HideMyAss.com

Sunday, 6 May 2018

[Fail2Ban] SSH: banned 89.40.114.242 from natural-breast-active.com

Hi,

The IP 89.40.114.242 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 89.40.114.242:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '89.40.114.0 - 89.40.114.255'

% Abuse contact for '89.40.114.0 - 89.40.114.255' is 'abuse@staff.aruba.it'

inetnum: 89.40.114.0 - 89.40.114.255
netname: ARUBACLOUD-FR
geoloc: 48.86832824998001 2.362060546875
language: FR
descr: Aruba Cloud
country: FR
admin-c: SANS-RIPE
tech-c: AN3450-RIPE
status: ASSIGNED PA
mnt-by: ARUBA-MNT
created: 2016-04-04T09:59:28Z
last-modified: 2016-04-04T09:59:28Z
source: RIPE

role: ARUBA NOC
address: Aruba S.p.A.
address: via S.Clemente 53
address: 24036 Ponte San Pietro (BG)
address: Italy
abuse-mailbox: abuse@staff.aruba.it
admin-c: SS936-RIPE
tech-c: SC279-RIPE
nic-hdl: AN3450-RIPE
mnt-by: ARUBA-MNT
created: 2008-11-19T19:02:34Z
last-modified: 2017-11-15T08:13:57Z
source: RIPE # Filtered

person: Eric Sansonny
address: Aruba SAS
address: 92-98 boulevard Victor Hugo
address: 92110 Clichy
phone: +330141065225
fax-no: +330146079808
nic-hdl: SANS-RIPE
mnt-by: ARUBAFR-MNT
created: 2012-09-20T06:28:55Z
last-modified: 2016-04-07T14:15:10Z
source: RIPE

% Information related to '89.40.112.0/22AS199653'

route: 89.40.112.0/22
descr: Aruba.FR Network
origin: AS199653
mnt-by: ARUBAFR-MNT
created: 2016-04-20T08:08:52Z
last-modified: 2016-04-20T08:08:52Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 84.57.56.239 from natural-breast-active.com

Hi,

The IP 84.57.56.239 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 84.57.56.239:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '84.56.0.0 - 84.57.112.255'

% Abuse contact for '84.56.0.0 - 84.57.112.255' is 'abuse@arcor-ip.de'

inetnum: 84.56.0.0 - 84.57.112.255
netname: ARCOR-DSL-NET12
descr: ARCOR AG
descr: Alfred-Herrhausen-Allee 1
descr: D-65760 Eschborn
country: DE
admin-c: ANOC1-RIPE
tech-c: ANOC1-RIPE
status: ASSIGNED PA
mnt-by: ARCOR-MNT
mnt-domains: ARCOR-MNT
created: 2004-08-17T13:05:42Z
last-modified: 2004-08-18T06:29:38Z
source: RIPE # Filtered

role: Vodafone Germany IP Core Backbone
address: Vodafone GmbH
address: Campus Eschborn
address: Duesseldorfer Strasse 15
address: D-65760 Eschborn
address: Germany
phone: +49 6196 523 0864
remarks: trouble: Security issues abuse@arcor-ip.de
remarks: trouble: Information http://www.vodafone.de
remarks: trouble: Peering contact peering@adm.arcor.net
remarks: trouble: Operational issues :
remarks: DanubiusNOC-DE-FO-FIXED_ro@vodafone.com
remarks: trouble: Address assignment ip-registry@arcor.net
admin-c: SM9000-RIPE
admin-c: NH4266-RIPE
admin-c: JS19072-RIPE
admin-c: AR9338-RIPE
admin-c: TK11590-RIPE
admin-c: RH12597-RIPE
admin-c: MW877-RIPE
admin-c: FB3293-RIPE
admin-c: TG2269-RIPE
tech-c: NH15-RIPE
nic-hdl: ANOC1-RIPE
mnt-by: ARCOR-MNT
created: 2002-07-11T08:48:33Z
last-modified: 2017-11-22T12:07:15Z
source: RIPE # Filtered
abuse-mailbox: abuse@arcor-ip.de

% Information related to '84.56.0.0/15AS3209'

route: 84.56.0.0/15
descr: ARCOR-IP
origin: AS3209
mnt-by: ARCOR-MNT
created: 2005-03-07T11:52:49Z
last-modified: 2005-03-07T11:52:49Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 103.89.89.226 from natural-breast-active.com

Hi,

The IP 103.89.89.226 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 103.89.89.226:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '103.89.88.0 - 103.89.91.255'

% Abuse contact for '103.89.88.0 - 103.89.91.255' is 'hm-changed@vnnic.vn'

inetnum: 103.89.88.0 - 103.89.91.255
netname: ETC-VN
descr: ETC Viet Nam development technology company limited
descr: Xa Khuc, Chu Phan, Me Linh, HaNoi
admin-c: NNA25-AP
tech-c: NDM6-AP
country: VN
mnt-by: MAINT-VN-VNNIC
mnt-lower: MAINT-VN-VNNIC
mnt-irt: IRT-VNNIC-AP
mnt-routes: MAINT-VN-VNNIC
status: ALLOCATED PORTABLE
last-modified: 2017-03-30T08:17:17Z
source: APNIC

irt: IRT-VNNIC-AP
address: Ha Noi, VietNam
phone: +84-24-35564944
fax-no: +84-24-37821462
e-mail: hm-changed@vnnic.vn
abuse-mailbox: hm-changed@vnnic.vn
admin-c: NTTT1-AP
tech-c: NTTT1-AP
auth: # Filtered
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-11-08T09:40:06Z
source: APNIC

person: Nguyen Duc Manh
address: Xa Khuc, Chu Phan, Me Linh, Ha Noi
country: VN
phone: +84-1698129166
e-mail: ducmanhepu1@gmail.com
nic-hdl: NDM6-AP
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-03-30T07:08:00Z
source: APNIC

person: Nguyen Ngoc An
address: Xa Khuc, Chu Phan, Me Linh, Ha Noi
country: VN
phone: +84-987444400
e-mail: thaikhanghn@gmail.com
nic-hdl: NNA25-AP
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-03-30T06:58:47Z
source: APNIC

% Information related to '103.89.88.0/22AS135905'

route: 103.89.88.0/22
descr: ETC-VN
origin: AS135905
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-04-11T08:05:46Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 166.62.41.196 from natural-breast-active.com

Hi,

The IP 166.62.41.196 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 166.62.41.196:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 166.62.41.196"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=166.62.41.196?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 166.62.0.0 - 166.62.127.255
CIDR: 166.62.0.0/17
NetName: GO-DADDY-COM-LLC
NetHandle: NET-166-62-0-0-1
Parent: NET166 (NET-166-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS26496
Organization: GoDaddy.com, LLC (GODAD)
RegDate: 2012-11-14
Updated: 2014-02-25
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: https://whois.arin.net/rest/net/NET-166-62-0-0-1



OrgName: GoDaddy.com, LLC
OrgId: GODAD
Address: 14455 N Hayden Road
Address: Suite 226
City: Scottsdale
StateProv: AZ
PostalCode: 85260
Country: US
RegDate: 2007-06-01
Updated: 2014-09-10
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: https://whois.arin.net/rest/org/GODAD


OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com
OrgTechRef: https://whois.arin.net/rest/poc/NOC124-ARIN

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE51-ARIN

OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com
OrgNOCRef: https://whois.arin.net/rest/poc/NOC124-ARIN

RTechHandle: NOC124-ARIN
RTechName: Network Operations Center
RTechPhone: +1-480-505-8809
RTechEmail: noc@godaddy.com
RTechRef: https://whois.arin.net/rest/poc/NOC124-ARIN

RAbuseHandle: ABUSE51-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-480-624-2505
RAbuseEmail: abuse@godaddy.com
RAbuseRef: https://whois.arin.net/rest/poc/ABUSE51-ARIN

RNOCHandle: NOC124-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-480-505-8809
RNOCEmail: noc@godaddy.com
RNOCRef: https://whois.arin.net/rest/poc/NOC124-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 174.143.225.212 from natural-breast-active.com

Hi,

The IP 174.143.225.212 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 174.143.225.212:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 174.143.225.212"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=174.143.225.212?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Stack Safe, Inc. RSPC-1244735294518268 (NET-174-143-225-192-1) 174.143.225.192 - 174.143.225.223
Rackspace Hosting RSCP-NET-4 (NET-174-143-0-0-1) 174.143.0.0 - 174.143.255.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 187.62.205.26 from natural-breast-active.com

Hi,

The IP 187.62.205.26 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 187.62.205.26:

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2018-05-06 04:39:49 (-03 -03:00)

% Permission denied. For more information, contact abuse@registro.br

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 95.0.60.171 from natural-breast-active.com

Hi,

The IP 95.0.60.171 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 95.0.60.171:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '95.0.60.160 - 95.0.60.175'

% Abuse contact for '95.0.60.160 - 95.0.60.175' is 'abuse@ttnet.com.tr'

inetnum: 95.0.60.160 - 95.0.60.175
netname: ttnet_as_alsat_metro_ethernet
descr: Sehitler cd no 32 Bolu
country: TR
admin-c: MT15630-RIPE
tech-c: MT15630-RIPE
status: ASSIGNED PA
mnt-by: AS9121-MNT
created: 2015-11-19T15:49:29Z
last-modified: 2015-11-19T15:49:29Z
source: RIPE

person: Metin Tahaoglu
remarks: ttnet_as_alsat_metro_ethernet
address: Sehitler cd no 32 Bolu
phone: +905326969868
nic-hdl: MT15630-RIPE
mnt-by: AS9121-MNT
created: 2015-11-19T15:49:29Z
last-modified: 2015-11-19T15:49:29Z
source: RIPE # Filtered

% Information related to '95.0.0.0/17AS9121'

route: 95.0.0.0/17
descr: TurkTelecom
origin: AS9121
mnt-by: AS9121-MNT
created: 2009-09-28T12:08:52Z
last-modified: 2009-09-28T12:08:52Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 58.71.34.164 from natural-breast-active.com

Hi,

The IP 58.71.34.164 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 58.71.34.164:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '58.71.34.160 - 58.71.34.191'

% Abuse contact for '58.71.34.160 - 58.71.34.191' is 'abuse@pldt.net'

inetnum: 58.71.34.160 - 58.71.34.191
netname: I-Gate
country: PH
descr: 2040840_Norbell Philippines 24/7 In-Touch, Inc.
descr: This space has been assigned as STATIC
admin-c: NA185-AP
tech-c: NT80-AP
tech-c: JG149-AP
tech-c: NS141-AP
tech-c: RA328-AP
status: ASSIGNED NON-PORTABLE
mnt-by: PHIX-NOC-AP
mnt-irt: IRT-PLDT-PH
last-modified: 2011-11-29T10:48:01Z
source: APNIC

irt: IRT-PLDT-PH
address: Philippine Long Distance Telephone Company
address: 6/F Innolab Building
address: Boni Avenue, Mandaluyong City
address: Philippines
e-mail: abuse@pldt.net
abuse-mailbox: abuse@pldt.net
admin-c: NA185-AP
tech-c: NA185-AP
auth: # Filtered
mnt-by: PHIX-NOC-AP
last-modified: 2017-10-20T07:15:00Z
source: APNIC

person: Jaime Gonzales
nic-hdl: JG149-AP
e-mail: jcgonzales@pldt.com.ph
address: PLDT Co., 3/F MGO Bldg., Legaspi cor Dela Rosa Sts., Makati City
phone: +63-2-864-5752
fax-no: +63-2-813-5794
country: PH
mnt-by: PHIX-NOC-AP
last-modified: 2008-09-04T07:29:34Z
source: APNIC

person: Nilo Agir
nic-hdl: NA185-AP
e-mail: ncagir@pldt.com.ph
address: 6/F Innolab Building, Boni Avenue, Mandaluyong City
phone: +632-584-1045
country: PH
mnt-by: PHIX-NOC-AP
last-modified: 2011-04-27T01:43:18Z
source: APNIC

person: Nelson Sibal
nic-hdl: NS141-AP
e-mail: nbsibal@pldt.com.ph
address: MGO Bldg, Dela Rosa cor. Legaspi Sts., Makati City
phone: +63-2-885-9174
fax-no: +63-2-813-5794
country: PH
mnt-by: PHIX-NOC-AP
last-modified: 2008-09-04T07:35:15Z
source: APNIC

person: Noel Tabernilla
nic-hdl: NT80-AP
e-mail: nctabernilla@pldt.com.ph
address: PLDT Co., 3/F MGO Bldg., Legaspi cor Dela Rosa Sts., Makati City
phone: +632-864-5752
fax-no: +63-2-813-5794
country: PH
mnt-by: PHIX-NOC-AP
last-modified: 2008-09-04T07:29:34Z
source: APNIC

person: Rolando M. Araw Jr
nic-hdl: RA328-AP
e-mail: rmaraw@pldt.com.ph
address: 3/F MGO Bldg, dela Rosa St, Makati, MM, Phils
phone: +632-836-2569
country: PH
mnt-by: PHIX-NOC-AP
last-modified: 2010-11-17T07:02:01Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 92.154.79.253 from natural-breast-active.com

Hi,

The IP 92.154.79.253 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 92.154.79.253:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '92.154.79.0 - 92.154.79.255'

% Abuse contact for '92.154.79.0 - 92.154.79.255' is 'gestionip.ft@orange.com'

inetnum: 92.154.79.0 - 92.154.79.255
netname: IP2000-ADSL-BAS
descr: LNPUT658 Puteaux Bloc 2
country: FR
admin-c: WITR1-RIPE
tech-c: WITR1-RIPE
status: ASSIGNED PA
remarks: for hacking, spamming or security problems send mail to
remarks: abuse@orange.fr
mnt-by: FT-BRX
created: 2017-03-24T09:50:15Z
last-modified: 2017-03-24T09:50:15Z
source: RIPE

role: Wanadoo France Technical Role
address: FRANCE TELECOM/SCR
address: 48 rue Camille Desmoulins
address: 92791 ISSY LES MOULINEAUX CEDEX 9
address: FR
phone: +33 1 58 88 50 00
abuse-mailbox: abuse@orange.fr
admin-c: BRX1-RIPE
tech-c: BRX1-RIPE
nic-hdl: WITR1-RIPE
mnt-by: FT-BRX
created: 2001-12-04T17:57:08Z
last-modified: 2013-07-16T14:09:50Z
source: RIPE # Filtered

% Information related to '92.154.0.0/17AS3215'

route: 92.154.0.0/17
descr: France Telecom Orange
origin: AS3215
mnt-by: RAIN-TRANSPAC
mnt-by: FT-BRX
created: 2012-11-22T09:05:56Z
last-modified: 2012-11-22T09:05:56Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (BLAARKOP)

Regards,

Fail2Ban

Saturday, 5 May 2018

[Fail2Ban] SSH: banned 91.121.105.20 from natural-breast-active.com

Hi,

The IP 91.121.105.20 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 91.121.105.20:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '91.121.64.0 - 91.121.127.255'

% Abuse contact for '91.121.64.0 - 91.121.127.255' is 'abuse@ovh.net'

inetnum: 91.121.64.0 - 91.121.127.255
netname: OVH
descr: OVH SAS
descr: Dedicated Servers
descr: http://www.ovh.com
country: FR
admin-c: OK217-RIPE
tech-c: OTC2-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
created: 2008-03-10T13:45:33Z
last-modified: 2008-03-10T13:45:33Z
source: RIPE

role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered

person: Octave Klaba
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
phone: +33 9 74 53 13 23
nic-hdl: OK217-RIPE
mnt-by: OVH-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-10-30T21:44:51Z
source: RIPE # Filtered

% Information related to '91.121.0.0/16AS16276'

route: 91.121.0.0/16
descr: OVH ISP
descr: Paris, France
origin: AS16276
mnt-by: OVH-MNT
created: 2007-10-16T17:33:02Z
last-modified: 2007-10-16T17:33:02Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 210.183.236.30 from natural-breast-active.com

Hi,

The IP 210.183.236.30 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 210.183.236.30:

[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 210.183.236.30


# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 210.183.96.0 - 210.183.255.255 (/17+/19)
기관명 : 주ì&lsqauo;íšŒì‚¬ 케이í&lsqauo;°
서비스명 : KORNET
주소 : 경기도 성남ì&lsqauo;œ 분ë&lsqauo;¹êµ¬ 불정로 90
우편번호 : 13606
í• ë&lsqauo;¹ì¼ìž : 19990220

이름 : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-500-6630
전자우편 : kornet_ip@kt.com

조회하ì&lsqauo;  IPv4주소ëŠ" 위의 관리대행자로부터 아래의 사용자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------


[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 210.183.236.0 - 210.183.236.127 (/25)
기관명 : (재)강릉과학산업진흥원정보문í™"사업ë&lsqauo;¨
네트워크 구분 : CUSTOMER
주소 : 강원도 강릉ì&lsqauo;œ 포남동
우편번호 : 210110
í• ë&lsqauo;¹ë‚´ì—­ ë"±ë¡ì¼ : 20161108

이름 : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-500-6631
전자우편 : kornet_ip@kt.com


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 210.183.96.0 - 210.183.255.255 (/17+/19)
Organization Name : Korea Telecom
Service Name : KORNET
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code : 13606
Registration Date : 19990220

Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 210.183.236.0 - 210.183.236.127 (/25)
Organization Name : (jae)gangreunggwahaksaneopjinheungwonjeongbomunhwasaeopdan
Network Type : CUSTOMER
Address : Ponam-Dong Gangreung-Si Gangwon-Do
Zip Code : 210110
Registration Date : 20161108

Name : IP Manager
Phone : +82-2-500-6631
E-Mail : kornet_ip@kt.com



- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 60.173.82.156 from natural-breast-active.com

Hi,

The IP 60.173.82.156 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 60.173.82.156:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '60.166.0.0 - 60.175.255.255'

% Abuse contact for '60.166.0.0 - 60.175.255.255' is 'anti-spam@ns.chinanet.cn.net'

inetnum: 60.166.0.0 - 60.175.255.255
netname: CHINANET-AH
descr: CHINANET anhui province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: JW89-AP
mnt-by: APNIC-HM
mnt-routes: MAINT-CHINANET-AH
mnt-lower: MAINT-CHINANET-AH
status: ALLOCATED PORTABLE
last-modified: 2015-08-26T01:28:01Z
source: APNIC
mnt-irt: IRT-CHINANET-CN

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC

person: Jinneng Wang
address: 17/F, Postal Building No.120 Changjiang
address: Middle Road, Hefei, Anhui, China
country: CN
phone: +86-551-2659073
fax-no: +86-551-2659287
e-mail: ahdata@189.cn
nic-hdl: JW89-AP
mnt-by: MAINT-CHINANET-AH
last-modified: 2014-02-21T01:19:43Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 130.162.74.189 from natural-breast-active.com

Hi,

The IP 130.162.74.189 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 130.162.74.189:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 130.162.74.189"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=130.162.74.189?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Oracle Corporation OC-260 (NET-130-162-0-0-1) 130.162.0.0 - 130.162.255.255
Oracle Public Cloud OC-260 (NET-130-162-0-0-2) 130.162.0.0 - 130.162.255.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 89.43.175.61 from natural-breast-active.com

Hi,

The IP 89.43.175.61 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 89.43.175.61:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '89.43.175.0 - 89.43.175.127'

% Abuse contact for '89.43.175.0 - 89.43.175.127' is 'abuse@ip.ro'

inetnum: 89.43.175.0 - 89.43.175.127
netname: DYNAMIC-TELECOM-SRL
descr: Dynamic Telecom SRL
descr: Calea Dorobantilor 168 Bl 15, Sc D, Ap 125
descr: Bucuresti Sector 1 Romania
country: ro
admin-c: CS5424-RIPE
tech-c: CS5424-RIPE
status: ASSIGNED PA
remarks: Registered through http://www.ip.ro/ip.html
mnt-by: RO-MNT
mnt-lower: RO-MNT
mnt-routes: ADN-MNT
created: 2015-01-28T12:18:00Z
last-modified: 2015-06-23T09:01:17Z
source: RIPE

person: CALIN SERBANESCU
address: SC Dynamic Telecom SRL
address: Calea Dorobantilor 168 Bl 15, Sc D, Ap 125
address: Bucuresti Sector 1
phone: +40212311061
nic-hdl: CS5424-RIPE
mnt-by: RO-MNT
created: 2007-03-20T06:42:11Z
last-modified: 2017-10-30T21:54:20Z
source: RIPE # Filtered

% Information related to '89.43.175.0/24AS42786'

route: 89.43.175.0/24
descr: DynamicTelecom
origin: AS42786
mnt-by: ADN-MNT
created: 2007-04-17T10:33:53Z
last-modified: 2007-04-17T10:33:53Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 37.228.129.14 from natural-breast-active.com

Hi,

The IP 37.228.129.14 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 37.228.129.14:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '37.228.128.0 - 37.228.129.255'

% Abuse contact for '37.228.128.0 - 37.228.129.255' is 'abuse@flokinet.is'

inetnum: 37.228.128.0 - 37.228.129.255
netname: SC-FLOKINET-LTD-20120410
country: SC
org: ORG-FL176-RIPE
admin-c: KW2939-RIPE
tech-c: KW2939-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: sc-flokinet-ltd-1-mnt
created: 2017-03-23T15:50:51Z
last-modified: 2017-03-23T15:50:51Z
source: RIPE

organisation: ORG-FL176-RIPE
org-name: Flokinet Ltd
org-type: LIR
address: Suite Number 2, Olivier Maradan Building, Olivier Maradan St
address: NA
address: Victoria
address: SEYCHELLES
admin-c: KW2939-RIPE
tech-c: KW2939-RIPE
abuse-c: AR37432-RIPE
mnt-ref: sc-flokinet-ltd-1-mnt
mnt-by: RIPE-NCC-HM-MNT
mnt-by: sc-flokinet-ltd-1-mnt
created: 2016-08-26T07:19:06Z
last-modified: 2018-03-15T11:19:44Z
source: RIPE # Filtered
phone: +40734325073

person: FlokiNET Ltd
address: Suite Number 2, Olivier Maradan Building, Olivier Maradan St
address: NA
address: Victoria
address: Seychelles
phone: +40734325073
nic-hdl: KW2939-RIPE
mnt-by: sc-flokinet-ltd-1-mnt
created: 2016-08-26T07:19:06Z
last-modified: 2017-11-15T09:46:24Z
source: RIPE

% Information related to '37.228.129.0/24AS200651'

route: 37.228.129.0/24
origin: AS200651
mnt-by: sc-flokinet-ltd-1-mnt
mnt-by: FlokiNET
created: 2017-07-12T16:07:13Z
last-modified: 2017-07-12T16:07:13Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 60.32.118.131 from natural-breast-active.com

Hi,

The IP 60.32.118.131 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 60.32.118.131:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '60.32.0.0 - 60.47.255.255'

% Abuse contact for '60.32.0.0 - 60.47.255.255' is 'hostmaster@nic.ad.jp'

inetnum: 60.32.0.0 - 60.47.255.255
netname: OCN
descr: NTT Communications Corporation
descr: 1-6 Uchisaiwai-cho 1-chome Chiyoda-ku, Tokyo 100-8019 Japan
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
status: ALLOCATED PORTABLE
remarks: Email address for spam or abuse complaints : abuse@ocn.ad.jp
mnt-by: MAINT-JPNIC
mnt-irt: IRT-JPNIC-JP
mnt-lower: MAINT-JPNIC
last-modified: 2015-12-01T22:33:22Z
source: APNIC

irt: IRT-JPNIC-JP
address: Urbannet-Kanda Bldg 4F, 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047, Japan
e-mail: hostmaster@nic.ad.jp
abuse-mailbox: hostmaster@nic.ad.jp
admin-c: JNIC1-AP
tech-c: JNIC1-AP
auth: # Filtered
mnt-by: MAINT-JPNIC
last-modified: 2017-10-18T10:21:54Z
source: APNIC

role: Japan Network Information Center
address: Urbannet-Kanda Bldg 4F
address: 3-6-2 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047,Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: hostmaster@nic.ad.jp
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
last-modified: 2012-08-28T07:58:02Z
source: APNIC

% Information related to '60.32.118.128 - 60.32.118.135'

inetnum: 60.32.118.128 - 60.32.118.135
netname: DSK-KOWA-IP8
descr: Densan System Co.,Ltd.
country: JP
admin-c: JP00153182
tech-c: JP00153182
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: apnic-ftp@nic.ad.jp 20170927
source: JPNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 128.173.8.242 from natural-breast-active.com

Hi,

The IP 128.173.8.242 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 128.173.8.242:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 128.173.8.242"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=128.173.8.242?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 128.173.0.0 - 128.173.255.255
CIDR: 128.173.0.0/16
NetName: VA-TECH
NetHandle: NET-128-173-0-0-1
Parent: NET128 (NET-128-0-0-0-0)
NetType: Direct Assignment
OriginAS: AS1312
Organization: Virginia Polytechnic Institute and State Univ. (VPISU)
RegDate: 1986-10-20
Updated: 2010-04-20
Comment: DMCA and copyright complaints to DMCA@vt.edu.
Ref: https://whois.arin.net/rest/net/NET-128-173-0-0-1


OrgName: Virginia Polytechnic Institute and State Univ.
OrgId: VPISU
Address: Communications Network Services
Address: 1770 Forecast Dr
City: Blacksburg
StateProv: VA
PostalCode: 24061-0506
Country: US
RegDate: 1993-09-22
Updated: 2017-01-28
Comment: DMCA and copyright complaints to DMCA@vt.edu.
Ref: https://whois.arin.net/rest/org/VPISU


OrgNOCHandle: VTOC-ARIN
OrgNOCName: Virginia Tech Operations Center
OrgNOCPhone: +1-540-231-6780
OrgNOCEmail: noc@cns.vt.edu
OrgNOCRef: https://whois.arin.net/rest/poc/VTOC-ARIN

OrgTechHandle: PB123-ARIN
OrgTechName: Benchoff, Phil
OrgTechPhone: +1-540-231-6460
OrgTechEmail: benchoff@vt.edu
OrgTechRef: https://whois.arin.net/rest/poc/PB123-ARIN

OrgAbuseHandle: ABUSE44-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-540-231-9500
OrgAbuseEmail: abuse@vt.edu
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE44-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 79.124.60.132 from natural-breast-active.com

Hi,

The IP 79.124.60.132 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 79.124.60.132:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '79.124.60.128 - 79.124.60.159'

% Abuse contact for '79.124.60.128 - 79.124.60.159' is 'noc@4vendeta.com'

inetnum: 79.124.60.128 - 79.124.60.159
netname: Laado-Raani-Private-Housing-Space
descr: VenomDC - Private Internet Space.
remarks: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
remarks: ! Venom-DC take ABUSE seriously & don't allow illegal activities, !
remarks: ! hacking, botnets , spam or other malicious use....................... !
remarks: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
country: BG
admin-c: SLR73-RIPE
tech-c: SLR73-RIPE
status: ASSIGNED PA
mnt-by: Tamatiya
mnt-by: MNT-LIR-BG
created: 2017-04-06T14:58:33Z
last-modified: 2017-04-06T14:58:33Z
source: RIPE

person: S. Laad Raani
address: Global Gateway 8, Neverland Complex Perle, Mahe - Seychelles
phone: +248-487-4991
nic-hdl: SLR73-RIPE
mnt-by: Tamatiya
created: 2016-06-16T14:44:24Z
last-modified: 2017-10-30T23:16:44Z
source: RIPE # Filtered

% Information related to '79.124.60.0/24AS50360'

route: 79.124.60.0/24
origin: AS50360
mnt-by: TAMATYA-MNT
created: 2014-11-20T08:24:17Z
last-modified: 2017-08-23T09:08:15Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 201.155.194.157 from natural-breast-active.com

Hi,

The IP 201.155.194.157 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 201.155.194.157:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2018-05-06 00:52:24 (BRT -03:00)

inetnum: 201.155.194/24
status: reassigned
owner: Gestión de direccionamiento UniNet
ownerid: MX-GDUN-LACNIC
responsible: Gestión de cambios y configuraciones
address: Periferico Sur, 3190,
address: 01900 - México DF - CX
country: MX
phone: +52 55 56244400 []
owner-c: DCA
tech-c: DCA
abuse-c: SRU
created: 20070921
changed: 20120901
inetnum-up: 201.152/14

nic-hdl: DCA
person: GESTION DE CAMBIOS
e-mail: gccips1@REDUNO.COM.MX
address: PERIFERICO SUR, 3190, ALVARO OBREG
address: 01900 - MEXICO DF - CX
country: MX
phone: +52 5 556244400 []
created: 20021210
changed: 20170107

nic-hdl: SRU
person: SEGURIDAD DE RED UNINET
e-mail: abuse@UNINET.NET.MX
address: PERIFERICO SUR, 3190, ALVARO OBREG
address: 01900 - MEXICO - CX
country: MX
phone: +52 55 52237234 []
created: 20030701
changed: 20170107

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 109.238.53.67 from natural-breast-active.com

Hi,

The IP 109.238.53.67 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 109.238.53.67:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '109.238.53.64 - 109.238.53.95'

% Abuse contact for '109.238.53.64 - 109.238.53.95' is 'abuse@solido.net'

inetnum: 109.238.53.64 - 109.238.53.95
netname: SERVERNET21-2
descr: Various servers
country: DK
admin-c: SOL17-RIPE
tech-c: SOL18-RIPE
status: ASSIGNED PA
mnt-by: MNT-SOLIDO
created: 2014-10-06T12:46:31Z
last-modified: 2014-10-06T12:46:31Z
source: RIPE

role: SOLIDO ADMINS
address: Smedeland 32
address: DK-2600 Glostrup
address: Denmark
admin-c: CH1862-RIPE
admin-c: RSH18-RIPE
abuse-mailbox: abuse@solido.net
tech-c: CH1862-RIPE
tech-c: RSH18-RIPE
nic-hdl: SOL17-RIPE
mnt-by: MNT-SOLIDO
created: 2011-01-07T10:21:09Z
last-modified: 2018-03-09T12:51:46Z
source: RIPE # Filtered

role: SOLIDO TECH
address: Smedeland 32
address: DK-2600 Glostrup
address: Denmark
admin-c: CH1862-RIPE
admin-c: MV11521-RIPE
admin-c: RSH18-RIPE
tech-c: CH1862-RIPE
tech-c: MV11521-RIPE
tech-c: RSH18-RIPE
nic-hdl: SOL18-RIPE
mnt-by: MNT-SOLIDO
created: 2011-01-07T10:25:36Z
last-modified: 2017-03-01T06:38:32Z
source: RIPE # Filtered

% Information related to '109.238.53.0/24AS12617'

route: 109.238.53.0/24
descr: Solido Hosting A/S
origin: AS12617
mnt-by: MNT-SOLIDO-NET
mnt-by: MNT-SOLIDO
created: 2017-07-18T08:34:01Z
last-modified: 2017-07-18T08:34:01Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 93.90.167.66 from natural-breast-active.com

Hi,

The IP 93.90.167.66 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 93.90.167.66:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '93.90.167.0 - 93.90.167.255'

% Abuse contact for '93.90.167.0 - 93.90.167.255' is 'abuse@vodafone.cz'

inetnum: 93.90.167.0 - 93.90.167.255
netname: VFCZ-V2-INTERNET-ACCESSS-SB-1
descr: Vodafone Czech Republic a.s.
descr: Prague
country: CZ
admin-c: OSKR-RIPE
tech-c: OSKR-RIPE
status: ASSIGNED PA
mnt-by: VFCZ-MNT
created: 2010-02-18T09:05:26Z
last-modified: 2010-02-18T09:05:26Z
source: RIPE

role: OSKAR LIR
address: Vodafone Czech Republic a.s.
address: namesti Junkovych 2
address: Praha 5
address: 15500
address: Czech Republic
phone: +420 271 171 626
fax-no: +420 776 971 912
admin-c: PG596-RIPE
tech-c: PG596-RIPE
tech-c: BL54-RIPE
tech-c: JR3843-RIPE
tech-c: PM9785-RIPE
tech-c: PH4124-RIPE
tech-c: DH17-RIPE
abuse-mailbox: abuse@vodafone.cz
mnt-by: VFCZ-MNT
nic-hdl: OSKR-RIPE
created: 2002-03-22T08:52:34Z
last-modified: 2016-12-02T09:02:23Z
source: RIPE # Filtered

% Information related to '93.90.160.0/20AS16019'

route: 93.90.160.0/20
descr: Vodafone Czech Republic a.s.
origin: AS16019
mnt-by: VFCZ-MNT
created: 2015-10-12T09:59:43Z
last-modified: 2015-10-12T09:59:43Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.38.121.17 from natural-breast-active.com

Hi,

The IP 218.38.121.17 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 218.38.121.17:

[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 218.38.121.17


# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 218.38.0.0 - 218.39.255.255 (/15)
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
서비스명 : broadNnet
주소 : 서울특별ì&lsqauo;œ ì¤'구 퇴계로 24
우편번호 : 04637
í• ë&lsqauo;¹ì¼ìž : 20021218

이름 : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-106-2
전자우편 : ip-adm@skbroadband.com

--------------------------------------------------------------------------------

조회하ì&lsqauo;  IPv4주소에 대한 위 관리대행자의 사용자 í• ë&lsqauo;¹ì •ë³´ê°€ 존재하지 않습ë&lsqauo;ˆë&lsqauo;¤.


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 218.38.0.0 - 218.39.255.255 (/15)
Organization Name : SK Broadband Co Ltd
Service Name : broadNnet
Address : Seoul Jung-gu Toegye-ro 24
Zip Code : 04637
Registration Date : 20021218

Name : IP Manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com



- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 199.119.170.166 from natural-breast-active.com

Hi,

The IP 199.119.170.166 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 199.119.170.166:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 199.119.170.166"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=199.119.170.166?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 199.119.168.0 - 199.119.175.255
CIDR: 199.119.168.0/21
NetName: TOTELCSI
NetHandle: NET-199-119-168-0-1
Parent: NET199 (NET-199-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS32758
Organization: TotelCSI (TOTAH-1)
RegDate: 2011-05-11
Updated: 2012-02-24
Ref: https://whois.arin.net/rest/net/NET-199-119-168-0-1


OrgName: TotelCSI
OrgId: TOTAH-1
Address: Totah Telephone Company
Address: P.O. Box 300
City: Ochelata
StateProv: OK
PostalCode: 74051-0300
Country: US
RegDate: 2010-11-19
Updated: 2017-02-14
Comment: http://www.totelcsi.net/
Ref: https://whois.arin.net/rest/org/TOTAH-1


OrgAbuseHandle: FEN7-ARIN
OrgAbuseName: Finley Engineering NOC
OrgAbusePhone: +1-952-223-8075
OrgAbuseEmail: m.ockenga@fecinc.com
OrgAbuseRef: https://whois.arin.net/rest/poc/FEN7-ARIN

OrgNOCHandle: DHA95-ARIN
OrgNOCName: Harper, Dusty
OrgNOCPhone: +1-918-535-2208
OrgNOCEmail: dusty@totelcsi.com
OrgNOCRef: https://whois.arin.net/rest/poc/DHA95-ARIN

OrgNOCHandle: FEN7-ARIN
OrgNOCName: Finley Engineering NOC
OrgNOCPhone: +1-952-223-8075
OrgNOCEmail: m.ockenga@fecinc.com
OrgNOCRef: https://whois.arin.net/rest/poc/FEN7-ARIN

OrgTechHandle: AMA133-ARIN
OrgTechName: Marshack, Adam
OrgTechPhone: +1-918-535-2701
OrgTechEmail: amarsheck@totelcsi.com
OrgTechRef: https://whois.arin.net/rest/poc/AMA133-ARIN

OrgAbuseHandle: DHA95-ARIN
OrgAbuseName: Harper, Dusty
OrgAbusePhone: +1-918-535-2208
OrgAbuseEmail: dusty@totelcsi.com
OrgAbuseRef: https://whois.arin.net/rest/poc/DHA95-ARIN

OrgTechHandle: FEN7-ARIN
OrgTechName: Finley Engineering NOC
OrgTechPhone: +1-952-223-8075
OrgTechEmail: m.ockenga@fecinc.com
OrgTechRef: https://whois.arin.net/rest/poc/FEN7-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 85.214.198.38 from natural-breast-active.com

Hi,

The IP 85.214.198.38 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 85.214.198.38:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '85.214.192.0 - 85.214.255.255'

% Abuse contact for '85.214.192.0 - 85.214.255.255' is 'abuse@strato.de'

inetnum: 85.214.192.0 - 85.214.255.255
netname: STRATO-RZG-DEDI
org: ORG-SRA1-RIPE
descr: Strato Rechenzentrum, Berlin
country: DE
admin-c: SRDS-RIPE
tech-c: SRDS-RIPE
remarks: ************************************************************
remarks: * Please send abuse complaints to abuse-server@strato.de *
remarks: * or fax +49-30-88615-755 ONLY. *
remarks: * Abuse reports to other e-mail addresses will be ignored. *
remarks: ************************************************************
status: ASSIGNED PA
mnt-by: STRATO-RZG-MNT
created: 2010-01-15T09:15:16Z
last-modified: 2013-07-06T09:34:26Z
source: RIPE

organisation: ORG-SRA1-RIPE
org-name: Strato AG
org-type: LIR
address: Pascalstrasse 10
address: 10587
address: Berlin
address: GERMANY
phone: +4930398020
fax-no: +493039802222
admin-c: CHSE-RIPE
admin-c: CM265-RIPE
abuse-c: SRAC-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: STRATO-RZG-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: STRATO-RZG-MNT
created: 2004-04-17T11:12:39Z
last-modified: 2017-10-30T14:45:27Z
source: RIPE # Filtered

role: RIPE contact Dedicated Server
address: STRATO AG
address: Pascalstr. 10
address: D-10587 Berlin
address: Germany
phone: +49 30 39802-0
org: ORG-SRA1-RIPE
abuse-mailbox: abuse-server@strato.de
admin-c: XX1-RIPE
tech-c: CHSE-RIPE
nic-hdl: SRDS-RIPE
remarks: ************************************************************
remarks: * Please send abuse complaints to abuse-server@strato.de *
remarks: * or fax +49-30-88615-755 ONLY. *
remarks: * Abuse reports to other e-mail addresses will be ignored. *
remarks: * *
remarks: * For peering requests or operational issues please look *
remarks: * at the information in the AS6724 RIPE database object. *
remarks: ************************************************************
mnt-by: STRATO-RZG-MNT
created: 2010-01-15T08:35:31Z
last-modified: 2013-10-14T08:04:17Z
source: RIPE # Filtered

% Information related to '85.214.198.0/24AS6724'

route: 85.214.198.0/24
descr: STRATO AG
descr: prefix only advertised in case of DDoS
origin: AS6724
mnt-by: STRATO-RZG-MNT
created: 2014-02-18T16:19:38Z
last-modified: 2014-02-18T16:19:38Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 143.233.226.77 from natural-breast-active.com

Hi,

The IP 143.233.226.77 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 143.233.226.77:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '143.233.0.0 - 143.233.255.255'

% Abuse contact for '143.233.0.0 - 143.233.255.255' is 'noc@ariadne-t.gr'

inetnum: 143.233.0.0 - 143.233.255.255
netname: Ariadne-t_Network
descr: Greek Academic & Research Computer Network
descr: NCSR Demokritos
descr: 153 10, Agia Paraskevi
descr: Athens, GREECE
country: GR
org: ORG-NCOS1-RIPE
admin-c: AN1558-RIPE
tech-c: AN1558-RIPE
tech-c: PT81
status: LEGACY
remarks: #################################
remarks: # For complaints of ABUSE e-mail to
remarks: # abuse@ariadne-t.gr
remarks: #################################
remarks: rev-srv: isosun.ariadne-t.gr
remarks: rev-srv: ns1.demokitos.gr
remarks: rev-srv: achilles.noc.ntua.gr
remarks: rev-srv: nic.grnet.gr
remarks: rev-srv: ns0.ja.net
mnt-by: RIPE-NCC-LEGACY-MNT
mnt-by: AS2546-MNT
mnt-domains: AS2546-MNT
mnt-routes: AS2546-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2016-07-29T07:36:16Z
source: RIPE # Filtered

organisation: ORG-NCOS1-RIPE
org-name: National Center of Scientific Research DEMOKRITOS
org-type: LIR
address: P.Grigoriou E and Neapoleos
address: 15310
address: Aghia Paraskevi
address: GREECE
admin-c: YC1100-RIPE
tech-c: YC1100-RIPE
abuse-c: AR37119-RIPE
mnt-ref: gr-demokritos-ariadne-1-mnt
mnt-by: RIPE-NCC-HM-MNT
mnt-by: gr-demokritos-ariadne-1-mnt
created: 2016-07-28T13:46:57Z
last-modified: 2017-06-07T15:00:56Z
source: RIPE # Filtered
phone: +30 210 6503125
fax-no: +30 210 6543615

role: Ariadne-t NOC
address: Ariadne-t Network
address: NCSR Demokritos
address: 153 10, Agia Paraskevi
address: Athens, GREECE
phone: +30 210 6503125
phone: +30 210 6544279
phone: +30 210 6513392
fax-no: +30 210 6543606
admin-c: YC50-RIPE
tech-c: KM1706-RIPE
mnt-by: AS2546-MNT
nic-hdl: AN1558-RIPE
created: 2004-12-21T10:02:40Z
last-modified: 2004-12-23T12:44:58Z
source: RIPE # Filtered

person: Panagiotis Telonis
address: Division of Applied Technologies (DAT)
address: NCSR Demokritos
address: 153 10, Agia Paraskevi
address: Athens, GREECE
phone: +30 210 6541172
phone: +30 210 6503144
fax-no: +30 210 6532910
nic-hdl: PT81
mnt-by: AS2546-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2004-12-21T16:31:06Z
source: RIPE # Filtered

% Information related to '143.233.0.0/16AS2546'

route: 143.233.0.0/16
descr: Ariadne-t Network
origin: AS2546
mnt-by: AS2546-MNT
mnt-routes: AS2546-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2004-12-23T12:44:03Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 201.73.149.66 from natural-breast-active.com

Hi,

The IP 201.73.149.66 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 201.73.149.66:

[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2018-05-06 00:01:51 (-03 -03:00)

% Permission denied. For more information, contact abuse@registro.br

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 166.62.89.14 from natural-breast-active.com

Hi,

The IP 166.62.89.14 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 166.62.89.14:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 166.62.89.14"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=166.62.89.14?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 166.62.0.0 - 166.62.127.255
CIDR: 166.62.0.0/17
NetName: GO-DADDY-COM-LLC
NetHandle: NET-166-62-0-0-1
Parent: NET166 (NET-166-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS26496
Organization: GoDaddy.com, LLC (GODAD)
RegDate: 2012-11-14
Updated: 2014-02-25
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: https://whois.arin.net/rest/net/NET-166-62-0-0-1


OrgName: GoDaddy.com, LLC
OrgId: GODAD
Address: 14455 N Hayden Road
Address: Suite 226
City: Scottsdale
StateProv: AZ
PostalCode: 85260
Country: US
RegDate: 2007-06-01
Updated: 2014-09-10
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: https://whois.arin.net/rest/org/GODAD


OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com
OrgNOCRef: https://whois.arin.net/rest/poc/NOC124-ARIN

OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com
OrgTechRef: https://whois.arin.net/rest/poc/NOC124-ARIN

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE51-ARIN

RNOCHandle: NOC124-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-480-505-8809
RNOCEmail: noc@godaddy.com
RNOCRef: https://whois.arin.net/rest/poc/NOC124-ARIN

RTechHandle: NOC124-ARIN
RTechName: Network Operations Center
RTechPhone: +1-480-505-8809
RTechEmail: noc@godaddy.com
RTechRef: https://whois.arin.net/rest/poc/NOC124-ARIN

RAbuseHandle: ABUSE51-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-480-624-2505
RAbuseEmail: abuse@godaddy.com
RAbuseRef: https://whois.arin.net/rest/poc/ABUSE51-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 68.105.181.140 from natural-breast-active.com

Hi,

The IP 68.105.181.140 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 68.105.181.140:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 68.105.181.140"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=68.105.181.140?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Cox Communications Inc. COX-ATLANTA-2 (NET-68-96-0-0-1) 68.96.0.0 - 68.111.255.255
Cox Communications Inc. NETBLK-BR-DSG-68-105-176-0 (NET-68-105-176-0-1) 68.105.176.0 - 68.105.191.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 54.37.158.40 from natural-breast-active.com

Hi,

The IP 54.37.158.40 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 54.37.158.40:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '54.37.156.0 - 54.37.159.255'

% Abuse contact for '54.37.156.0 - 54.37.159.255' is 'abuse@ovh.net'

inetnum: 54.37.156.0 - 54.37.159.255
netname: VPS-GRA4
country: FR
org: ORG-OS3-RIPE
admin-c: OTC2-RIPE
tech-c: OTC2-RIPE
status: LEGACY
mnt-by: OVH-MNT
created: 2017-11-24T09:10:31Z
last-modified: 2017-11-24T09:10:31Z
source: RIPE

organisation: ORG-OS3-RIPE
org-name: OVH SAS
org-type: LIR
address: 2 rue Kellermann
address: 59100
address: Roubaix
address: FRANCE
phone: +33972101007
abuse-c: AR15333-RIPE
admin-c: OTC2-RIPE
admin-c: OK217-RIPE
admin-c: GM84-RIPE
mnt-ref: OVH-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: OVH-MNT
created: 2004-04-17T11:23:17Z
last-modified: 2017-10-30T14:40:06Z
source: RIPE # Filtered

role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered

% Information related to '54.37.0.0/16AS16276'

route: 54.37.0.0/16
origin: AS16276
mnt-by: OVH-MNT
created: 2017-10-06T07:58:00Z
last-modified: 2017-10-06T07:58:00Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 89.40.126.4 from natural-breast-active.com

Hi,

The IP 89.40.126.4 has just been banned by Fail2Ban after
2 attempts against SSH.


Here is more information about 89.40.126.4:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '89.40.126.0 - 89.40.126.255'

% Abuse contact for '89.40.126.0 - 89.40.126.255' is 'abuse@staff.aruba.it'

inetnum: 89.40.126.0 - 89.40.126.255
geoloc: 50.10 8.70
netname: CLOUD-DE
descr: Cloud Services DC05
country: DE
admin-c: SS936-RIPE
tech-c: AN3450-RIPE
status: ASSIGNED PA
mnt-by: ARUBA-MNT
mnt-lower: ARUBA-MNT
mnt-routes: XANDMAIL-MNT
created: 2016-03-31T13:37:32Z
last-modified: 2016-03-31T13:37:32Z
source: RIPE

role: ARUBA NOC
address: Aruba S.p.A.
address: via S.Clemente 53
address: 24036 Ponte San Pietro (BG)
address: Italy
abuse-mailbox: abuse@staff.aruba.it
admin-c: SS936-RIPE
tech-c: SC279-RIPE
nic-hdl: AN3450-RIPE
mnt-by: ARUBA-MNT
created: 2008-11-19T19:02:34Z
last-modified: 2017-11-15T08:13:57Z
source: RIPE # Filtered

person: Susanna Santini
address: Aruba S.p.A.
address: Via S.Clemente, 53
address: 24036 Ponte San Pietro (BG)
phone: +39 0575 0505
fax-no: +39 0575 862000
nic-hdl: SS936-RIPE
mnt-by: ARUBA-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-11-15T08:14:40Z
source: RIPE # Filtered

% Information related to '89.40.124.0/22AS200185'

route: 89.40.124.0/22
descr: Aruba GmbH Cloud Network DC05
origin: AS200185
mnt-by: ARUBA-MNT
created: 2016-03-25T09:05:19Z
last-modified: 2016-03-25T09:05:19Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban