Banned hacker's IPs

Friday, 4 September 2015

[Fail2Ban] SSH: banned 178.89.191.77 from herbalyzer.com

Hi,

The IP 178.89.191.77 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 178.89.191.77:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '178.89.191.0 - 178.89.191.255'

% Abuse contact for '178.89.191.0 - 178.89.191.255' is 'abuse@telecom.kz'

inetnum: 178.89.191.0 - 178.89.191.255
netname: IP_Fedinyak
descr: Fedinyak Sergey
descr: Co-location servers
descr: Karaganda
country: KZ
admin-c: FS9640-RIPE
tech-c: FS9640-RIPE
status: ASSIGNED PA
mnt-by: KNIC-MNT
created: 2012-04-17T05:56:12Z
last-modified: 2012-04-17T05:56:12Z
source: RIPE # Filtered

person: Fedinyak Sergey
address: 100008, Karaganda city, Alikhanov str., 1
address: KZ
phone: +7 721 2423722
nic-hdl: FS9640-RIPE
mnt-by: KNIC-MNT
created: 2012-04-17T05:56:12Z
last-modified: 2012-04-17T05:56:12Z
source: RIPE # Filtered

% Information related to '178.89.191.0/24AS9198'

route: 178.89.191.0/24
descr: Kazakhtelecom Data Network Administration
origin: AS9198
mnt-by: KNIC-MNT
created: 2012-05-02T11:02:43Z
last-modified: 2012-05-02T11:02:43Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.80.1 (DB-2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 202.126.93.18 from popov-roman.com

Hi,

The IP 202.126.93.18 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 202.126.93.18:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '202.126.88.0 - 202.126.95.255'

inetnum: 202.126.88.0 - 202.126.95.255
netname: ULUSNET
descr: Ulusnet, ISP, Ulaanbaatar, Mongolia
country: MN
admin-c: EN89-AP
tech-c: EN89-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-MN-ULUSNET
mnt-routes: MAINT-MN-ULUSNET
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: To report network abuse, please contact the IRT
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: For assistance, please contact the APNIC Helpdesk
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
mnt-irt: IRT-ULUSNET-MN
changed: hm-changed@apnic.net 20060906
source: APNIC

irt: IRT-ULUSNET-MN
address: MPRP building, 313, Ulaanbaatar, Mongolia
e-mail: manlai@ulusnet.mn
abuse-mailbox: manlai@ulusnet.mn
admin-c: EN89-AP
tech-c: EN89-AP
auth: # Filtered
mnt-by: MAINT-MN-ULUSNET
changed: manlai@ulusnet.mn 20110329
source: APNIC

person: Enkhmanlai Negui
nic-hdl: EN89-AP
e-mail: manlai@ulusnet.mn
address: MPRP building, 313, Ulaanbaatar, Mongolia
phone: +976-11-330225
fax-no: +976-11-330225
country: MN
changed: manlai@ulusnet.mn 20060811
mnt-by: MAINT-NEW
source: APNIC

% Information related to '202.126.93.0/24AS38218'

route: 202.126.93.0/24
descr: MN-MONGOLIA-ULUSNET
origin: AS38218
mnt-by: MAINT-MN-ULUSNET
changed: manlai@ulusnet.mn 20090418
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 187.210.107.242 from popov-roman.com

Hi,

The IP 187.210.107.242 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 187.210.107.242:

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net

% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2015-09-04 11:56:17 (BRT -03:00)

inetnum: 187.210/16
status: reallocated
owner: Uninet S.A. de C.V.
ownerid: MX-USCV4-LACNIC
responsible: No hay informacion
address: Insurgentes Sur, 3500, Piso 4 Peña Pobre
address: 14060 - Tlalpan - DF
country: MX
phone: +52 55 56244400 []
owner-c: GEC10
tech-c: DCA
abuse-c: SRU
inetrev: 187.210/16
nserver: NSMEX3.UNINET.NET.MX
nsstat: 20150901 AA
nslastaa: 20150901
nserver: NSMEX4.UNINET.NET.MX
nsstat: 20150901 AA
nslastaa: 20150901
created: 20111101
changed: 20111101
inetnum-up: 187.192/11

nic-hdl: DCA
person: GESTION DE CAMBIOS
e-mail: gccips1@REDUNO.COM.MX
address: PERIFERICO SUR, 3190, ALVARO OBREG
address: 01900 - MEXICO DF - DF
country: MX
phone: +52 5 556244400 []
created: 20021210
changed: 20111027

nic-hdl: GEC10
person: GESTION DE CAMBIOS
e-mail: gccips@REDUNO.COM.MX
address: AV. INSURGENTES SUR, 3500, TORRE TELMEX COL. PEÑA POBRE
address: 14060 - TLALPAN - DF
country: MX
phone: +52 5556244400 []
created: 20110706
changed: 20140423

nic-hdl: SRU
person: SEGURIDAD DE RED UNINET
e-mail: abuse@UNINET.NET.MX
address: PERIFERICO SUR, 3190, ALVARO OBREG
address: 01900 - MEXICO - DF
country: MX
phone: +52 55 52237234 []
created: 20030701
changed: 20030703

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 5.63.119.34 from herbalyzer.com

Hi,

The IP 5.63.119.34 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 5.63.119.34:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '5.63.119.0 - 5.63.119.255'

% Abuse contact for '5.63.119.0 - 5.63.119.255' is 'abuse@telecom.kz'

inetnum: 5.63.119.0 - 5.63.119.255
netname: ENU_UNIVERSITY
descr: ENU_UNIVERSITY
country: KZ
admin-c: GM17344-RIPE
tech-c: GM17344-RIPE
status: ASSIGNED PA
mnt-by: KNIC-MNT
created: 2013-11-29T06:43:49Z
last-modified: 2013-11-29T06:43:49Z
source: RIPE # Filtered

person: Gabiden Makhmudov
address: Astana, Munaitpasova str 5
address: KZ
phone: +7 701 756 9941
nic-hdl: GM17344-RIPE
mnt-by: KNIC-MNT
created: 2013-11-29T06:36:21Z
last-modified: 2013-11-29T06:36:21Z
source: RIPE # Filtered

% Information related to '5.63.112.0/20as9198'

route: 5.63.112.0/20
descr: Kazakhtelecom
origin: as9198
mnt-by: KNIC-MNT
created: 2014-01-27T09:15:52Z
last-modified: 2014-01-27T09:15:52Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.80.1 (DB-1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 178.213.247.110 from popov-roman.com

Hi,

The IP 178.213.247.110 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 178.213.247.110:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '178.213.240.0 - 178.213.247.255'

% Abuse contact for '178.213.240.0 - 178.213.247.255' is 'nariman@kpfu.ru'

inetnum: 178.213.240.0 - 178.213.247.255
netname: KFU
descr: Kazan University
country: RU
org: ORG-KSU5-RIPE
admin-c: ARK16-ripe
tech-c: ark16-ripe
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-by: AS3325-MNT
mnt-by: TIC-NOC-MNT
mnt-routes: AS3325-MNT
mnt-domains: AS3325-MNT
created: 2010-10-20T12:30:19Z
last-modified: 2015-05-05T02:08:40Z
source: RIPE # Filtered
sponsoring-org: ORG-ES15-RIPE

organisation: ORG-KSU5-RIPE
org-name: Kazan University
descr: Kazan University,
descr: Kazanskiy Privolzhskiy Federalniy Universitet
org-type: OTHER
abuse-c: AT11214-RIPE
address: 18 Kremlyovskaya St. Kazan 420008 Russian Federation
mnt-ref: TIC-NOC-MNT
mnt-by: AS3325-MNT
created: 2010-05-24T06:29:15Z
last-modified: 2014-03-29T00:07:47Z
source: RIPE # Filtered

person: Azat R. Khayaliev
address: TATINTELCOM
address: Lavrentieva 3
address: 420126 Kazan Tatarstan
address: Russia
mnt-by: TIC-NOC-MNT
mnt-by: MNT-RNTELECOM
phone: +7843 5676001
fax-no: +7843 5676002
nic-hdl: ARK16-RIPE
created: 2006-10-10T09:28:07Z
last-modified: 2010-10-14T18:54:30Z
source: RIPE # Filtered

% Information related to '178.213.247.0/24AS3325'

route: 178.213.247.0/24
descr: KPFU-NET-7
origin: AS3325
mnt-by: AS3325-MNT
created: 2011-02-28T16:23:44Z
last-modified: 2011-02-28T16:23:44Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.80.1 (DB-2)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.135.137.2 from popov-roman.com

Hi,

The IP 61.135.137.2 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 61.135.137.2:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.135.137.0 - 61.135.137.255'

inetnum: 61.135.137.0 - 61.135.137.255
netname: WE
descr: BBSDF
country: CN
admin-c: WQ539-AP
tech-c: WQ539-AP
mnt-by: MAINT-CNCGROUP-BJ
changed: hostmast@publicf.bta.net.cn 20100805
status: ASSIGNED NON-PORTABLE
source: APNIC

person: wu qiong
address: wu
country: CN
nic-hdl: WQ539-AP
phone: +86-10-13910699664
fax-no: +86-10-61520405
e-mail: martingzhaobj@hotmail.com
mnt-by: MAINT-CNCGROUP-BJ
changed: hostmast@publicf.bta.net.cn 20100805
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 97.82.232.78 from popov-roman.com

Hi,

The IP 97.82.232.78 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 97.82.232.78:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 97.82.232.78"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=97.82.232.78?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Charter Communications NETBLK-CHARTER-NET (NET-97-80-0-0-1) 97.80.0.0 - 97.95.255.255
Charter Communications HCK-NC-97-82-192 (NET-97-82-192-0-1) 97.82.192.0 - 97.82.255.255

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 211.253.9.162 from popov-roman.com

Hi,

The IP 211.253.9.162 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 211.253.9.162:

[Querying whois.apnic.net]
[Redirected to whois.nic.or.kr]
[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query : 211.253.9.162

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 211.253.8.0 - 211.253.11.255 (/22)
ì„œë¹„ìŠ¤ëª… : KORNET
ê¸°ê´€ëª… : ì£¼ì&lsqauo;íšŒì‚¬ ì¼€ì´í&lsqauo;°
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG1600
ì£¼ì†Œ : ê²½ê¸° ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ì •ìžë™ KTë³¸ì‚¬ 206
ìš°íŽ¸ë²ˆí˜¸ : 463-711
í• ë&lsqauo;¹ì¼ìž : 20001205

[ IPv4ì£¼ì†Œ ì±…ìž„ìž ì •ë³´ ]
ì´ë¦„ : IPì£¼ì†Œê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

[ IPv4ì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : IPì£¼ì†Œë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

[ ìŠ¤íŒ¸ í•´í‚¹ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ìŠ¤íŒ¸/í•´í‚¹ë&lsqauo;´ë&lsqauo;¹
ì „í™"ë²ˆí˜¸ : +82-2-100-0000
ì „ìžìš°íŽ¸ : abuse@kornet.net

--------------------------------------------------------------------------------

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†Œì— ëŒ€í•œ ìœ„ ê´€ë¦¬ëŒ€í–‰ìžì˜ ì‚¬ìš©ìž í• ë&lsqauo;¹ì •ë³´ê°€ ì¡´ìž¬í•˜ì§€ ì•ŠìŠµë&lsqauo;ˆë&lsqauo;¤.

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 211.253.8.0 - 211.253.11.255 (/22)
Service Name : KORNET
Organization Name : Korea Telecom
Organization ID : ORG1600
Address : 206, KT Corporation Jeongja-dong Bundang-gu, Seongnam-si Gyeonggi-do
Zip Code : 463-711
Registration Date : 20001205

[ Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

[ Tech Contact Information ]
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

[ Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-100-0000
E-Mail : abuse@kornet.net

- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 80.82.78.12 from popov-roman.com

Hi,

The IP 80.82.78.12 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 80.82.78.12:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '80.82.64.0 - 80.82.79.255'

% Abuse contact for '80.82.64.0 - 80.82.79.255' is 'abuse@ecatel.net'

inetnum: 80.82.64.0 - 80.82.79.255
netname: NL-ECATEL-20100816
descr: Ecatel LTD
country: NL
org: ORG-EL38-RIPE
admin-c: RvE16-RIPE
tech-c: RvE16-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: ECATEL-MNT
mnt-routes: ECATEL-MNT
created: 2010-08-16T07:32:00Z
last-modified: 2010-08-16T07:32:00Z
source: RIPE # Filtered

organisation: ORG-EL38-RIPE
org-name: Ecatel LTD
org-type: LIR
address: Ecatel LTD
address: P.O.Box 19533
address: 2500 CM
address: Den Haag
address: NETHERLANDS
phone: +31702204015
fax-no: +31702204015
abuse-c: AR16168-RIPE
mnt-ref: ECATEL-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
admin-c: EL25-RIPE
created: 2006-07-06T08:03:04Z
last-modified: 2014-12-17T15:17:54Z
source: RIPE # Filtered

person: Reinier van Eeden
address: Archangelkade 1-3
address: 1013 BE Amsterdam
mnt-by: IQARUS-MNT
phone: +31 64 607 11 12
nic-hdl: RvE16-RIPE
created: 2004-08-05T13:53:07Z
last-modified: 2005-10-17T19:12:25Z
source: RIPE # Filtered

% Information related to '80.82.78.0/24AS29073'

route: 80.82.78.0/24
descr: AS29073 Route object
origin: AS29073
mnt-by: ECATEL-MNT
created: 2010-10-19T20:30:22Z
last-modified: 2010-10-19T20:30:22Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.80.1 (DB-3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 210.73.74.245 from popov-roman.com

Hi,

The IP 210.73.74.245 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 210.73.74.245:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '210.73.72.0 - 210.73.75.255'

inetnum: 210.73.72.0 - 210.73.75.255
netname: CPIP-GOVERNMENT-FIBER
descr: People's Government of Beijing Municipality
descr: Government
descr: Beijing
country: CN
admin-c: DL313-AP
tech-c: DL313-AP
mnt-by: MAINT-CNNIC-AP
status: ASSIGNED NON-PORTABLE
changed: sjm@capinfo.com.cn 20020619
changed: hm-changed@apnic.net 20040927
source: APNIC

person: DD Li
nic-hdl: DL313-AP
e-mail: lixinzheng@capinfo.com.cn
address: No.11 Xi San Huan Zhong Road ,Beijing ,China
phone: +86-010-88511155-5613
fax-no: +86-010-68475806
country: CN
changed: shenzhi@cnnic.cn 20051011
mnt-by: MAINT-CNNIC-AP
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 202.83.16.236 from popov-roman.com

Hi,

The IP 202.83.16.236 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 202.83.16.236:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '202.83.16.0 - 202.83.16.254'

inetnum: 202.83.16.0 - 202.83.16.254
netname: CableLite
descr: Broad Band Internet Service Provider, India
country: IN
admin-c: IA145-AP
tech-c: IT120-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-IN-ACT
mnt-irt: IRT-CABLELITE-IN
changed: shyjumon.ravi@acttv.in 20100826
source: APNIC

irt: IRT-CABLELITE-IN
address: Atria Convergence Technologies Pvt Ltd
address: # 1, 2nd Floor, Indian Express Building,
address: Queen's Road, Bangalore - 560 001
e-mail: apnic@acttv.in
abuse-mailbox: abuse@acttv.in
admin-c: IA145-AP
tech-c: IT120-AP
auth: # Filtered
mnt-by: MAINT-IN-ACT
changed: shyjumon.ravi@acttv.in 20101116
source: APNIC

person: IP Admin
address: No 1, 2nd Floor, Indian Express Building, Queen's Road, Bangalore
country: IN
phone: +91-080-4284-4284
e-mail: ip-admin@acttv.in
nic-hdl: IA145-AP
mnt-by: MAINT-IN-ACT
changed: shyjumon.ravi@acttv.in 20100826
source: APNIC

person: IP Tech
address: No 1, 2nd Floor, Indian Express Building, Queen's Road, Bangalore
country: IN
phone: +91-080-4284-4284
e-mail: iptech@acttv.in
nic-hdl: IT120-AP
mnt-by: MAINT-IN-ACT
changed: shyjumon.ravi@acttv.in 20091231
source: APNIC

% Information related to '202.83.16.0/24AS24309'

route: 202.83.16.0/24
descr: BroadBand Internet Service Provider, India
origin: AS24309
mnt-by: MAINT-IN-ACT
changed: shyjumon.ravi@acttv.in 20100826
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 89.200.143.163 from popov-roman.com

Hi,

The IP 89.200.143.163 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 89.200.143.163:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '89.200.136.0 - 89.200.143.255'

% Abuse contact for '89.200.136.0 - 89.200.143.255' is 'abuse@memset.com'

inetnum: 89.200.136.0 - 89.200.143.255
netname: MEMSET-DP-COLO
descr: Memset Ltd
country: GB
org: ORG-ML145-RIPE
admin-c: MHDP1-RIPE
tech-c: MHDP1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-by: DEDIPOWER-MNT
mnt-routes: DEDIPOWER-MNT
mnt-domains: DEDIPOWER-MNT
created: 2006-05-16T11:37:28Z
last-modified: 2015-05-05T02:14:47Z
source: RIPE # Filtered

organisation: ORG-ML145-RIPE
org-name: MEMSET Ltd
org-type: LIR
address: Building 87
Dunsfold Park
address: GU6 8TB
address: Cranleigh
address: UNITED KINGDOM
phone: +441483608010
admin-c: SML-RIPE
admin-c: NCW2-RIPE
admin-c: ACS80-RIPE
admin-c: MN5194-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: MEMSET
mnt-by: RIPE-NCC-HM-MNT
abuse-c: MA14533-RIPE
created: 2010-06-04T12:01:26Z
last-modified: 2015-07-02T12:39:30Z
source: RIPE # Filtered

role: Memset Hostmaster
address: 40 Occam Road
address: Surrey Research Park
address: Guildford
address: GU2 7YG
abuse-mailbox: abuse@memset.com
mnt-by: DEDIPOWER-MNT
admin-c: DPHM1-RIPE
tech-c: DPHM1-RIPE
nic-hdl: MHDP1-RIPE
created: 2009-07-08T20:38:29Z
last-modified: 2009-07-08T20:38:29Z
source: RIPE # Filtered

% Information related to '89.200.136.0/21AS24931'

route: 89.200.136.0/21
descr: Memset Limited
origin: AS24931
mnt-by: DEDIPOWER-MNT
mnt-routes: MEMSET
created: 2006-05-16T13:39:45Z
last-modified: 2013-01-18T12:11:26Z
source: RIPE # Filtered

% Information related to '89.200.136.0/21AS50957'

route: 89.200.136.0/21
descr: Memset Ltd
origin: AS50957
mnt-by: MEMSET
created: 2013-06-19T20:27:36Z
last-modified: 2013-06-19T20:27:36Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.80.1 (DB-1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 193.104.41.137 from popov-roman.com

Hi,

The IP 193.104.41.137 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 193.104.41.137:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '193.104.41.0 - 193.104.41.255'

% No abuse contact registered for 193.104.41.0 - 193.104.41.255

inetnum: 193.104.41.0 - 193.104.41.255
netname: VVPN-NET
descr: PE Voronov Evgen Sergiyovich
country: MD
org: ORG-PESV2-RIPE
admin-c: ESV1-RIPE
tech-c: ESV1-RIPE
status: ASSIGNED PI
mnt-by: VVPN-MNT
mnt-by: RIPE-NCC-END-MNT
mnt-routes: VVPN-MNT
mnt-domains: VVPN-MNT
created: 2009-10-12T11:34:50Z
last-modified: 2015-06-01T15:18:26Z
source: RIPE # Filtered

organisation: ORG-PESV2-RIPE
org-name: PE Voronov Evgen Sergiyovich
org-type: OTHER
descr: PE Evgen Sergeevich Voronov
address: 25 October street, 118-15
address: Tiraspol, Transdnistria
phone: +373 533 50404
admin-c: ESV1-RIPE
tech-c: ESV1-RIPE
mnt-ref: VVPN-MNT
mnt-by: VVPN-MNT
created: 2009-07-24T18:52:57Z
last-modified: 2010-01-12T19:38:04Z
source: RIPE # Filtered

person: Evgen Sergeevich Voronov
address: 25 October street, 118-15
address: Tiraspol, Transdnistria
phone: +373 533 50404
nic-hdl: ESV1-RIPE
mnt-by: VVPN-MNT
created: 2009-07-24T18:52:56Z
last-modified: 2010-01-12T19:38:04Z
source: RIPE # Filtered

% Information related to '193.104.41.0/24AS49934'

route: 193.104.41.0/24
descr: PE Voronov Evgen Sergiyovich
origin: AS49934
mnt-by: VVPN-MNT
created: 2009-10-23T17:41:10Z
last-modified: 2010-01-12T19:38:05Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.80.1 (DB-1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 27.254.44.43 from popov-roman.com

Hi,

The IP 27.254.44.43 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 27.254.44.43:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '27.254.44.0 - 27.254.44.255'

inetnum: 27.254.44.0 - 27.254.44.255
netname: idc-csloxinfo
descr: CSLOXINFO-IDC
descr: contact
country: TH
admin-c: LIA1-AP
tech-c: LIA1-AP
status: ASSIGNED NON-PORTABLE
mnt-by: LOXINFO-IS
mnt-lower: LOXINFO-IS
mnt-routes: LOXINFO-IS
mnt-irt: IRT-CSLOXINFO-TH
changed: domaster@loxinfo.co.th 20110617
source: APNIC

irt: IRT-CSLOXINFO-TH
address: 90 Cyber World Tower A, 17-20th Floor
address: Ratchadapisek Road, Huai Khwang, Bangkok 10310
phone: +66 2 2638000
fax-no: +66 2 2638790
e-mail: ip_admin@csloxinfo.net
e-mail: domaster@loxinfo.co.th
abuse-mailbox: ip_admin@csloxinfo.net
abuse-mailbox: domaster@loxinfo.co.th
admin-c: LIA1-AP
tech-c: LIA1-AP
auth: # Filtered
mnt-by: LOXINFO-IS
changed: ip_admin@csloxinfo.net 20101108
source: APNIC

role: Loxinfo IP Admins
remarks: CS LOXINFO PUBLIC COMPANY LIMITED
address: 90 Cyber World Tower A, 17-20th Floor
address: Ratchadapisek Road, Huai Khwang, Bangkok 10310
country: TH
phone: +66-2263-8000
fax-no: +66-2263-8790
e-mail: ip_admin@csloxinfo.net
admin-c: DL85-AP
tech-c: DL85-AP
nic-hdl: LIA1-AP
mnt-by: LOXINFO-IS
changed: ip_admin@csloxinfo.net 20060703
changed: ip_admin@csloxinfo.net 20091125
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 168.63.148.31 from herbalyzer.com

Hi,

The IP 168.63.148.31 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 168.63.148.31:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 168.63.148.31"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=168.63.148.31?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 168.61.0.0 - 168.63.255.255
CIDR: 168.61.0.0/16, 168.62.0.0/15
NetName: MICROSOFT
NetHandle: NET-168-61-0-0-1
Parent: NET168 (NET-168-0-0-0-0)
NetType: Direct Assignment
OriginAS:
Organization: Microsoft Corp (MSFT-Z)
RegDate: 2011-06-22
Updated: 2013-08-20
Ref: http://whois.arin.net/rest/net/NET-168-61-0-0-1

OrgName: Microsoft Corp
OrgId: MSFT-Z
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 2011-06-22
Updated: 2015-05-19
Comment: To report suspected security issues specific to
Comment: traffic emanating from Microsoft online services,
Comment: including the distribution of malicious content
Comment: or other illicit or illegal material through a
Comment: Microsoft online service, please submit reports
Comment: to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft
Comment: Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft
Comment: products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests,
Comment: please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: http://whois.arin.net/rest/org/MSFT-Z

OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: http://whois.arin.net/rest/poc/MRPD-ARIN

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: http://whois.arin.net/rest/poc/MAC74-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 94.102.63.81 from popov-roman.com

Hi,

The IP 94.102.63.81 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 94.102.63.81:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '94.102.48.0 - 94.102.63.255'

% Abuse contact for '94.102.48.0 - 94.102.63.255' is 'abuse@ecatel.net'

inetnum: 94.102.48.0 - 94.102.63.255
netname: NL-ECATEL-20080829
descr: Ecatel LTD
country: NL
org: ORG-EL38-RIPE
admin-c: RvE16-RIPE
tech-c: RvE16-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: ECATEL-MNT
mnt-routes: ECATEL-MNT
created: 2008-08-29T13:07:09Z
last-modified: 2008-08-29T13:07:09Z
source: RIPE # Filtered

organisation: ORG-EL38-RIPE
org-name: Ecatel LTD
org-type: LIR
address: Ecatel LTD
address: P.O.Box 19533
address: 2500 CM
address: Den Haag
address: NETHERLANDS
phone: +31702204015
fax-no: +31702204015
abuse-c: AR16168-RIPE
mnt-ref: ECATEL-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
admin-c: EL25-RIPE
created: 2006-07-06T08:03:04Z
last-modified: 2014-12-17T15:17:54Z
source: RIPE # Filtered

person: Reinier van Eeden
address: Archangelkade 1-3
address: 1013 BE Amsterdam
mnt-by: IQARUS-MNT
phone: +31 64 607 11 12
nic-hdl: RvE16-RIPE
created: 2004-08-05T13:53:07Z
last-modified: 2005-10-17T19:12:25Z
source: RIPE # Filtered

% Information related to '94.102.48.0/20AS29073'

route: 94.102.48.0/20
descr: AS29073 Route object
origin: AS29073
mnt-by: ECATEL-MNT
created: 2008-09-02T11:55:23Z
last-modified: 2008-09-02T11:55:23Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.80.1 (DB-4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 110.159.147.241 from popov-roman.com

Hi,

The IP 110.159.147.241 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 110.159.147.241:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '110.159.0.0 - 110.159.176.255'

inetnum: 110.159.0.0 - 110.159.176.255
netname: ADSL-STREAMYX
descr: TMNST
country: MY
admin-c: EAK2-AP
tech-c: EAK2-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-AP-STREAMYX
mnt-lower: MAINT-AP-STREAMYX
mnt-routes: MAINT-AP-STREAMYX
mnt-irt: IRT-TMNST-MY
notify: tmcops@tm.net.my
changed: nuralwani@tm.com.my 20130412
changed: hm-changed@apnic.net 20140515
source: APNIC

irt: IRT-TMNST-MY
address: TELEKOM MALAYSIA BERHAD
address: TM BRICKFIELD
address: Jalan Tun Sambanthan
address: 43200 KUALA LUMPUR
e-mail: ipmc_ipcore@tm.com.my
abuse-mailbox: abuse@tm.com.my
admin-c: TIA7-AP
tech-c: TIA7-AP
auth: # Filtered
mnt-by: MAINT-AP-STREAMYX
changed: abuse@tm.com.my 20140211
source: APNIC

person: EMRAN AHMED KAMAL
nic-hdl: EAK2-AP
e-mail: abuse@tm.com.my
address: Telekom Malaysia
address: Jalan Pantai Baru, Kuala Lumpur.
phone: +6-03-83185434
fax-no: +6-03-22402126
country: MY
changed: fuwaizah@tm.net.my 20080918
mnt-by: TM-NET-AP
abuse-mailbox: abuse@tm.com.my
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 203.146.125.234 from popov-roman.com

Hi,

The IP 203.146.125.234 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 203.146.125.234:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '203.146.125.232 - 203.146.125.239'

inetnum: 203.146.125.232 - 203.146.125.239
netname: parkroyal-TH
country: TH
descr: reassign to "Park Royal Co., Ltd"
descr: contact "parkroyal@csloxinfo.com, prushanin@radisson.com"
admin-c: LIA1-AP
tech-c: LIA1-AP
status: ASSIGNED NON-PORTABLE
changed: domaster@loxinfo.co.th 20130313
mnt-by: LOXINFO-IS
mnt-irt: IRT-CSLOXINFO-TH
source: APNIC

irt: IRT-CSLOXINFO-TH
address: 90 Cyber World Tower A, 17-20th Floor
address: Ratchadapisek Road, Huai Khwang, Bangkok 10310
phone: +66 2 2638000
fax-no: +66 2 2638790
e-mail: ip_admin@csloxinfo.net
e-mail: domaster@loxinfo.co.th
abuse-mailbox: ip_admin@csloxinfo.net
abuse-mailbox: domaster@loxinfo.co.th
admin-c: LIA1-AP
tech-c: LIA1-AP
auth: # Filtered
mnt-by: LOXINFO-IS
changed: ip_admin@csloxinfo.net 20101108
source: APNIC

role: Loxinfo IP Admins
remarks: CS LOXINFO PUBLIC COMPANY LIMITED
address: 90 Cyber World Tower A, 17-20th Floor
address: Ratchadapisek Road, Huai Khwang, Bangkok 10310
country: TH
phone: +66-2263-8000
fax-no: +66-2263-8790
e-mail: ip_admin@csloxinfo.net
admin-c: DL85-AP
tech-c: DL85-AP
nic-hdl: LIA1-AP
mnt-by: LOXINFO-IS
changed: ip_admin@csloxinfo.net 20060703
changed: ip_admin@csloxinfo.net 20091125
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 85.247.205.115 from herbalyzer.com

Hi,

The IP 85.247.205.115 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 85.247.205.115:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '85.246.0.0 - 85.247.255.255'

% Abuse contact for '85.246.0.0 - 85.247.255.255' is 'abuse@mail.telepac.pt'

inetnum: 85.246.0.0 - 85.247.255.255
netname: MEO-BROADBAND
descr: PT Comunicacoes S.A.
country: PT
remarks: NCC #2009021074
admin-c: TP3302-RIPE
tech-c: TP3302-RIPE
status: ASSIGNED PA
mnt-by: TELEPAC-MNT
mnt-routes: TELEPAC-MNT
created: 2009-03-23T14:28:58Z
last-modified: 2014-01-31T16:05:14Z
source: RIPE # Filtered

role: MEO-RESIDENCIAL
org: ORG-TCIS1-RIPE
address: Local Internet Registry Management
address: MEO - SERVICOS DE COMUNICACOES E MULTIMEDIA S.A.
address: Av. Fontes Pereira de Melo, 40 - 3 Bl A
address: Forum Picoas - 1069-300 Lisboa
address: Portugal
phone: +351-215000000
admin-c: LL1052-RIPE
admin-c: MCN5-RIPE
admin-c: HCR20-RIPE
admin-c: NPM17-RIPE
admin-c: DPM37-RIPE
admin-c: LAS102-RIPE
admin-c: TPM7-RIPE
tech-c: RTM15-RIPE
tech-c: FSG53-RIPE
tech-c: JCO39-RIPE
tech-c: PPB29-RIPE
tech-c: HAC24-RIPE
tech-c: HCO6-RIPE
tech-c: AA2895-RIPE
tech-c: PG259-RIPE
nic-hdl: TP3302-RIPE
abuse-mailbox: abuse@mail.telepac.pt
mnt-by: TELEPAC-MNT
created: 2002-08-12T09:57:20Z
last-modified: 2015-06-05T10:59:42Z
source: RIPE # Filtered

% Information related to '85.240.0.0/13AS3243'

route: 85.240.0.0/13
descr: PT Comunicacoes S.A.
origin: AS3243
mnt-by: TELEPAC-MNT
created: 2005-01-04T19:15:12Z
last-modified: 2014-01-31T16:22:08Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.80.1 (DB-1)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 196.219.88.248 from herbalyzer.com

Hi,

The IP 196.219.88.248 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 196.219.88.248:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '196.219.64.0 - 196.219.95.255'

% No abuse contact registered for 196.219.64.0 - 196.219.95.255

inetnum: 196.219.64.0 - 196.219.95.255
netname: All-14
descr: TE Data
country: EG
org: ORG-TD2-AFRINIC
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
status: ASSIGNED PA
mnt-by: GEGA-MNT
source: AFRINIC # Filtered
parent: 196.218.0.0 - 196.219.255.255

organisation: ORG-TD2-AFRINIC
org-name: TE Data
org-type: LIR
country: EG
address: TE Data,
address: Smart Village, Building A11-B90, Alex Desert Road,
address: 28 Km
address: 6th October 12577
phone: +20233320700
fax-no: +20233320800
admin-c: MH7-AFRINIC
admin-c: IS4100-AFRINIC
tech-c: MH7-AFRINIC
tech-c: IS4100-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: GEGA-MNT
mnt-by: AFRINIC-HM-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR1-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: +202 33320700
fax-no: +202 33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
abuse-mailbox: abuse@tedata.net
nic-hdl: TDCR2-AFRINIC
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 54.85.173.15 from popov-roman.com

Hi,

The IP 54.85.173.15 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 54.85.173.15:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 54.85.173.15"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=54.85.173.15?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 54.72.0.0 - 54.95.255.255
CIDR: 54.72.0.0/13, 54.80.0.0/12
NetName: AMAZON-2011L
NetHandle: NET-54-72-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS16509
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2013-11-25
Updated: 2013-11-25
Ref: http://whois.arin.net/rest/net/NET-54-72-0-0-1

OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2014-10-20
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: http://whois.arin.net/rest/org/AT-88-Z

OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-266-4064
OrgAbuseEmail: abuse@amazonaws.com
OrgAbuseRef: http://whois.arin.net/rest/poc/AEA8-ARIN

OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-266-4064
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: http://whois.arin.net/rest/poc/ANO24-ARIN

OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-266-2187
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: http://whois.arin.net/rest/poc/AANO1-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 118.175.5.100 from popov-roman.com

Hi,

The IP 118.175.5.100 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 118.175.5.100:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '118.175.5.96 - 118.175.5.103'

inetnum: 118.175.5.96 - 118.175.5.103
netname: UdonPitthayanukoon-school
notify: mail_abuse@tot.co.th
descr: Educational Institue, Udonthani province
descr: e-scientific Virtual Classroom
descr: Ministry of Education, Royal Thai Government
country: th
admin-c: pa82-ap
tech-c: ag100-ap
status: assigned non-portable
mnt-by: MAINT-TH-TOT
changed: mail_abuse@tot.co.th 20090908
source: APNIC

person: Apipol Gunabhibal
nic-hdl: AG100-AP
e-mail: apipolg@tot.co.th
address: TOT Public Company Limited
address: 89/2 Moo 3 Chaengwattana Rd, Laksi, Bangkok 10210 THAILAND
phone: +66-2574-9178
fax-no: +66-2574-8401
country: TH
changed: apipolg@tot.co.th 20110215
mnt-by: MAINT-TH-TOT
source: APNIC

person: Pansak Arpakajorn
nic-hdl: PA82-AP
e-mail: abuse@totisp.net
address: TOT Public Company Limited
address: 89/2 Moo 3 Chaengwattana Rd, Laksi,Bangkok 10210 THAILAND
phone: +66-2574-9178
fax-no: +66-2574-8401
country: TH
changed: suraches@tot.co.th 20050720
changed: ag100.ap@gmail.com 20100507
mnt-by: MAINT-TH-TOT
source: APNIC

% Information related to '118.175.5.0/24AS9737'

route: 118.175.5.0/24
descr: TOT Public Company Limited
origin: AS9737
mnt-by: MAINT-TH-TOT
changed: worawat@totbb.com 20120209
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

Thursday, 3 September 2015

[Fail2Ban] SSH: banned 64.15.155.71 from popov-roman.com

Hi,

The IP 64.15.155.71 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 64.15.155.71:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 64.15.155.71"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=64.15.155.71?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

iWeb Dedicated CL IWEB-CL-T014-01SH (NET-64-15-155-64-1) 64.15.155.64 - 64.15.155.95
iWeb Technologies Inc. IWEB-BLK-02 (NET-64-15-128-0-1) 64.15.128.0 - 64.15.159.255

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 71.162.9.25 from popov-roman.com

Hi,

The IP 71.162.9.25 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 71.162.9.25:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 71.162.9.25"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=71.162.9.25?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

, PROSOFT TECHNOLOGIES IN FTTP (NET-71-162-9-16-1) 71.162.9.16 - 71.162.9.31
Verizon Online LLC VIS-BLOCK (NET-71-161-224-0-1) 71.161.224.0 - 71.168.63.255

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 123.49.62.231 from herbalyzer.com

Hi,

The IP 123.49.62.231 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 123.49.62.231:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '123.49.0.0 - 123.49.63.255'

inetnum: 123.49.0.0 - 123.49.63.255
netname: BTTB
descr: BTTB,
descr: Mogbazar, Dhaka, Bangladesh
country: BD
admin-c: HA128-AP
tech-c: RM324-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-BD-BTTB
mnt-routes: MAINT-BD-BTTB
status: ALLOCATED PORTABLE
remarks: ----------------------------------------------------------
remarks: This object can only be modified by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your organisation
remarks: account name in the subject line.
remarks: ----------------------------------------------------------
mnt-irt: IRT-BTTB-BD
changed: hm-changed@apnic.net
source: APNIC

irt: IRT-BTTB-BD
address: Data and Internet Service
address: Bangladesh Telecommunications Company Ltd
address: Moghbazar Telephone Bhaban, Dhaka
e-mail: irt@btcl.net.bd
abuse-mailbox: irt@btcl.net.bd
admin-c: HA128-AP
tech-c: MR209-AP
auth: # Filtered
mnt-by: MAINT-BD-BTTB
changed: irt@btcl.net.bd 20110102
source: APNIC

person: Habibur Rahman AKM
nic-hdl: HA128-AP
e-mail: detelex@btcl.net.bd
address: Data and Internet Service
address: Bangladesh Telecommunications Company Ltd
address: Moghbazar Telephone Bhaban, Dhaka
phone: +880-1550151169
fax-no: +880-2-8360699
country: BD
changed: detelex@btcl.net.bd 20081007
mnt-by: MAINT-BD-BTTB
source: APNIC

person: Ruhul Quddus Mohammad
nic-hdl: RM324-AP
e-mail: rumi@bttb.net.bd
address: Data and Internet service
address: BTTB Moghbazar compound
address: Dhaka
phone: +880-152000497
fax-no: +880-2-9344455
country: BD
changed: rumi@bttb.net.bd 20051012
mnt-by: MAINT-BD-BTTB
source: APNIC

% Information related to '123.49.0.0/18AS17494'

route: 123.49.0.0/18
descr: Bangladesh Telecommunications Company Ltd. (BTCL)
origin: AS17494
country: BD
mnt-by: MAINT-BD-BTTB
changed: detelex@btcl.net.bd 20091202
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 1.233.92.197 from popov-roman.com

Hi,

The IP 1.233.92.197 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 1.233.92.197:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.nic.or.kr]
[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query : 1.233.92.197

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 1.224.0.0 - 1.233.205.255 (/13+/16+/17+/18+/21+/22+/23)
ì„œë¹„ìŠ¤ëª… : broadNnet
ê¸°ê´€ëª… : ì—ìŠ¤ì¼€ì´ë¸Œë¡œë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG3930
ì£¼ì†Œ : ì„œìš¸íŠ¹ë³„ì&lsqauo;œ ì¤'êµ¬ í‡´ê³„ë¡œ 24, SKë‚¨ì‚°ê·¸ë¦°ë¹Œë"© (ë‚¨ëŒ€ë¬¸ë¡œ5ê°€)
ìš°íŽ¸ë²ˆí˜¸ : 100-711
í• ë&lsqauo;¹ì¼ìž : 20100726

[ IPv4ì£¼ì†Œ ì±…ìž„ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com

[ IPv4ì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com

[ ìŠ¤íŒ¸ í•´í‚¹ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : abuse@skbroadband.com

--------------------------------------------------------------------------------

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 1.233.80.0 - 1.233.95.255 (/20)
ë„¤íŠ¸ì›Œí¬ ì´ë¦„ : HANANET-INFRA
ê¸°ê´€ëª… : ì—ìŠ¤ì¼€ì´ë¸Œë¡œë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG3930
ì£¼ì†Œ : ì„œìš¸íŠ¹ë³„ì&lsqauo;œ ì¤'êµ¬ í‡´ê³„ë¡œ 24, SKë‚¨ì‚°ê·¸ë¦°ë¹Œë"© (ë‚¨ëŒ€ë¬¸ë¡œ5ê°€)
ìš°íŽ¸ë²ˆí˜¸ : 100-711
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20110208
ê³µê°œì—¬ë¶€ : Y

[ ë„¤íŠ¸ì›Œí¬ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ê´€ë¦¬ìž
ê¸°ê´€ëª… : broadNnet
ì£¼ì†Œ : ì„œìš¸íŠ¹ë³„ì&lsqauo;œ ì¤'êµ¬ í‡´ê³„ë¡œ 24, SKë‚¨ì‚°ê·¸ë¦°ë¹Œë"© (ë‚¨ëŒ€ë¬¸ë¡œ5ê°€)
ìš°íŽ¸ë²ˆí˜¸ : 100-711
ì „í™"ë²ˆí˜¸ : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 1.224.0.0 - 1.233.205.255 (/13+/16+/17+/18+/21+/22+/23)
Service Name : broadNnet
Organization Name : SK Broadband Co Ltd
Organization ID : ORG3930
Address : 267, Seoul Jung-gu Toegye-ro
Zip Code : 100-711
Registration Date : 20100726

[ Admin Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Tech Contact Information ]
Name : IP manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

[ Network Abuse Contact Information ]
Name : manager
Phone : +82-2-106-2
E-Mail : abuse@skbroadband.com

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 1.233.80.0 - 1.233.95.255 (/20)
Network Name : HANANET-INFRA
Organization Name : SK Broadband Co Ltd
Organization ID : ORG3930
Address : 267, Seoul Jung-gu Toegye-ro
Zip Code : 100-711
Registration Date : 20110208
Publishes : Y

[ Technical Contact Information ]
Name : IP manager
Organization Name : SK Broadband Co Ltd
Address : 267, Seoul Jung-gu Toegye-ro
Zip Code : 100-711
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com

- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 14.23.153.98 from popov-roman.com

Hi,

The IP 14.23.153.98 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 14.23.153.98:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '14.16.0.0 - 14.31.255.255'

inetnum: 14.16.0.0 - 14.31.255.255
netname: CHINANET-GD
descr: CHINANET Guangdong province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: IC83-AP
status: ALLOCATED PORTABLE
notify: abuse_gdnoc@189.cn
remarks: service provider
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: To report network abuse, please contact the IRT
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: For assistance, please contact the APNIC Helpdesk
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-GD
source: APNIC
mnt-irt: IRT-CHINANET-CN
changed: hm-changed@apnic.net 20100906

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
changed: anti-spam@ns.chinanet.cn.net 20101115
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: gdnoc_HLWI@189.cn
address: NO.18,RO. ZHONGSHANER,YUEXIU DISTRIC,GUANGZHOU
phone: +86-20-87189274
fax-no: +86-20-87189274
country: CN
changed: ipadm@189.cn 20110418
changed: zhengzm@gsta.com 20140922
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse_gdnoc@189.cn
abuse-mailbox: antispam_gdnoc@189.cn
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.87.111.108 from herbalyzer.com

Hi,

The IP 218.87.111.108 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 218.87.111.108:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.87.0.0 - 218.87.255.255'

inetnum: 218.87.0.0 - 218.87.255.255
netname: CHINANET-JX
country: CN
descr: CHINANET jiangxi province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
admin-c: CH93-AP
tech-c: JN113-AP
status: ALLOCATED NON-PORTABLE
changed: hostmaster@cn.net 20020829
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-IP-WWF
source: APNIC

role: JXDCB NET
address: Jiangxi telecom network operation support department
address: No.2009, Beijing East Road , nanchangÃƒÂ¯Ã‚Â¼Ã‚ÂŒjiangxi province
country: CN
phone: +86 79186600000
e-mail: wzzx_2013@189.cn
remarks: send spam reports to wzzx_2013@189.cn
remarks: and abuse reports to wzzx_2013@189.cn
remarks: http://www.online.jx.cn
admin-c: XY1-AP
tech-c: WZ1-CN
tech-c: WW49-AP
nic-hdl: JN113-AP
notify: wzzx_2013@189.cn
mnt-by: MAINT-IP-WWF
changed: hm-changed@apnic.net 20020812
changed: chenyiq@gsta.com 20130221
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 113.199.73.15 from herbalyzer.com

Hi,

The IP 113.199.73.15 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 113.199.73.15:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.nic.or.kr]
[Querying whois.nic.or.kr]
[whois.nic.or.kr]
query : 113.199.73.15

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 113.199.0.0 - 113.199.127.255 (/17)
ì„œë¹„ìŠ¤ëª… : DITIZONE
ê¸°ê´€ëª… : ì£¼ì&lsqauo;íšŒì‚¬ ì•„ë¦„ë°©ì†¡ë„¤íŠ¸ì›Œí¬
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG235952
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ì„±ë‚¨ëŒ€ë¡œ343ë²ˆê¸¸ 14 (ì •ìžë™)
ìš°íŽ¸ë²ˆí˜¸ : 463-847
í• ë&lsqauo;¹ì¼ìž : 20081127

[ IPv4ì£¼ì†Œ ì±…ìž„ìž ì •ë³´ ]
ì´ë¦„ : ê¹€ë³'ë°°
ì „í™"ë²ˆí˜¸ : +82-70-8145-1031
ì „ìžìš°íŽ¸ : bbkim@abn.co.kr

[ IPv4ì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ê¹€ë³'ë°°
ì „í™"ë²ˆí˜¸ : +82-70-8145-1031
ì „ìžìš°íŽ¸ : bbkim@abn.co.kr

[ ìŠ¤íŒ¸ í•´í‚¹ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ê¹€ë³'ë°°
ì „í™"ë²ˆí˜¸ : +82-70-8145-1031
ì „ìžìš°íŽ¸ : bbkim@abn.co.kr

--------------------------------------------------------------------------------

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 113.199.64.0 - 113.199.79.255 (/20)
ë„¤íŠ¸ì›Œí¬ ì´ë¦„ : PON_2
ê¸°ê´€ëª… : (ì£¼)ì•„ë¦„ë°©ì†¡ë„¤íŠ¸ì›Œí¬
ê¸°ê´€ê³ ìœ ë²ˆí˜¸ : ORG885971
ì£¼ì†Œ : ê²½ê¸° ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ì •ìžë™ 23-3
ìš°íŽ¸ë²ˆí˜¸ : 463-847
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20110818
ê³µê°œì—¬ë¶€ : Y

[ ë„¤íŠ¸ì›Œí¬ ë&lsqauo;´ë&lsqauo;¹ìž ì •ë³´ ]
ì´ë¦„ : ì„œíƒœì‚°
ê¸°ê´€ëª… : (ì£¼)ì•„ë¦„ë°©ì†¡ë„¤íŠ¸ì›Œí¬
ì£¼ì†Œ : ê²½ê¸° ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ì •ìžë™ 23-3
ìš°íŽ¸ë²ˆí˜¸ : 463-847
ì „í™"ë²ˆí˜¸ : +82-70-8145-1027
ì „ìžìš°íŽ¸ : westtaesan@abn.co.kr

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 113.199.0.0 - 113.199.127.255 (/17)
Service Name : DITIZONE
Organization Name : ABN
Organization ID : ORG235952
Address : 23-3, Gyeonggi-do Bundang-gu, Seongnam-si Seongnam-daero 343beon-gil
Zip Code : 463-847
Registration Date : 20081127

[ Admin Contact Information ]
Name : Byung-Bae Kim
Phone : +82-70-8145-1031
E-Mail : bbkim@abn.co.kr

[ Tech Contact Information ]
Name : Byung-Bae Kim
Phone : +82-70-8145-1031
E-Mail : bbkim@abn.co.kr

[ Network Abuse Contact Information ]
Name : Byung-Bae Kim
Phone : +82-70-8145-1031
E-Mail : bbkim@abn.co.kr

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 113.199.64.0 - 113.199.79.255 (/20)
Network Name : PON_2
Organization Name : ABN
Organization ID : ORG885971
Address : 23-3, Jeongja-dong Bundang-gu, Seongnam-si Gyeonggi-do
Zip Code : 463-847
Registration Date : 20110818
Publishes : Y

[ Technical Contact Information ]
Name : T.S SEO
Organization Name : ABN
Address : 23-3, Jeongja-dong Bundang-gu, Seongnam-si Gyeonggi-do
Zip Code : 463-847
Phone : +82-70-8145-1027
E-Mail : westtaesan@abn.co.kr

- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban