82.80.204.0 - 82.80.239.255' is 'abuse@bezeqint.net'

inetnum: 82.80.204.0 - 82.80.239.255
netname: BEZEQINT-HOSTING
descr: BEZEQINT-HOSTING
country: IL
admin-c: BHT2-RIPE
tech-c: BHT2-RIPE
status: ASSIGNED PA
remarks: please send ABUSE complains to abuse@bezeqint.net
remarks: INFRA-AW
mnt-by: AS8551-MNT
mnt-lower: AS8551-MNT
source: RIPE # Filtered

role: BEZEQINT HOSTMASTERS TEAM
address: Bezeq International
address: 40 hashacham st.
address: Petach Tikva 49170 Israel
phone: +972 1 800014014
fax-no: +972 3 9257674
admin-c: MR916-RIPE
tech-c: LBHM-RIPE
tech-c: HMSB-RIPE
nic-hdl: BHT2-RIPE
remarks: Please Send Spam and Abuse ONLY to abuse@bezeqint.net
mnt-by: AS8551-MNT
source: RIPE # Filtered

% Information related to '82.80.224.0/20AS8551'

route: 82.80.224.0/20
descr: BEZEQINT
origin: AS8551
mnt-by: AS8551-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.249.91.8

Hi,

The IP 218.249.91.8 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 218.249.91.8:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.249.0.0 - 218.249.255.255'

inetnum: 218.249.0.0 - 218.249.255.255
netname: SANXIN
descr: Beijing Sanxin Shidai Co. Ltd
descr: 1513 Xinjishu building Beijing link west road,
descr: Haidian District, Beijing, PRC
admin-c: ML1879-AP
tech-c: ML1879-AP
country: CN
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: ipas@cnnic.net.cn 20090708
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Fred Xu
address: No.11 Hepingli east Dongcheng District, Beijing,China
country: CN
phone: +86-010-52206257
e-mail: tomsxu7926@sina.com
nic-hdl: ML1879-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20130418
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 80.154.92.69

Hi,

The IP 80.154.92.69 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 80.154.92.69:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '80.154.92.64 - 80.154.92.79'

% Abuse contact for '80.154.92.64 - 80.154.92.79' is 'auftrag@nic.telekom.de'

inetnum: 80.154.92.64 - 80.154.92.79
netname: BJOERNSEN-BERATENDE-INGENIEURE-KOBLENZ-NET
descr: Bjoernsen Beratende IngenieureGmbH
country: DE
admin-c: KS4210-RIPE
tech-c: KS4210-RIPE
status: ASSIGNED PA
mnt-by: DTAG-NIC
source: RIPE # Filtered

person: Karsten Schueler
address: Bjoernsen Beratende IngenieureGmbH
address: Maria Trost 3
address: 56070 Koblenz
address: DE
phone: +492618851263
nic-hdl: KS4210-RIPE
mnt-by: DTAG-NIC
source: RIPE # Filtered

% Information related to '80.152.0.0/14AS3320'

route: 80.152.0.0/14
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.234.146.22

Hi,

The IP 61.234.146.22 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.234.146.22:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.234.146.0 - 61.234.146.255'

inetnum: 61.234.146.0 - 61.234.146.255
netname: CRHbWhS
country: CN
descr: China Railcom Hubei Wuhan Subbranch
descr: Telecommunication Company
descr: Wuhan City,Hubei Province
admin-c: LQ112-AP
tech-c: LM273-AP
status: ASSIGNED NON-PORTABLE
changed: wangpei@crc.net.cn 20030801
mnt-by: MAINT-CN-CRTC
source: APNIC

person: liu min
nic-hdl: LM273-AP
e-mail: crnet_mgr@chinatietong.com
address: 22F Yuetan Mansion, Xicheng District, Beijing, P.R.China
phone: +86-10-51848796
fax-no: +86-10-51842426
country: CN
changed: ipas@cnnic.net.cn 20120320
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: LV QIANG
nic-hdl: LQ112-AP
e-mail: crnet_mgr@chinatietong.com
address: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
phone: +86-10-51892111
fax-no: +86-10-51847845
country: CN
changed: ipas@cnnic.net.cn 20060911
mnt-by: MAINT-CNNIC-AP
source: APNIC

% Information related to '61.232.0.0/14AS9394'

route: 61.232.0.0/14
descr: CHINA RAILWAY TELECOMMUNICATIONS
country: CN
origin: AS9394
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20100528
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 211.16.227.43

Hi,

The IP 211.16.227.43 has just been banned by Fail2Ban after
8 attempts against SSH.

Here are more information about 211.16.227.43:

[Querying whois.nic.ad.jp]
[whois.nic.ad.jp]
[ JPNIC database provides information regarding IP address and ASN. Its use ]
[ is restricted to network administration purposes. For further information, ]
[ use 'whois -h whois.nic.ad.jp help'. To only display English output, ]
[ add '/e' at the end of command, e.g. 'whois -h whois.nic.ad.jp xxx/e'. ]

Network Information:
a. [Network Number] 211.16.227.0-211.16.231.255
b. [Network Name] GMOHS-DS
g. [Organization] GMO CLOUD K.K.
m. [Administrative Contact] JP00040632
n. [Technical Contact] JP00040632
p. [Nameserver] ns.namedserver.net/211.16.227.0/24
p. [Nameserver] ns2.namedserver.net/211.16.227.0/24
p. [Nameserver] ns.namedserver.net/211.16.228.0/24
p. [Nameserver] ns2.namedserver.net/211.16.228.0/24
p. [Nameserver] ns.namedserver.net/211.16.229.0/24
p. [Nameserver] ns2.namedserver.net/211.16.229.0/24
p. [Nameserver] dns1.ymc.ne.jp/211.16.230.0/24
p. [Nameserver] dns2.ymc.ne.jp/211.16.230.0/24
p. [Nameserver] ns.namedserver.net/211.16.231.0/24
p. [Nameserver] ns2.namedserver.net/211.16.231.0/24
[Assigned Date] 2012/10/04
[Return Date]
[Last Update] 2012/10/04 13:08:05(JST)

Less Specific Info.
----------
NTT COMMUNICATIONS CORPORATION
[Allocation] 211.16.0.0/16

More Specific Info.
----------
No match!!

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 82.190.174.8

Hi,

The IP 82.190.174.8 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 82.190.174.8:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '82.190.174.0 - 82.190.174.15'

% Abuse contact for '82.190.174.0 - 82.190.174.15' is 'abuse@business.telecomitalia.it'

inetnum: 82.190.174.0 - 82.190.174.15
netname: TECNOELASTOMERISRL
descr: TECNOELASTOMERISRL
country: IT
admin-c: BB4608-RIPE
tech-c: BB4608-RIPE
status: ASSIGNED PA
mnt-by: INTERB-MNT
source: RIPE # Filtered

person: BICE BONANTINI
address: TECNOELASTOMERI SRL
address: VIA MAGELLANO 7
address: 41013 CASTELFRANCO EMILIA
address: Italy
phone: +3959920707
fax-no: +3959920707
nic-hdl: BB4608-RIPE
source: RIPE # Filtered

% Information related to '82.190.128.0/17AS3269'

route: 82.190.128.0/17
descr: INTERBUSINESS
origin: AS3269
remarks: Send report of network abuse/spam
remarks: only to: abuse@interbusiness.it .
remarks: If you report abuse to any other address
remarks: you will get no response.
mnt-by: INTERB-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 60.173.14.14

Hi,

The IP 60.173.14.14 has just been banned by Fail2Ban after
6 attempts against SSH.

Here are more information about 60.173.14.14:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '60.166.0.0 - 60.175.255.255'

inetnum: 60.166.0.0 - 60.175.255.255
netname: CHINANET-AH
descr: CHINANET anhui province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: JW89-AP
mnt-by: APNIC-HM
mnt-routes: MAINT-CHINANET-AH
mnt-lower: MAINT-CHINANET-AH
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20040721
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

person: Jinneng Wang
address: 17/F, Postal Building No.120 Changjiang
address: Middle Road, Hefei, Anhui, China
country: CN
phone: +86-551-2659073
fax-no: +86-551-2659287
e-mail: ahdata@189.cn
nic-hdl: JW89-AP
mnt-by: MAINT-CHINANET-AH
changed: wang@mail.hf.ah.cninfo.net 19990818
changed: hm-changed@apnic.net 20140221
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 95.173.168.137

Hi,

The IP 95.173.168.137 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 95.173.168.137:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '95.173.168.0 - 95.173.168.255'

% Abuse contact for '95.173.168.0 - 95.173.168.255' is 'abuse@ni.net.tr'

inetnum: 95.173.168.0 - 95.173.168.255
netname: WEBKUR
remarks: INFRA-AW
descr: Melisa Bilisim Teknolojileri
remarks: Address: Inonu Cad. No:173 D:4 Bahcelievler Hatay/?zmir
country: TR
remarks: *********************************************
remarks: *** Abuse Reports to: abuse@webkur.com.tr ***
remarks: *** This IP block is used for web hosting,***
remarks: *** dedicated and co-located servers. In ***
remarks: *** case of spam, please only deal with ***
remarks: *** originator IP only. ***
remarks: *** DO NOT DEAL WITH THE WHOLE IP BLOCK ***
remarks: *********************************************
admin-c: NLA5-RIPE
tech-c: NLA5-RIPE
status: ASSIGNED PA
mnt-by: MNT-NETINTERNET
source: RIPE # Filtered

role: Netinternet LIR Admin
address: Netinternet Bilgisayar Telekomunikasyon San. ve Tic. Ltd. Sti.
address: Pamukkale University
address: Technology Development Zone D Block
address: 20070 DENIZLI TURKEY
admin-c: VO160-RIPE
admin-c: OM575-RIPE
tech-c: VO160-RIPE
nic-hdl: NLA5-RIPE
abuse-mailbox: abuse@ni.net.tr
mnt-by: MNT-NETINTERNET
source: RIPE # Filtered

% Information related to '95.173.160.0/19AS51559'

route: 95.173.160.0/19
descr: Netinternet Datacenter
origin: AS51559
mnt-by: MNT-NETINTERNET
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 85.45.32.251

Hi,

The IP 85.45.32.251 has just been banned by Fail2Ban after
6 attempts against SSH.

Here are more information about 85.45.32.251:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '85.45.32.224 - 85.45.32.255'

% Abuse contact for '85.45.32.224 - 85.45.32.255' is 'abuse@business.telecomitalia.it'

inetnum: 85.45.32.224 - 85.45.32.255
netname: HARPAITALIASRL
descr: HARPA ITALIA SRL
country: IT
admin-c: FF2111-RIPE
tech-c: FF2112-RIPE
status: ASSIGNED PA
mnt-by: INTERB-MNT
source: RIPE # Filtered

person: FABRIZIO FACELLO
address: HARPA ITALIA SRL
address: VIA FILIPPO CORRIDONI SNC
address: 00100 ROMA
address: Italy
phone: +39637516183
fax-no: +39637516183
nic-hdl: FF2111-RIPE
source: RIPE # Filtered

person: FABRIZIO FACELLO
address: HARPA ITALIA SRL
address: VIA FILIPPO CORRIDONI SNC
address: 00100 ROMA
address: Italy
phone: +39637516183
fax-no: +39637516183
nic-hdl: FF2112-RIPE
source: RIPE # Filtered

% Information related to '85.45.0.0/16AS3269'

route: 85.45.0.0/16
descr: INTERBUSINESS
origin: AS3269
remarks: ************************************************
remarks: * Pay attention *
remarks: * Any communication sent to email different *
remarks: * from the following will be ignored! *
remarks: * Any abuse reports, please send them to *
remarks: * abuse@business.telecomitalia.it *
remarks: ************************************************
mnt-by: INTERB-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 59.79.168.65

Hi,

The IP 59.79.168.65 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 59.79.168.65:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '59.79.168.0 - 59.79.175.255'

inetnum: 59.79.168.0 - 59.79.175.255
netname: WZMC-CN
descr: ~{NBV]R=Q'T:~}
descr: Wenzhou Medical College
descr: Wenzhou, Zhejiang 325035, China
country: CN
remarks: conn-id SH001353
admin-c: XW688-AP
tech-c: XW688-AP
tech-c: CER-AP
remarks: origin AS4538
changed: hostmaster@net.edu.cn 20060613
mnt-by: MAINT-CERNET-AP
status: ASSIGNED NON-PORTABLE
source: APNIC

role: CERNET Helpdesk
address: Room 224, Main Building
address: Tsinghua University
address: Beijing 100084, China
country: CN
phone: +86-10-6278-4049
fax-no: +86-10-6278-5933
e-mail: cernet-helpdesk-ip@net.edu.cn
remarks: abuse@net.edu.cn
admin-c: XL1-CN
tech-c: SZ2-AP
nic-hdl: CER-AP
remarks: Point of Contact for admin-c
mnt-by: MAINT-CERNET-AP
changed: cernet-helpdesk-ip@net.edu.cn 20010903
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Xiaoning Wang
address: Network Center
address: Wenzhou Medical College
address: Wenzhou, Zhejiang 325035, China
country: CN
nic-hdl: XW688-AP
e-mail: wxn@wzmc.net
phone: +86-0577-86689830
fax-no: +86-0577-86689810
changed: hostmaster@net.edu.cn 20060613
mnt-by: MAINT-CERNET-AP
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.174.50.188

Hi,

The IP 61.174.50.188 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.174.50.188:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.174.48.0 - 61.174.55.255'

inetnum: 61.174.48.0 - 61.174.55.255
netname: CHINANET-ZJ-HU
country: CN
descr: CHINANET-ZJ Huzhou node network
descr: Zhejiang Telecom
admin-c: CZ4-AP
tech-c: CH119-AP
mnt-irt: IRT-CHINANET-ZJ
status: ALLOCATED NON-PORTABLE
changed: 15325819758@189.cn 20111231
mnt-by: MAINT-CHINANET-ZJ
mnt-lower: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Huzhou
address: No.18 Hongqi Road,Huzhou,Zhejiang.313000
country: CN
phone: +86-572-2022163
fax-no: +86-572-2210609
e-mail: anti_spam@mail.huptt.zj.cn
remarks: send spam reports to anti_spam@mail.huptt.zj.cn
remarks: and abuse reports to anti_spam@mail.huptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH50-AP
tech-c: CH50-AP
nic-hdl: CH119-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

role: CHINANET ZHEJIANG
address: No. 257 Qingjiang Road, Hangzhou, Zhejiang.310066
country: CN
phone: +86-571-86821752
fax-no: +86-571-86988329
e-mail: antispam@dcb.hz.zj.cn
remarks: send spam reports to antispam@dcb.hz.zj.cn
remarks: and abuse reports to antispam@dcb.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CZ61-AP
tech-c: CZ61-AP
nic-hdl: CZ4-AP
mnt-by: MAINT-CHINANET-ZJ
changed: hjh@dcb.hz.zj.cn 20050914
source: APNIC
changed: hm-changed@apnic.net 20111114

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.77.119.98

Hi,

The IP 218.77.119.98 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 218.77.119.98:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.77.104.0 - 218.77.119.255'

inetnum: 218.77.104.0 - 218.77.119.255
netname: CHINANET-HN-CS
country: CN
descr: CHINANET-HN Changsha node network
descr: hunan Telecom
admin-c: CHC17-AP
tech-c: CH636-AP
status: ALLOCATED NON-PORTABLE
changed: ipaddress@hntelecom.net.cn 20050914
mnt-by: MAINT-CHINANET-HN
mnt-lower: MAINT-CHINANET-HN-CS
source: APNIC

role: CHINANET HUNAN
address: No.1 TuanJie road,ChangSha,Hunan 410005
country: CN
phone: +86 731 4792092
fax-no: +86 731 4792007
e-mail: abuse.szx@2118.com.cn
remarks: send spam reports to abuse.szx@2118.com.cn
remarks: and abuse reports to abuse.szx@2118.com.cn
remarks: Please include detailed information and
remarks: times in UTC
admin-c: CH632-AP
tech-c: CS499-AP
nic-hdl: CH636-AP
mnt-by: MAINT-CHINANET-HN
changed: ipaddress@hntelecom.net.cn 20050816
changed: hm-changed@apnic.net 20111114
source: APNIC

role: CHINANET HuNan Changsha
address: No.77 Shaoshang load,Changsha Hunan 410007
country: CN
phone: +86 731 5554275
fax-no: +86 731 5554270
e-mail: abuse.hy@2118.com.cn
remarks: send spam reports to spam.hy@2118.com.cn
remarks: and abuse reports to abuse.hy@2118.com.cn
remarks: Please include detailed information and
remarks: times in UTC
admin-c: CS502-AP
tech-c: CS502-AP
nic-hdl: CHC17-AP
notify: ipaddress@hntelecom.net.cn
mnt-by: MAINT-CHINANET-HN-CS
changed: ipaddress@hntelecom.net.cn 20050818
source: APNIC
changed: hm-changed@apnic.net 20111114

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.2.0.128

Hi,

The IP 218.2.0.128 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 218.2.0.128:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.2.0.0 - 218.4.255.255'

inetnum: 218.2.0.0 - 218.4.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostmaster@ns.chinanet.cn.net 20020209
changed: hostmaster@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

% Information related to '218.2.0.0/16AS23650'

route: 218.2.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 87.106.29.11

Hi,

The IP 87.106.29.11 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 87.106.29.11:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '87.106.16.0 - 87.106.31.255'

% Abuse contact for '87.106.16.0 - 87.106.31.255' is 'abuse@oneandone.net'

inetnum: 87.106.16.0 - 87.106.31.255
netname: SCHLUND-CUSTOMERS
descr: 1&1 Internet AG
country: DE
admin-c: IPAD-RIPE
tech-c: IPOP-RIPE
remarks: INFRA-AW
remarks: in case of abuse or spam, please mailto: abuse@oneandone.net
status: ASSIGNED PA
mnt-by: AS8560-MNT
source: RIPE # Filtered

role: IP Administration
address: 1&1 Internet AG
admin-c: AFI5-RIPE
admin-c: RME9-RIPE
admin-c: JR2342-RIPE
admin-c: LTO3-RIPE
admin-c: ZIG-RIPE
admin-c: MI-RIPE
admin-c: MINK-RIPE
admin-c: VR-RIPE
tech-c: AFI5-RIPE
tech-c: RME9-RIPE
tech-c: JR2342-RIPE
tech-c: LTO3-RIPE
nic-hdl: IPAD-RIPE
abuse-mailbox: abuse@oneandone.net
mnt-by: AS8560-MNT
source: RIPE # Filtered

role: IP Operations
address: 1&1 Internet AG
admin-c: AFI5-RIPE
admin-c: RME9-RIPE
admin-c: JR2342-RIPE
admin-c: LTO3-RIPE
tech-c: AFI5-RIPE
tech-c: RME9-RIPE
tech-c: JR2342-RIPE
tech-c: LTO3-RIPE
nic-hdl: IPOP-RIPE
abuse-mailbox: abuse@oneandone.net
mnt-by: AS8560-MNT
source: RIPE # Filtered

% Information related to '87.106.0.0/16AS8560'

route: 87.106.0.0/16
descr: SCHLUND-PA-5
origin: AS8560
mnt-by: AS8560-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 41.214.4.59

Hi,

The IP 41.214.4.59 has just been banned by Fail2Ban after
7 attempts against SSH.

Here are more information about 41.214.4.59:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '41.214.0.0 - 41.214.127.255'

% No abuse contact registered for 41.214.0.0 - 41.214.127.255

inetnum: 41.214.0.0 - 41.214.127.255
netname: SN-SONATEL-20080326
descr: SONATEL Societe Nationale Des Telecommunications Du Senegal
country: SN
org: ORG-SNDT1-AFRINIC
admin-c: AM2490-AFRINIC
tech-c: AM2490-AFRINIC
status: ALLOCATED PA
mnt-by: AFRINIC-HM-MNT
mnt-lower: SMM-MNT
mnt-domains: SMM-MNT
source: AFRINIC # Filtered
parent: 41.0.0.0 - 41.255.255.255

organisation: ORG-SNDT1-AFRINIC
org-name: SONATEL Societe Nationale Des Telecommunications Du Senegal
org-type: LIR
country: SN
address: Societe Nationale Des Telecommunications Du Senegal
address: 6 Rue Wagane
address: Diouf
address: BP 69 Dakar
address: Dakar
phone: +22133 879 3222
fax-no: +22133 860 0164
admin-c: MD5-AFRINIC
admin-c: AM2490-AFRINIC
admin-c: SBT7-AFRINIC
tech-c: AM2490-AFRINIC
tech-c: SBT7-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: SMM-MNT
mnt-by: AFRINIC-HM-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

person: Alpha Mbodj
nic-hdl: AM2490-AFRINIC
address: Sonatel
address: Direction des Reseaux
address: 6 Rue Wagane DIOUF
address: BP 69 Dakar
address: SENEGAL
address: Dakar
address: Senegal
phone: +221 33 879 3222
fax-no: +221 822 92 20
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.174.50.244

Hi,

The IP 61.174.50.244 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.174.50.244:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.174.48.0 - 61.174.55.255'

inetnum: 61.174.48.0 - 61.174.55.255
netname: CHINANET-ZJ-HU
country: CN
descr: CHINANET-ZJ Huzhou node network
descr: Zhejiang Telecom
admin-c: CZ4-AP
tech-c: CH119-AP
mnt-irt: IRT-CHINANET-ZJ
status: ALLOCATED NON-PORTABLE
changed: 15325819758@189.cn 20111231
mnt-by: MAINT-CHINANET-ZJ
mnt-lower: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Huzhou
address: No.18 Hongqi Road,Huzhou,Zhejiang.313000
country: CN
phone: +86-572-2022163
fax-no: +86-572-2210609
e-mail: anti_spam@mail.huptt.zj.cn
remarks: send spam reports to anti_spam@mail.huptt.zj.cn
remarks: and abuse reports to anti_spam@mail.huptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH50-AP
tech-c: CH50-AP
nic-hdl: CH119-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

role: CHINANET ZHEJIANG
address: No. 257 Qingjiang Road, Hangzhou, Zhejiang.310066
country: CN
phone: +86-571-86821752
fax-no: +86-571-86988329
e-mail: antispam@dcb.hz.zj.cn
remarks: send spam reports to antispam@dcb.hz.zj.cn
remarks: and abuse reports to antispam@dcb.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CZ61-AP
tech-c: CZ61-AP
nic-hdl: CZ4-AP
mnt-by: MAINT-CHINANET-ZJ
changed: hjh@dcb.hz.zj.cn 20050914
source: APNIC
changed: hm-changed@apnic.net 20111114

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 58.215.187.19

Hi,

The IP 58.215.187.19 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 58.215.187.19:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '58.208.0.0 - 58.223.255.255'

inetnum: 58.208.0.0 - 58.223.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20050624
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 50.79.253.234

Hi,

The IP 50.79.253.234 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 50.79.253.234:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 50.79.253.234"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=50.79.253.234?showDetails=true&showARIN=false&ext=netref2
#

Comcast Business Communications, LLC CBC-ALLOC-4 (NET-50-76-0-0-1) 50.76.0.0 - 50.79.255.255
DCG PARTNERSHIP DCGPARTNERSHIP (NET-50-79-253-232-1) 50.79.253.232 - 50.79.253.239

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 203.169.143.198

Hi,

The IP 203.169.143.198 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 203.169.143.198:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '203.169.128.0 - 203.169.159.255'

inetnum: 203.169.128.0 - 203.169.159.255
netname: HKNET-HK
descr: HKNet Company Limited
descr: 32/F., Shun Tak Centre, China Merchants Tower,
descr: 168-200 Connaught Road Central., Hong Kong.
country: HK
admin-c: DA56-AP
tech-c: DA56-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HKNET-NT
mnt-irt: IRT-HKNET-HK
changed: hostmaster@apnic.net 19990914
changed: hostmaster@apnic.net 20010803
status: ALLOCATED PORTABLE
source: APNIC

irt: IRT-HKNET-HK
address: 15/F., Tower2, Ever Gain Plaza,
address: 88 Container Port Road,
address: Kwai Chung, N.T.,
address: Hong Kong
e-mail: abuse@hknet.com
abuse-mailbox: abuse@hknet.com
admin-c: DA56-AP
tech-c: RC429-AP
auth: # Filtered
mnt-by: MAINT-HKNET-NT
changed: abuse@hknet.com 20110225
source: APNIC

person: DNS Administrator
address: 15/F., Tower2, Ever Gain Plaza,
address: 88 Container Port Road,
address: Kwai Chung, N.T.,
address: Hong Kong
country: HK
phone: +852 2110 3663
fax-no: +852 2110 9746
e-mail: dnstech@hknet.com
nic-hdl: DA56-AP
mnt-by: MAINT-HKNET-NT
changed: dnstech@hknet.com 20020725
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.241.176.166

Hi,

The IP 218.241.176.166 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 218.241.176.166:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.241.128.0 - 218.241.255.255'

inetnum: 218.241.128.0 - 218.241.255.255
netname: BITNET
descr: Beijing Bitone United Networks Technology Service Co.,Ltd.
descr: No.26 Chaowai Str. Chaoyang District,Beijing,P.R.C
country: CN
admin-c: JL2597-AP
tech-c: JL2597-AP
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
status: ALLOCATED NON-PORTABLE
changed: ipas@cnnic.cn 20121021
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Jonson Li
nic-hdl: JL2597-AP
e-mail: bill.pang@bj.datadragon.net
address: 2nd Floor,BLDG HP No.112 Jian Guo Street,Chaoyang District,Beijing
phone: +86-010-65661862-232
fax-no: +86-010-65660882
country: CN
changed: ipas@cnnic.cn 20091023
mnt-by: MAINT-CNNIC-AP
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 91.200.12.111

Hi,

The IP 91.200.12.111 has just been banned by Fail2Ban after
7 attempts against SSH.

Here are more information about 91.200.12.111:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '91.200.12.0 - 91.200.15.255'

% Abuse contact for '91.200.12.0 - 91.200.15.255' is 'noc@lugalink.net'

inetnum: 91.200.12.0 - 91.200.15.255
netname: GLUBINA-NET
descr: PP SKS-Lugan
org: ORG-PS152-RIPE
remarks:
remarks: **********************************Attention***************************************
remarks: The pool is used other Department!
remarks: In case of questions related to SPAM, HACKING, SECURITY
remarks: Please contact directly abuse@alchevsk.org
remarks: tel: +38 (044) 228-14-42; +38 (050) 472-06-34; +38 (067) 921-89-42
remarks: ***********************************************************************************
remarks:
country: UA
admin-c: NASA-RIPE
tech-c: DVC31-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: GLUBINA-MNT
mnt-routes: GLUBINA-MNT
mnt-domains: GLUBINA-MNT
source: RIPE # Filtered

organisation: ORG-PS152-RIPE
org-name: PP SKS-LUGAN
org-type: LIR
address: PP SKS-LUGAN
address: Lenina 42/6
address: 94207
address: Alchevsk
address: UKRAINE
phone: +380506492511
fax-no: +380644250006
abuse-c: AR17440-RIPE
admin-c: TAU-RIPE
mnt-ref: LUGAN-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

person: Dmitrij Chaban
address: Ukraine
phone: +38 044 2281442
nic-hdl: DVC31-RIPE
mnt-by: VHOSTER-MNT
source: RIPE # Filtered

person: Novohatsky Sergey
address: Ukraine
mnt-by: NASA-MNT
phone: +380 6442 50006
nic-hdl: NASA-RIPE
source: RIPE # Filtered

% Information related to '91.200.12.0/22AS35804'

route: 91.200.12.0/22
descr: PP "SKS-Lugan"
origin: AS35804
mnt-by: GLUBINA-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 74.86.231.106

Hi,

The IP 74.86.231.106 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 74.86.231.106:

[Querying whois.arin.net]
[Redirected to rwhois.softlayer.com:4321]
[Querying rwhois.softlayer.com]
[rwhois.softlayer.com]
%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.74.86.224.0/19
network:Auth-Area:74.86.224.0/19
network:Network-Name:SOFTLAYER-74.86.224.0
network:IP-Network:74.86.231.104/29
network:IP-Network-Block:74.86.231.104-74.86.231.111
network:Organization;I:Properhosting.com
network:Street-Address:7800 1st St N
network:City:St Petersburg
network:State:FL
network:Postal-Code:33702
network:Country-Code:US
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:abuse@properhosting.com
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2006-08-09 17:46:31
network:Updated:2006-09-24 15:38:01
network:Updated-By:ipadmin@softlayer.com

%ok

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 222.186.34.244

Hi,

The IP 222.186.34.244 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 222.186.34.244:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '222.184.0.0 - 222.191.255.255'

inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your
remarks: organisation account name in the subject line.
changed: hm-changed@apnic.net 20040223
status: ALLOCATED PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 58.215.172.153

Hi,

The IP 58.215.172.153 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 58.215.172.153:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '58.208.0.0 - 58.223.255.255'

inetnum: 58.208.0.0 - 58.223.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20050624
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.174.50.251

Hi,

The IP 61.174.50.251 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 61.174.50.251:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.174.48.0 - 61.174.55.255'

inetnum: 61.174.48.0 - 61.174.55.255
netname: CHINANET-ZJ-HU
country: CN
descr: CHINANET-ZJ Huzhou node network
descr: Zhejiang Telecom
admin-c: CZ4-AP
tech-c: CH119-AP
mnt-irt: IRT-CHINANET-ZJ
status: ALLOCATED NON-PORTABLE
changed: 15325819758@189.cn 20111231
mnt-by: MAINT-CHINANET-ZJ
mnt-lower: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Huzhou
address: No.18 Hongqi Road,Huzhou,Zhejiang.313000
country: CN
phone: +86-572-2022163
fax-no: +86-572-2210609
e-mail: anti_spam@mail.huptt.zj.cn
remarks: send spam reports to anti_spam@mail.huptt.zj.cn
remarks: and abuse reports to anti_spam@mail.huptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH50-AP
tech-c: CH50-AP
nic-hdl: CH119-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

role: CHINANET ZHEJIANG
address: No. 257 Qingjiang Road, Hangzhou, Zhejiang.310066
country: CN
phone: +86-571-86821752
fax-no: +86-571-86988329
e-mail: antispam@dcb.hz.zj.cn
remarks: send spam reports to antispam@dcb.hz.zj.cn
remarks: and abuse reports to antispam@dcb.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CZ61-AP
tech-c: CZ61-AP
nic-hdl: CZ4-AP
mnt-by: MAINT-CHINANET-ZJ
changed: hjh@dcb.hz.zj.cn 20050914
source: APNIC
changed: hm-changed@apnic.net 20111114

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 122.225.109.103

Hi,

The IP 122.225.109.103 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 122.225.109.103:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '122.225.109.0 - 122.225.109.127'

inetnum: 122.225.109.0 - 122.225.109.127
netname: DINGQI-NETWORK-TECHNOLOGY
country: CN
descr: Shaoxing Dingqi Network Technology Co., Ltd.
descr:
admin-c: JS2095-AP
tech-c: CH119-AP
mnt-irt: IRT-CHINANET-ZJ
status: ASSIGNED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20110707
mnt-by: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Huzhou
address: No.18 Hongqi Road,Huzhou,Zhejiang.313000
country: CN
phone: +86-572-2022163
fax-no: +86-572-2210609
e-mail: anti_spam@mail.huptt.zj.cn
remarks: send spam reports to anti_spam@mail.huptt.zj.cn
remarks: and abuse reports to anti_spam@mail.huptt.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH50-AP
tech-c: CH50-AP
nic-hdl: CH119-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Jinwei Sun
nic-hdl: JS2095-AP
e-mail: anti_spam@mail.huptt.zj.cn
address: Huzhou,Zhejiang.Postcode:313000
phone: +86-18657530001
country: CN
changed: auto-dbm@dcb.hz.zj.cn 20110707
mnt-by: MAINT-CN-CHINANET-ZJ-HU
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 31.210.65.226

Hi,

The IP 31.210.65.226 has just been banned by Fail2Ban after
6 attempts against SSH.

Here are more information about 31.210.65.226:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '31.210.65.224 - 31.210.65.231'

% Abuse contact for '31.210.65.224 - 31.210.65.231' is 'abuse@as42926.net'

inetnum: 31.210.65.224 - 31.210.65.231
netname: saatiniyarat
descr: Hürriyet Mah. Kaynak Sok. No:6 Kat:4
descr: + 90 212 2220649
descr: saatiniyarat.com
descr: destek@saatiniyarat.com
remarks: -------------------------------------------------------
remarks: Using for dedicated server and co-location services.
remarks: Please send abuse reports to abuse@rh.com.tr
remarks: -------------------------------------------------------
country: TR
admin-c: RLA11-RIPE
tech-c: RLA11-RIPE
status: ASSIGNED PA
mnt-by: RADORE-MNT
mnt-lower: RADORE-MNT
mnt-routes: RADORE-MNT
source: RIPE # Filtered

role: Radore LIR Admin
address: Buyukdere Cad. No:171 Metrocity AVM
address: 4B D39 1.Levent, 34394
address: Sisli / Istanbul
address: Turkiye, TR
phone: +90 (212) 344 04 04
fax-no: +90 (212) 344 00 09
org: ORG-RHTH1-RIPE
admin-c: RNOC6-RIPE
tech-c: RNOC6-RIPE
nic-hdl: RLA11-RIPE
abuse-mailbox: abuse@radore.com
mnt-by: AS42926-MNT
source: RIPE # Filtered

% Information related to '31.210.65.0/24AS42926'

route: 31.210.65.0/24
descr: AS42926-NETWORK
origin: AS42926
mnt-by: AS42926-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.2.0.133

Hi,

The IP 218.2.0.133 has just been banned by Fail2Ban after
5 attempts against SSH.

Here are more information about 218.2.0.133:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.2.0.0 - 218.4.255.255'

inetnum: 218.2.0.0 - 218.4.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostmaster@ns.chinanet.cn.net 20020209
changed: hostmaster@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: ip@jsinfo.net
remarks: send anti-spam reports to spam@jsinfo.net
remarks: send abuse reports to abuse@jsinfo.net
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@jsinfo.net 20090831
changed: ip@jsinfo.net 20090831
changed: hm-changed@apnic.net 20090901
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

% Information related to '218.2.0.0/16AS23650'

route: 218.2.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban