Banned hacker's IPs

Monday, 16 October 2017

[Fail2Ban] SSH: banned 183.136.223.138 from popov-roman.com

Hi,

The IP 183.136.223.138 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 183.136.223.138:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '183.136.220.0 - 183.136.223.255'

% Abuse contact for '183.136.220.0 - 183.136.223.255' is 'antispam@dcb.hz.zj.cn'

inetnum: 183.136.220.0 - 183.136.223.255
netname: CHINANET-ZJ-HZ
country: CN
descr: CHINANET-ZJ Hangzhou node network
descr: Zhejiang Telecom
admin-c: CZ4-AP
tech-c: CH122-AP
mnt-irt: IRT-CHINANET-ZJ
status: ALLOCATED NON-PORTABLE
changed: zjnoc_ip_4@163.com 20130131
mnt-by: MAINT-CHINANET-ZJ
mnt-lower: MAINT-CN-CHINANET-ZJ-HZ
source: APNIC

irt: IRT-CHINANET-ZJ
address: Hangzhou, 288 fucun Road, China
e-mail: lfliu@pubinfo.com.cn
abuse-mailbox: antispam@dcb.hz.zj.cn
admin-c: CZ61-AP
tech-c: CZ61-AP
auth: # Filtered
mnt-by: MAINT-CHINANET-ZJ
changed: auto-dbm@dcb.hz.zj.cn 20101129
source: APNIC

role: CHINANET-ZJ Hangzhou
address: No.352 Tiyuchang Road,Hangzhou,Zhejiang.310003
country: CN
phone: +86-571-85157929
fax-no: +86-571-85102776
e-mail: anti_spam@mail.hz.zj.cn
remarks: send spam reports to anti_spam@mail.hz.zj.cn
remarks: and abuse reports to anti_spam@mail.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CH54-AP
tech-c: CH54-AP
nic-hdl: CH122-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
changed: hm-changed@apnic.net 20111114

role: CHINANET ZHEJIANG
address: No. 257 Qingjiang Road, Hangzhou, Zhejiang.310066
country: CN
phone: +86-571-86821752
fax-no: +86-571-86988329
e-mail: antispam@dcb.hz.zj.cn
remarks: send spam reports to antispam@dcb.hz.zj.cn
remarks: and abuse reports to antispam@dcb.hz.zj.cn
remarks: Please include detailed information and times in UTC
admin-c: CZ61-AP
tech-c: CZ61-AP
nic-hdl: CZ4-AP
mnt-by: MAINT-CHINANET-ZJ
changed: hjh@dcb.hz.zj.cn 20050914
source: APNIC
changed: hm-changed@apnic.net 20111114

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 211.142.173.107 from popov-roman.com

Hi,

The IP 211.142.173.107 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 211.142.173.107:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '211.142.96.0 - 211.142.207.255'

% Abuse contact for '211.142.96.0 - 211.142.207.255' is 'abuse@chinamobile.com'

inetnum: 211.142.96.0 - 211.142.207.255
netname: CMNET-henan
descr: China Mobile Communications Corporation - henan
country: CN
admin-c: YD122-AP
tech-c: YD122-AP
mnt-by: MAINT-CN-CMCC-HENAN
changed: hostmaster@chinamobile.com 20120315
status: ALLOCATED NON-PORTABLE
mnt-irt: IRT-CHINAMOBILE-CN
source: APNIC

irt: IRT-CHINAMOBILE-CN
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail: abuse@chinamobile.com
abuse-mailbox: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
auth: # Filtered
mnt-by: MAINT-CN-CMCC
changed: abuse@chinamobile.com 20141118
source: APNIC

person: yan deng
nic-hdl: YD122-AP
e-mail: dengyan@ha.chinamobile.com
address: No.10 Minhang Road, Zhengzhou,China
phone: +86-13938871221
fax-no: +86-0371--5939333
country: cn
changed: dengyan@ha.chinamobile.com 20041008
mnt-by: MAINT-CN-CMCC-HENAN
source: APNIC

% Information related to '211.142.128.0/17AS9808'

route: 211.142.128.0/17
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
changed: hostmaster@chinamobile.com 20120215
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 80.80.108.157 from popov-roman.com

Hi,

The IP 80.80.108.157 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 80.80.108.157:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '80.80.105.0 - 80.80.111.255'

% Abuse contact for '80.80.105.0 - 80.80.111.255' is 'abuse@mtu.ru'

inetnum: 80.80.105.0 - 80.80.111.255
netname: CTSRND-NET
descr: IP address space for Digital Telephone Lines Ltd
descr: corporative Network, Rostov-on-Don, Russia
country: RU
remarks: rev-srv: ns.aaanet.ru
admin-c: MT12425-RIPE
admin-c: MTS134-RIPE
tech-c: MT12425-RIPE
tech-c: MTS134-RIPE
status: ASSIGNED PA
mnt-by: KUBANGSM-MNT
mnt-lower: KUBANGSM-MNT
mnt-routes: KUBANGSM-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2015-02-26T06:55:33Z
source: RIPE # Filtered
remarks: rev-srv attribute deprecated by RIPE NCC on 02/09/2009

person: Mobile TeleSystem
remarks: OJSC Mobile TeleSystems Branch Macro-region South
address: 61, Gimnazicheskaya str., Krasnodar, Russia, 350000
phone: +78612460116
fax-no: +78612671535
nic-hdl: MT12425-RIPE
mnt-by: KUBANGSM-MNT
created: 2012-12-12T07:54:10Z
last-modified: 2012-12-12T11:38:14Z
source: RIPE # Filtered

person: Mobile TeleSystems
remarks: OJSC Mobile TeleSystems Branch Macro-region South
address: 61, Gimnazicheskaya str., Krasnodar, Russia, 350000
phone: +78612460116
fax-no: +78612671535
nic-hdl: MTS134-RIPE
mnt-by: KUBANGSM-MNT
abuse-mailbox: lir-south-broadband@mts.ru
created: 2015-02-16T07:21:31Z
last-modified: 2015-02-16T07:23:19Z
source: RIPE # Filtered

% Information related to '80.80.96.0/19AS60496'

route: 80.80.96.0/19
descr: RU-CTSRND-NETWORK
origin: AS60496
mnt-by: KUBANGSM-MNT
created: 2013-07-18T12:52:07Z
last-modified: 2013-07-18T12:52:07Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 108.14.52.60 from popov-roman.com

Hi,

The IP 108.14.52.60 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 108.14.52.60:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 108.14.52.60"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=108.14.52.60?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 108.0.0.0 - 108.57.255.255
CIDR: 108.0.0.0/11, 108.56.0.0/15, 108.48.0.0/13, 108.32.0.0/12
NetName: VIS-BLOCK
NetHandle: NET-108-0-0-0-1
Parent: NET108 (NET-108-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: MCI Communications Services, Inc. d/b/a Verizon Business (MCICS)
RegDate: 2009-06-05
Updated: 2016-08-18
Ref: https://whois.arin.net/rest/net/NET-108-0-0-0-1

OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2017-01-28
Ref: https://whois.arin.net/rest/org/MCICS

OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: https://whois.arin.net/rest/poc/SWIPP9-ARIN

OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE3-ARIN

OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: https://whois.arin.net/rest/poc/SWIPP-ARIN

OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: https://whois.arin.net/rest/poc/OA12-ARIN

RAbuseHandle: ABUSE5603-ARIN
RAbuseName: Abuse
RAbusePhone: +1-800-900-0241
RAbuseEmail: abuse@verizon.net
RAbuseRef: https://whois.arin.net/rest/poc/ABUSE5603-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 187.52.206.180 from popov-roman.com

Hi,

The IP 187.52.206.180 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 187.52.206.180:

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2017-10-16 18:49:29 (BRST -02:00)

% Permission denied. For more information, contact abuse@registro.br

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 90.54.113.197 from popov-roman.com

Hi,

The IP 90.54.113.197 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 90.54.113.197:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '90.54.112.0 - 90.54.119.0'

% Abuse contact for '90.54.112.0 - 90.54.119.0' is 'gestionip.ft@orange.com'

inetnum: 90.54.112.0 - 90.54.119.0
netname: IP2000-ADSL-BAS
descr: POP BAY
country: FR
admin-c: WITR1-RIPE
tech-c: WITR1-RIPE
status: ASSIGNED PA
remarks: for hacking, spamming or security problems send mail to
remarks: abuse@orange.fr
mnt-by: FT-BRX
created: 2017-08-29T13:10:43Z
last-modified: 2017-08-29T13:10:43Z
source: RIPE

role: Wanadoo France Technical Role
address: FRANCE TELECOM/SCR
address: 48 rue Camille Desmoulins
address: 92791 ISSY LES MOULINEAUX CEDEX 9
address: FR
phone: +33 1 58 88 50 00
abuse-mailbox: abuse@orange.fr
admin-c: BRX1-RIPE
tech-c: BRX1-RIPE
nic-hdl: WITR1-RIPE
mnt-by: FT-BRX
created: 2001-12-04T17:57:08Z
last-modified: 2013-07-16T14:09:50Z
source: RIPE # Filtered

% Information related to '90.54.0.0/16AS3215'

route: 90.54.0.0/16
descr: France Telecom IP2000-ADSL-BAS
origin: AS3215
mnt-by: FT-BRX
created: 2012-12-11T10:10:38Z
last-modified: 2012-12-11T10:10:38Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 123.196.120.135 from popov-roman.com

Hi,

The IP 123.196.120.135 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 123.196.120.135:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '123.196.112.0 - 123.196.127.255'

% Abuse contact for '123.196.112.0 - 123.196.127.255' is 'ipas@cnnic.cn'

inetnum: 123.196.112.0 - 123.196.127.255
netname: unipower
descr: beijing huaxia unipower network co., LTD
descr: WanQuanSi Beijing fengtai district no. 357
descr: Fengtai District,Beijing,P.R.C
country: CN
admin-c: SW954-AP
tech-c: SW954-AP
status: ASSIGNED NON-PORTABLE
changed: ipas@cnnic.net.cn 20121008
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: Simon Wang
nic-hdl: SW954-AP
address: 16/F Tengda Building,168 Xizhimenwai Str.,Haidian District,Beijing,P.R.C
country: CN
phone: +86-010-65661868
fax-no: +86-010-65661868
e-mail: simon@ipn.cn
changed: ipas@cnnic.cn 20080203
mnt-by: MAINT-CNNIC-AP
source: APNIC

% Information related to '123.196.0.0/16AS4837'

route: 123.196.0.0/16
descr: CNC Group CHINA169 Sichuan Province Network
descr: Addresses from CNNIC(WSNET)
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20070402
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 95.27.235.10 from herbalyzer.com

Hi,

The IP 95.27.235.10 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 95.27.235.10:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '95.24.0.0 - 95.30.255.255'

% Abuse contact for '95.24.0.0 - 95.30.255.255' is 'abuse@beeline.ru'

inetnum: 95.24.0.0 - 95.30.255.255
netname: BEELINE-BROADBAND
descr: Dynamic IP Pool for broadband customers
country: RU
admin-c: CORB1-RIPE
tech-c: CORB1-RIPE
status: ASSIGNED PA
mnt-by: RU-CORBINA-MNT
created: 2010-05-12T10:14:50Z
last-modified: 2011-10-24T07:14:07Z
source: RIPE

role: CORBINA TELECOM Network Operations
address: CORBINA TELECOM/Internet Network Operations
address: Kozhevnicheskij proezd, 1
address: Moscow, Russia
address: 115114
phone: +7 495 755 5648
fax-no: +7 495 787 1990
remarks: -----------------------------------------------------------
remarks: Feel free to contact Corbina Telecom NOC to
remarks: resolve networking problems related to Corbina
remarks: -----------------------------------------------------------
remarks: User support, general questions: support@corbina.net
remarks: Routing, peering, security: ipnoc@corbina.net
remarks: Report spam and abuse: abuse@beeline.ru
remarks: Mail and news: postmaster@corbina.net
remarks: DNS: hostmaster@corbina.net
remarks: -----------------------------------------------------------
admin-c: AK644-RIPE
tech-c: MCS91-RIPE
nic-hdl: CORB1-RIPE
mnt-by: RU-CORBINA-MNT
abuse-mailbox: abuse@beeline.ru
created: 1970-01-01T00:00:00Z
last-modified: 2016-02-16T09:47:15Z
source: RIPE # Filtered

% Information related to '95.27.235.0/24AS8402'

route: 95.27.235.0/24
descr: RU-CORBINA-BROADBAND-POOL1
origin: AS8402
mnt-by: RU-CORBINA-MNT
created: 2009-10-07T16:00:13Z
last-modified: 2011-04-28T09:04:55Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.90 (BLAARKOP)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 115.133.23.154 from popov-roman.com

Hi,

The IP 115.133.23.154 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 115.133.23.154:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '115.133.0.0 - 115.133.255.255'

% Abuse contact for '115.133.0.0 - 115.133.255.255' is 'abuse@tm.com.my'

inetnum: 115.133.0.0 - 115.133.255.255
netname: ADSL-STREAMYX
descr: TMNST
country: MY
admin-c: EAK2-AP
tech-c: EAK2-AP
mnt-by: MAINT-AP-STREAMYX
mnt-lower: MAINT-AP-STREAMYX
mnt-routes: MAINT-AP-STREAMYX
mnt-irt: IRT-TMNST-MY
status: ASSIGNED NON-PORTABLE
notify: ssc@tmnet.com.my
changed: fuwaizah@tm.com.my 20130404
changed: hm-changed@apnic.net 20140515
source: APNIC

irt: IRT-TMNST-MY
address: TELEKOM MALAYSIA BERHAD
address: TM BRICKFIELD
address: Jalan Tun Sambanthan
address: 43200 KUALA LUMPUR
e-mail: ipmc_ipcore@tm.com.my
abuse-mailbox: abuse@tm.com.my
admin-c: TIA7-AP
tech-c: TIA7-AP
auth: # Filtered
mnt-by: MAINT-AP-STREAMYX
changed: abuse@tm.com.my 20140211
source: APNIC

person: EMRAN AHMED KAMAL
nic-hdl: EAK2-AP
e-mail: abuse@tm.com.my
address: Telekom Malaysia
address: Jalan Pantai Baru, Kuala Lumpur.
phone: +6-03-83185434
fax-no: +6-03-22402126
country: MY
changed: fuwaizah@tm.net.my 20080918
mnt-by: TM-NET-AP
abuse-mailbox: abuse@tm.com.my
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 180.168.210.37 from popov-roman.com

Hi,

The IP 180.168.210.37 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 180.168.210.37:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '180.160.0.0 - 180.175.255.255'

% Abuse contact for '180.160.0.0 - 180.175.255.255' is 'anti-spam@ns.chinanet.cn.net'

inetnum: 180.160.0.0 - 180.175.255.255
netname: CHINANET-SH
descr: CHINANET SHANGHAI PROVINCE NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
admin-c: WWQ4-AP
tech-c: WWQ4-AP
country: CN
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-SH
source: APNIC
mnt-irt: IRT-CHINANET-CN
changed: hm-changed@apnic.net 20090821

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
changed: anti-spam@ns.chinanet.cn.net 20101115
source: APNIC

person: Weng Wen Qian
address: Room 2405,357 Songlin Road,Shanghai 200122
country: CN
phone: +86-21-68405784
fax-no: +86-21-50623458
e-mail: wengwq@online.sh.cn
nic-hdl: WWQ4-AP
mnt-by: MAINT-CHINANET-SH
changed: ip-admin@mail.online.sh.cn 20050403
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 207.244.70.35 from popov-roman.com

Hi,

The IP 207.244.70.35 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 207.244.70.35:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 207.244.70.35"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=207.244.70.35?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 207.244.64.0 - 207.244.127.255
CIDR: 207.244.64.0/18
NetName: LEASEWEB-USA-WDC-01
NetHandle: NET-207-244-64-0-1
Parent: NET207 (NET-207-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS30633
Organization: Leaseweb USA, Inc. (LU)
RegDate: 1996-11-15
Updated: 2016-06-06
Comment: Please send all abuse notifications to the following email address: abuse@us.leaseweb.com. To ensure proper processing of your abuse notification, please visit the website www.leaseweb.com/abuse for notification requirements. All police and other government agency requests must be sent to subpoenas@us.leaseweb.com.
Ref: https://whois.arin.net/rest/net/NET-207-244-64-0-1

OrgName: Leaseweb USA, Inc.
OrgId: LU
Address: 9480 Innovation Dr
City: Manassas
StateProv: VA
PostalCode: 20109
Country: US
RegDate: 2010-09-13
Updated: 2017-01-28
Comment: www.leaseweb.com
Ref: https://whois.arin.net/rest/org/LU

OrgNOCHandle: LEASE-ARIN
OrgNOCName: Leaseweb ARIN
OrgNOCPhone: +1-571-814-3777
OrgNOCEmail: arin@us.leaseweb.com
OrgNOCRef: https://whois.arin.net/rest/poc/LEASE-ARIN

OrgTechHandle: LEASE-ARIN
OrgTechName: Leaseweb ARIN
OrgTechPhone: +1-571-814-3777
OrgTechEmail: arin@us.leaseweb.com
OrgTechRef: https://whois.arin.net/rest/poc/LEASE-ARIN

OrgAbuseHandle: LUAD3-ARIN
OrgAbuseName: Leaseweb US abuse dept
OrgAbusePhone: +1-571-814-3777
OrgAbuseEmail: abuse@us.leaseweb.com
OrgAbuseRef: https://whois.arin.net/rest/poc/LUAD3-ARIN

RAbuseHandle: LUAD3-ARIN
RAbuseName: Leaseweb US abuse dept
RAbusePhone: +1-571-814-3777
RAbuseEmail: abuse@us.leaseweb.com
RAbuseRef: https://whois.arin.net/rest/poc/LUAD3-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 165.84.191.236 from popov-roman.com

Hi,

The IP 165.84.191.236 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 165.84.191.236:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '165.84.128.0 - 165.84.191.255'

% Abuse contact for '165.84.128.0 - 165.84.191.255' is 'abuse@hkbn.net'

inetnum: 165.84.128.0 - 165.84.191.255
netname: HKBN-HK
descr: Hong Kong Broadband Network Ltd
descr: 15/F Trans Asia Centre
descr: 18 Kin Hong Street
country: HK
org: ORG-HKBN1-AP
admin-c: HKBN-HK
tech-c: HKBN-HK
mnt-by: APNIC-HM
mnt-routes: MAINT-HK-HKBN
mnt-irt: IRT-HKBN-HK
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
changed: hm-changed@apnic.net 20160108
changed: hm-changed@apnic.net 20170830
source: APNIC

irt: IRT-HKBN-HK
address: 15/F Trans Asia Centre
address: 18 Kin Hong Street, Kwai Chung
address: N.T.
e-mail: hostmaster@hkbn.com.hk
abuse-mailbox: abuse@hkbn.net
admin-c: HKBN-HK
tech-c: HKBN-HK
auth: # Filtered
mnt-by: MAINT-HK-HKBN
changed: hostmaster@hkbn.com.hk 20120516
source: APNIC

organisation: ORG-HKBN1-AP
org-name: Hong Kong Broadband Network Ltd
country: HK
address: 15/F Trans Asia Centre
address: 18 Kin Hong Street
phone: +852-3999-6060
fax-no: +852-3999-7774
e-mail: nocsn@hkbn.com.hk
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
changed: hm-changed@apnic.net 20170821
source: APNIC

person: HKBN Hostmaster
address: 15/F Trans Asia Centre
address: 18 Kin Hong Street, Kwai Chung
address: N.T.
country: HK
phone: +852-3999-3888
fax-no: +852-8167-7020
e-mail: hostmaster@hkbn.com.hk
nic-hdl: HKBN-HK
abuse-mailbox: abuse@hkbn.com.hk
mnt-by: MAINT-HK-HKBN
changed: hostmaster@hkbn.com.hk 20130327
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 123.207.159.237 from popov-roman.com

Hi,

The IP 123.207.159.237 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 123.207.159.237:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '123.206.0.0 - 123.207.255.255'

% Abuse contact for '123.206.0.0 - 123.207.255.255' is 'ipas@cnnic.cn'

inetnum: 123.206.0.0 - 123.207.255.255
netname: TencentCloud
descr: Tencent cloud computing (Beijing) Co., Ltd.
descr: Floor 6, Yinke Building,38 Haidian St,
descr: Haidian District Beijing
admin-c: JT1125-AP
tech-c: JX1747-AP
country: CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20150129
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: James Tian
address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
address: District of Hi-tech Park, Shenzhen
country: CN
phone: +86-755-86013388-84952
e-mail: harveyduan@tencent.com
nic-hdl: JT1125-AP
changed: ipas@cnnic.cn 20131104
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Jimmy Xiao
address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
address: District of Hi-tech Park, Shenzhen
country: CN
phone: +86-755-86013388-80224
e-mail: harveyduan@tencent.com
nic-hdl: JX1747-AP
changed: ipas@cnnic.cn 20131104
mnt-by: MAINT-CNNIC-AP
source: APNIC

% Information related to '123.206.0.0/15AS45090'

route: 123.206.0.0/15
descr: TencentCloud
descr: Tencent cloud computing (Beijing) Co., Ltd.
country: CN
origin: AS45090
notify: jimmyxiao@tencent.com
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20160121
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 24.78.40.193 from popov-roman.com

Hi,

The IP 24.78.40.193 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 24.78.40.193:

[Querying whois.arin.net]
[Redirected to rwhois.shawcable.net:4321]
[Querying rwhois.shawcable.net]
[rwhois.shawcable.net]
%rwhois V-1.5:003fff:00 rs1so.cg.shawcable.net (by Network Solutions, Inc. V-1.5.9.5)
%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 118.89.23.192 from popov-roman.com

Hi,

The IP 118.89.23.192 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 118.89.23.192:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '118.89.0.0 - 118.89.255.255'

% Abuse contact for '118.89.0.0 - 118.89.255.255' is 'ipas@cnnic.cn'

inetnum: 118.89.0.0 - 118.89.255.255
netname: TencentCloud
descr: Tencent cloud computing (Beijing) Co., Ltd.
descr: Floor 6, Yinke Building,38 Haidian St,
descr: Haidian District Beijing
country: CN
admin-c: JT1125-AP
tech-c: JX1747-AP
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20100511
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20110428
source: APNIC

person: James Tian
address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
address: District of Hi-tech Park, Shenzhen
country: CN
phone: +86-755-86013388-84952
e-mail: harveyduan@tencent.com
nic-hdl: JT1125-AP
changed: ipas@cnnic.cn 20131104
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Jimmy Xiao
address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
address: District of Hi-tech Park, Shenzhen
country: CN
phone: +86-755-86013388-80224
e-mail: harveyduan@tencent.com
nic-hdl: JX1747-AP
changed: ipas@cnnic.cn 20131104
mnt-by: MAINT-CNNIC-AP
source: APNIC

% Information related to '118.89.0.0/16AS45090'

route: 118.89.0.0/16
descr: Shenzhen Tencent Computer Systems Company Limited
country: CN
origin: AS45090
notify: jimmyxiao@tencent.com
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20161019
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 153.120.171.88 from popov-roman.com

Hi,

The IP 153.120.171.88 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 153.120.171.88:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '153.120.0.0 - 153.120.191.255'

% Abuse contact for '153.120.0.0 - 153.120.191.255' is 'hostmaster@nic.ad.jp'

inetnum: 153.120.0.0 - 153.120.191.255
netname: SAKURA-ISHIKARI
descr: SAKURA Internet Inc.
descr: 1-8-14, Minami Honmachi, Chuo-ku, Osaka 541-0054, Japan
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
status: ALLOCATED PORTABLE
remarks: Email address for spam or abuse complaints abuse@sakura.ad.jp
mnt-irt: IRT-JPNIC-JP
mnt-by: MAINT-JPNIC
mnt-lower: MAINT-JPNIC
changed: hm-changed@apnic.net 20130402
source: APNIC

irt: IRT-JPNIC-JP
address: Urbannet-Kanda Bldg 4F, 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047, Japan
e-mail: hostmaster@nic.ad.jp
abuse-mailbox: hostmaster@nic.ad.jp
admin-c: JNIC1-AP
tech-c: JNIC1-AP
auth: # Filtered
mnt-by: MAINT-JPNIC
changed: abuse@apnic.net 20101108
changed: hm-changed@apnic.net 20101111
changed: ip-apnic@nic.ad.jp 20140702
source: APNIC

role: Japan Network Information Center
address: Urbannet-Kanda Bldg 4F
address: 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047,Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: hostmaster@nic.ad.jp
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
changed: hm-changed@apnic.net 20041222
changed: hm-changed@apnic.net 20050324
changed: ip-apnic@nic.ad.jp 20051027
changed: ip-apnic@nic.ad.jp 20120828
source: APNIC

% Information related to '153.120.171.0 - 153.120.171.255'

inetnum: 153.120.171.0 - 153.120.171.255
netname: SAKURA-NET
descr: SAKURA Internet Inc.
country: JP
admin-c: KT749JP
tech-c: JP00072233
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: apnic-ftp@nic.ad.jp 20150125
source: JPNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 185.142.54.30 from popov-roman.com

Hi,

The IP 185.142.54.30 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 185.142.54.30:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '185.142.52.0 - 185.142.55.255'

% Abuse contact for '185.142.52.0 - 185.142.55.255' is 'abuse@mengine.net'

inetnum: 185.142.52.0 - 185.142.55.255
netname: FR-MENGINE-20160307
country: FR
org: ORG-MS405-RIPE
admin-c: MN11064-RIPE
tech-c: MN11064-RIPE
tech-c: ENZO1-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: MENGINE-MNT
mnt-lower: HEXATOM-MNT
mnt-lower: MENGINE-MNT
mnt-routes: HEXATOM-MNT
mnt-routes: NETRIX-MNT
created: 2016-03-07T15:19:51Z
last-modified: 2017-01-14T15:07:54Z
source: RIPE

organisation: ORG-MS405-RIPE
org-name: MENGINE SARL
org-type: LIR
address: 5, rue jussieu
address: 78500
address: Sartrouville
address: FRANCE
phone: +33 (9) 72411600
fax-no: +33 (1) 72551459
admin-c: MN11064-RIPE
tech-c: MN11064-RIPE
abuse-c: AR35641-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: MENGINE-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: MENGINE-MNT
created: 2016-03-04T15:50:12Z
last-modified: 2016-10-16T16:35:43Z
source: RIPE # Filtered

person: Enzo Laroche
address: Neural Cloud
address: 7 Rue Dugommier
address: 44000 Nantes
address: FRANCE
phone: +33.251841090
nic-hdl: ENZO1-RIPE
mnt-by: NCLOUD-MNT
created: 2014-12-17T11:35:11Z
last-modified: 2017-06-26T09:52:17Z
source: RIPE

person: Milano Nicolas
address: 5, rue jussieu
address: 78500
address: Sartrouville
address: FRANCE
phone: +339.72411600
nic-hdl: MN11064-RIPE
mnt-by: MENGINE-MNT
created: 2016-03-04T15:50:11Z
last-modified: 2016-04-10T12:03:19Z
source: RIPE

% Information related to '185.142.52.0/22AS48130'

route: 185.142.52.0/22
descr: MENGINE
origin: AS48130
mnt-by: MENGINE-MNT
created: 2016-04-10T12:17:00Z
last-modified: 2016-04-10T12:17:00Z
source: RIPE

% Information related to '185.142.52.0/22AS62000'

route: 185.142.52.0/22
origin: AS62000
mnt-by: NETRIX-MNT
created: 2017-01-14T15:09:16Z
last-modified: 2017-01-14T15:09:16Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 88.111.5.226 from herbalyzer.com

Hi,

The IP 88.111.5.226 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 88.111.5.226:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '88.108.0.0 - 88.111.255.255'

% Abuse contact for '88.108.0.0 - 88.111.255.255' is 'abuse@talktalkplc.com'

inetnum: 88.108.0.0 - 88.111.255.255
netname: DSL-TISCALI-UK
descr: Tiscali UK Ltd
descr: Milton Keynes
descr: Dynamic DSL
descr: ==========================================================
descr: Concerning abuse and spam ... Email abuse@talktalkplc.com
descr: e-mail to other addresses will not be dealt with.
descr: ==========================================================
country: GB
admin-c: TU935-RIPE
tech-c: TU935-RIPE
status: ASSIGNED PA
mnt-by: TU935-RIPE-MNT
created: 2005-10-11T13:16:40Z
last-modified: 2011-02-23T12:16:02Z
source: RIPE # Filtered

role: TalkTalk Communications Limited
address: Northbank Industrial Estate
address: Irlam
address: Manchester
address: M44 5BL
address: United Kingdom
phone: +44 161 222-2000
remarks: Information: http://www.talktalk.co.uk
remarks: -------------------------------------------------------
remarks: Please report abuse complains to abuse@talktalkplc.com
remarks: e-mail to other addresses will not be dealt with.
remarks: -------------------------------------------------------
org: ORG-TUL3-RIPE
admin-c: MP15294-RIPE
admin-c: RH2381-RIPE
admin-c: RT5719-RIPE
tech-c: MP15294-RIPE
tech-c: RT5719-RIPE
nic-hdl: TU935-RIPE
remarks: Hostmaster Role Account
mnt-by: TU935-RIPE-MNT
created: 2002-09-13T13:01:11Z
last-modified: 2016-09-20T16:27:24Z
source: RIPE # Filtered
abuse-mailbox: abuse@talktalkplc.com

% Information related to '88.104.0.0/13AS9105'

route: 88.104.0.0/13
descr: Tiscali UK Limited
origin: AS9105
mnt-by: TU935-RIPE-MNT
created: 2005-08-05T14:26:55Z
last-modified: 2005-08-05T14:26:55Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 190.48.108.8 from herbalyzer.com

Hi,

The IP 190.48.108.8 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 190.48.108.8:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net

% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2017-10-16 16:33:07 (BRST -02:00)

inetnum: 190.48/16
status: allocated
aut-num: N/A
owner: Telefonica de Argentina
ownerid: AR-TEAR7-LACNIC
responsible: José Luis Pérez Elias
address: AV. ING. HUERGO, 723, GERENCIA DE REQUERIMIENTOS JUDICIALES
address: 1065 - Buenos Aires - CF
country: AR
phone: +54 8102220102 []
owner-c: TEA
tech-c: TEA
abuse-c: TEA
inetrev: 190.48/16
nserver: DNS1.MRSE.COM.AR
nsstat: 20171016 AA
nslastaa: 20171016
nserver: DNS2.MRSE.COM.AR
nsstat: 20171016 AA
nslastaa: 20171016
nserver: DNS3.MRSE.COM.AR
nsstat: 20171016 AA
nslastaa: 20171016
created: 20051118
changed: 20051118

nic-hdl: TEA
person: Telefonica de Argentina
e-mail: tasamail.ar@TELEFONICA.COM
address: AV. ING. HUERGO, 723,
address: 1065 - Capital Federal - BA
country: AR
phone: +54 11 43335000 []
created: 20030618
changed: 20110603

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.139.124.136 from popov-roman.com

Hi,

The IP 61.139.124.136 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 61.139.124.136:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.139.0.0 - 61.139.127.255'

% No abuse contact registered for 61.139.0.0 - 61.139.127.255

inetnum: 61.139.0.0 - 61.139.127.255
netname: CHINANET-SC
descr: CHINANET Sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XS16-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SC
status: ALLOCATED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20000601
changed: hm-changed@apnic.net 20040927
changed: hm-changed@apnic.net 20041126
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

person: Xiaodong Shi
nic-hdl: XS16-AP
e-mail: scipadmin2013@189.cn
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
changed: zhengzm@gsta.com 20131230
mnt-by: MAINT-CHINANET-SC
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.132.29.162 from popov-roman.com

Hi,

The IP 61.132.29.162 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 61.132.29.162:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.132.29.160 - 61.132.29.175'

% Abuse contact for '61.132.29.160 - 61.132.29.175' is 'anti-spam@ns.chinanet.cn.net'

inetnum: 61.132.29.160 - 61.132.29.175
netname: ZHENJIANG-PEOPLE-MID-COURT
descr: Jiangsu Zhenjiang Peoples Intermediate Court
descr: Zhenjiang City
descr: Jiangsu Province
country: CN
admin-c: CH447-AP
tech-c: CW433-AP
changed: ip@jsinfo.net 20021015
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-CHINANET-JS-ZJ
source: APNIC

person: chinanet-js-zj hostmaster
address: No.18,Dianli Road,Zhenjiang 212007
country: CN
phone: +86-511-5235035
fax-no: +86-511-5239877
e-mail: ipzj@pub.zj.jsinfo.net
nic-hdl: CH447-AP
remarks: send anti-spam or abuse reports to abuse@public.zj.js.cn
remarks: or abuse@pub.zj.jsinfo.net
remarks: times in GMT+8
mnt-by: MAINT-CHINANET-JS-ZJ
changed: ip@jsinfo.net 20021211
source: APNIC

person: CHEN WEI
nic-hdl: CW433-AP
e-mail: chenwei157@sohu.com
address: 21# JIEFANG ROAD,ZHENJIANG
phone: +86-511-5319288
country: CN
changed: ip@jsinfo.net 20021015
mnt-by: MAINT-CHINANET-JS-ZJ
source: APNIC

% Information related to '61.132.0.0/17AS23650'

route: 61.132.0.0/17
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 120.63.28.247 from herbalyzer.com

Hi,

The IP 120.63.28.247 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 120.63.28.247:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '120.56.0.0 - 120.63.255.255'

% Abuse contact for '120.56.0.0 - 120.63.255.255' is 'networkabuse@bol.net.in'

inetnum: 120.56.0.0 - 120.63.255.255
netname: MTNL
descr: Mahanagar Telephone Nigam Limited
country: IN
admin-c: AB782-AP
tech-c: SM2089-AP
mnt-irt: IRT-MTNL-IN
mnt-by: MAINT-IN-IRINN
mnt-routes: MAINT-IN-MTNL
mnt-lower: MAINT-IN-MTNL
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20081030
changed: hm-changed@apnic.net 20161214
source: APNIC

irt: IRT-MTNL-IN
address: Jeevan Bharati Building
address: Tower 1, 12th Floor, 124, Connaught Circus, New Delhi
e-mail: dgmitco@bol.net.in
abuse-mailbox: networkabuse@bol.net.in
admin-c: AB782-AP
tech-c: SM2089-AP
auth: # Filtered
mnt-by: MAINT-IN-MTNL
changed: sdenw@bol.net.in 20140214
changed: hm-changed@apnic.net 20161214
changed: dgmitco@bol.net.in 20161214
source: APNIC

role: Senior Manager
address: Mahanagar Doorsanchar Sadan, 5th Floor, 9 CGO Complex, Lodhi Road, New Delhi ,New Delhi,Delhi-110003
country: IN
phone: +91 01124325185
e-mail: mgritco@bol.net.in
admin-c: AB782-AP
tech-c: AB782-AP
nic-hdl: SM2089-AP
mnt-by: MAINT-IN-MTNL
changed: mgritco@bol.net.in 20161213
source: APNIC

person: Amarjeetkaur Bedi
address: Mahanagar Doorsanchar Sadan, 5th Floor, 9 CGO Complex, Lodhi Road, New Delhi ,New Delhi,Delhi-110003
country: IN
phone: +91 01124325185
e-mail: dgmitco@bol.net.in
nic-hdl: AB782-AP
mnt-by: MAINT-IN-MTNL
changed: mgritco@bol.net.in 20161213
source: APNIC

% Information related to '120.63.0.0/16AS17813'

route: 120.63.0.0/16
descr: MTNL Mumbai Route Object
origin: AS17813
mnt-by: MAINT-IN-MTNL
changed: kyjoshi@mtnl.net.in 20101104
changed: hm-changed@apnic.net 20130417
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-US4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 117.57.215.134 from popov-roman.com

Hi,

The IP 117.57.215.134 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 117.57.215.134:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '117.57.0.0 - 117.57.255.255'

% Abuse contact for '117.57.0.0 - 117.57.255.255' is 'anti-spam@ns.chinanet.cn.net'

inetnum: 117.57.0.0 - 117.57.255.255
netname: CHINANET-AH
descr: CHINANET anhui province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: JW89-AP
tech-c: JW89-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-routes: MAINT-CHINANET-AH
mnt-lower: MAINT-CHINANET-AH
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
source: APNIC
mnt-irt: IRT-CHINANET-CN
changed: hm-changed@apnic.net 20070703

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
changed: anti-spam@ns.chinanet.cn.net 20101115
source: APNIC

person: Jinneng Wang
address: 17/F, Postal Building No.120 Changjiang
address: Middle Road, Hefei, Anhui, China
country: CN
phone: +86-551-2659073
fax-no: +86-551-2659287
e-mail: ahdata@189.cn
nic-hdl: JW89-AP
mnt-by: MAINT-CHINANET-AH
changed: wang@mail.hf.ah.cninfo.net 19990818
changed: hm-changed@apnic.net 20140221
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 84.232.126.151 from popov-roman.com

Hi,

The IP 84.232.126.151 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 84.232.126.151:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '84.232.126.0 - 84.232.127.255'

% Abuse contact for '84.232.126.0 - 84.232.127.255' is 'abuse@servihosting.es'

inetnum: 84.232.126.0 - 84.232.127.255
netname: LAZARZA-NET
descr: Andevalo Television S.L.
descr: Local TV and ISP Provider
country: es
admin-c: JVP37-RIPE
tech-c: JVP37-RIPE
status: ASSIGNED PA
mnt-by: SERVIHOSTING-MNT
created: 2006-04-10T16:08:29Z
last-modified: 2006-04-10T16:08:29Z
source: RIPE

person: Julian Vazquez Patricio
address: C/Hospital, 66
address: 21320 El Cerro de Andevalo (Huelva) SPAIN
phone: +34 959911003
fax-no: +34 959567152
nic-hdl: JVP37-RIPE
mnt-by: SERVIHOSTING-MNT
created: 2006-04-10T16:05:55Z
last-modified: 2006-04-10T16:05:55Z
source: RIPE # Filtered

% Information related to '84.232.112.0/20AS29119'

route: 84.232.112.0/20
descr: ServiHosting Networks S.L.
origin: AS29119
mnt-by: SERVIHOSTING-MNT
created: 2011-01-12T00:19:47Z
last-modified: 2011-01-12T00:19:47Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 159.8.81.93 from popov-roman.com

Hi,

The IP 159.8.81.93 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 159.8.81.93:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '159.8.0.0 - 159.8.255.255'

% Abuse contact for '159.8.0.0 - 159.8.255.255' is 'abuse@softlayer.com'

inetnum: 159.8.0.0 - 159.8.255.255
netname: SOFTLAYER-RIPE-4-8
org: ORG-STI12-RIPE
status: LEGACY
mnt-by: RIPE-NCC-LEGACY-MNT
mnt-by: MAINT-SOFTLAYER-TECH-INC
mnt-domains: MAINT-SOFTLAYER-RIPE
mnt-lower: MAINT-SOFTLAYER-RIPE
admin-c: SA8109-RIPE
tech-c: SA8109-RIPE
tech-c: DDR122-RIPE
country: NL
created: 1970-01-01T00:00:00Z
last-modified: 2016-04-14T08:27:20Z
source: RIPE

organisation: ORG-STI12-RIPE
org-name: SoftLayer Technologies, Inc.
org-type: LIR
address: 14001 N.Dallas Parkway,Suite M100
address: 75240
address: Dallas TX
address: UNITED STATES
phone: +12817143714
admin-c: DDR122-RIPE
admin-c: SA8109-RIPE
admin-c: RM12291-RIPE
admin-c: EK2310-RIPE
abuse-c: SLAB
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: MAINT-SOFTLAYER-TECH-INC
abuse-mailbox: abuse@softlayer.com
mnt-by: RIPE-NCC-HM-MNT
mnt-by: MAINT-SOFTLAYER-TECH-INC
created: 2015-01-02T14:40:58Z
last-modified: 2016-12-27T13:01:58Z
source: RIPE # Filtered

person: Dani Roisman
address: 315 Capitol St. Suite 205 Houston, TX 77002
phone: +1-281-714-3714
nic-hdl: DDR122-RIPE
mnt-by: MAINT-SOFTLAYER-RIPE
created: 2011-09-01T12:14:26Z
last-modified: 2012-01-25T12:16:45Z
source: RIPE

person: SoftLayer IP Administrator
address: Paul van Vlissingenstraat 16
address: 1096 BK Amsterdam, The Netherlands
phone: +1-281-714-3958
nic-hdl: SA8109-RIPE
mnt-by: MAINT-SOFTLAYER-RIPE
created: 2011-09-01T12:09:35Z
last-modified: 2012-01-25T12:12:47Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.90 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 113.190.233.211 from popov-roman.com

Hi,

The IP 113.190.233.211 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 113.190.233.211:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '113.190.0.0 - 113.190.255.255'

% Abuse contact for '113.190.0.0 - 113.190.255.255' is 'hm-changed@vnnic.net.vn'

inetnum: 113.190.0.0 - 113.190.255.255
netname: VNPT-VNNIC-VN
country: VN
descr: VietNam Post and Telecom Corporation
descr: VNPT ADSL Service in Hanoi
admin-c: VIG1-AP
tech-c: VIG1-AP
status: ALLOCATED NON-PORTABLE
changed: hm-changed@vnnic.net.vn 20141128
mnt-by: MAINT-VN-VNPT
mnt-irt: IRT-VNNIC-AP
source: APNIC

irt: IRT-VNNIC-AP
address: Ha Noi, VietNam
phone: +84-4-35564944
fax-no: +84-4-37821462
e-mail: hm-changed@vnnic.net.vn
abuse-mailbox: hm-changed@vnnic.net.vn
admin-c: PT174-AP
tech-c: NTTT1-AP
auth: # Filtered
mnt-by: MAINT-VN-VNNIC
changed: hm-changed@vnnic.net.vn 20101108
source: APNIC

role: VDC IPADMIN GROUP
address: Internet Building, Block II, Thang Long Inter Village
address: Nguyen Phong Sac str, Cau Giay Dist, Ha Noi
country: VN
phone: +84-912-800008
fax-no: +84-4-9430427
e-mail: hathm@vdc.com.vn
remarks: send spam reports to abuse@vdc.com.vn
remarks: and abuse reports to abuse@vnn.vn
admin-c: THMH1-AP
tech-c: THMH1-AP
nic-hdl: VIG1-AP
notify: hm-changed@vnnic.net.vn
mnt-by: MAINT-VN-VNPT
changed: hm-changed@vnnic.net.vn 20090325
source: APNIC
changed: hm-changed@apnic.net 20111114

% Information related to '113.190.224.0/19AS45899'

route: 113.190.224.0/19
descr: VietNam Post and Telecom Corporation (VNPT)
descr: VNPT-AS-AP
country: VN
origin: AS45899
remarks: mailto: noc@vnn.vn
notify: hm-changed@vnnic.net.vn
mnt-by: MAINT-VN-VNPT
changed: hm-changed@vnnic.net.vn 20100810
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 200.187.150.143 from popov-roman.com

Hi,

The IP 200.187.150.143 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 200.187.150.143:

[Querying whois.nic.br]
[whois.nic.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2017-10-16 14:51:52 (BRST -02:00)

% Permission denied. For more information, contact abuse@registro.br

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 84.42.167.2 from popov-roman.com

Hi,

The IP 84.42.167.2 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 84.42.167.2:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '84.42.160.0 - 84.42.167.255'

% Abuse contact for '84.42.160.0 - 84.42.167.255' is 'abuse@upcbroadband.cz'

inetnum: 84.42.160.0 - 84.42.167.255
netname: UPC-BROADBAND-XVIII
descr: UPC Ceska republika, a.s.
country: CZ
admin-c: MK23104-RIPE
tech-c: MK23104-RIPE
tech-c: MCR1-RIPE
status: ASSIGNED PA
remarks: **********************************************
remarks: * In case of hack attacks, scans etc. please *
remarks: * send abuse notifications to: *
remarks: * abuse@mistral.cz *
remarks: **********************************************
remarks: * In case of spam please send abuse *
remarks: * notifications to: *
remarks: * spam@mistral.cz *
remarks: **********************************************
mnt-by: DKI-MNT
mnt-lower: DKI-MNT
mnt-routes: DKI-MNT
created: 2004-12-08T15:31:57Z
last-modified: 2006-03-16T13:21:41Z
source: RIPE

role: Mistral Contact Role
address: UPC Ceska Republika, s.r.o.
address: Zavisova 502/5
address: Prague Nusle
address: Czech Republic
phone: + 420 2 61107111
fax-no: + 420 2 61107100
remarks: remarks: **********************************************
remarks: remarks: * In case of hack attacks, scans etc. please *
remarks: remarks: * send abuse notifications to: *
remarks: remarks: * abuse@mistral.cz *
remarks: remarks: **********************************************
remarks: remarks: * In case of spam please send abuse *
remarks: remarks: * notifications to: *
remarks: remarks: * spam@mistral.cz *
remarks: remarks: **********************************************
admin-c: MK23104-RIPE
tech-c: MK23104-RIPE
tech-c: JG2186-RIPE
tech-c: RN27-RIPE
tech-c: LS83-RIPE
tech-c: LK1812-RIPE
tech-c: MM30507-RIPE
tech-c: MP6671-RIPE
tech-c: PZ1462-RIPE
nic-hdl: MCR1-RIPE
mnt-by: DKI-MNT
created: 2002-07-29T14:05:52Z
last-modified: 2016-06-08T19:32:59Z
source: RIPE # Filtered

person: Martin Krautwurst
address: UPC Ceska Republika, s.r.o.
address: Zavisova 502/5
address: Prague 4 - Nusle
address: 140 00
address: Czech Republic
phone: +420 2 61107112
fax-no: +420 2 61107100
nic-hdl: MK23104-RIPE
mnt-by: DKI-MNT
created: 2002-07-18T10:02:21Z
last-modified: 2015-02-16T15:37:42Z
source: RIPE

% Information related to '84.42.128.0/18AS6830'

route: 84.42.128.0/18
descr: UPC Ceska republika, a.s.
origin: AS6830
mnt-by: AS6830-MNT
created: 2015-12-02T10:43:29Z
last-modified: 2015-12-02T10:43:29Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 87.139.92.224 from popov-roman.com

Hi,

The IP 87.139.92.224 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 87.139.92.224:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '87.139.0.0 - 87.139.127.255'

% Abuse contact for '87.139.0.0 - 87.139.127.255' is 'abuse@telekom.de'

inetnum: 87.139.0.0 - 87.139.127.255
netname: DTAG-STATIC02
descr: Deutsche Telekom AG
descr: T-DSL Business static dial-up
org: ORG-DTAG1-RIPE
country: DE
admin-c: DTIP
tech-c: DTST
status: ASSIGNED PA
mnt-by: DTAG-NIC
created: 2006-03-14T12:33:51Z
last-modified: 2014-06-18T11:18:11Z
source: RIPE

organisation: ORG-DTAG1-RIPE
org-name: Deutsche Telekom AG
org-type: OTHER
address: Group Information Security, SDA/Abuse
address: T-Online-Allee 1
address: DE 64295 Darmstadt
remarks: abuse contact in case of Spam,
hack attacks, illegal activity,
violation, scans, probes, etc.
mnt-ref: DTAG-NIC
mnt-by: DTAG-NIC
abuse-c: DTAG4-RIPE
created: 2014-06-17T11:47:04Z
last-modified: 2014-06-17T11:47:04Z
source: RIPE # Filtered

person: DTAG Global IP-Addressing
address: Deutsche Telekom AG
address: Darmstadt, Germany
phone: +49 180 2 33 1000
fax-no: +49 6151 6809399
nic-hdl: DTIP
mnt-by: DTAG-NIC
created: 2003-01-29T10:22:59Z
last-modified: 2015-11-27T08:02:45Z
source: RIPE # Filtered

person: Security Team
address: Deutsche Telekom AG
address: Darmstadt, Germany
phone: +49 180 2 33 1000
fax-no: +49 6151 6809399
nic-hdl: DTST
mnt-by: DTAG-NIC
created: 2003-01-29T10:31:11Z
last-modified: 2015-11-27T08:03:38Z
source: RIPE # Filtered

% Information related to '87.128.0.0/11AS3320'

route: 87.128.0.0/11
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
created: 2005-05-07T20:51:49Z
last-modified: 2005-05-07T20:51:49Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 87.139.92.224 from herbalyzer.com

Hi,

The IP 87.139.92.224 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 87.139.92.224:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '87.139.0.0 - 87.139.127.255'

% Abuse contact for '87.139.0.0 - 87.139.127.255' is 'abuse@telekom.de'

inetnum: 87.139.0.0 - 87.139.127.255
netname: DTAG-STATIC02
descr: Deutsche Telekom AG
descr: T-DSL Business static dial-up
org: ORG-DTAG1-RIPE
country: DE
admin-c: DTIP
tech-c: DTST
status: ASSIGNED PA
mnt-by: DTAG-NIC
created: 2006-03-14T12:33:51Z
last-modified: 2014-06-18T11:18:11Z
source: RIPE

organisation: ORG-DTAG1-RIPE
org-name: Deutsche Telekom AG
org-type: OTHER
address: Group Information Security, SDA/Abuse
address: T-Online-Allee 1
address: DE 64295 Darmstadt
remarks: abuse contact in case of Spam,
hack attacks, illegal activity,
violation, scans, probes, etc.
mnt-ref: DTAG-NIC
mnt-by: DTAG-NIC
abuse-c: DTAG4-RIPE
created: 2014-06-17T11:47:04Z
last-modified: 2014-06-17T11:47:04Z
source: RIPE # Filtered

person: DTAG Global IP-Addressing
address: Deutsche Telekom AG
address: Darmstadt, Germany
phone: +49 180 2 33 1000
fax-no: +49 6151 6809399
nic-hdl: DTIP
mnt-by: DTAG-NIC
created: 2003-01-29T10:22:59Z
last-modified: 2015-11-27T08:02:45Z
source: RIPE # Filtered

person: Security Team
address: Deutsche Telekom AG
address: Darmstadt, Germany
phone: +49 180 2 33 1000
fax-no: +49 6151 6809399
nic-hdl: DTST
mnt-by: DTAG-NIC
created: 2003-01-29T10:31:11Z
last-modified: 2015-11-27T08:03:38Z
source: RIPE # Filtered

% Information related to '87.128.0.0/11AS3320'

route: 87.128.0.0/11
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
created: 2005-05-07T20:51:49Z
last-modified: 2005-05-07T20:51:49Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (ANGUS)

Regards,

Fail2Ban