Hi,
The IP 114.119.11.198 has just been banned by Fail2Ban after
5 attempts against SSH.
Here is more information about 114.119.11.198:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '114.119.0.0 - 114.119.127.255'
% Abuse contact for '114.119.0.0 - 114.119.127.255' is 'sherry998877@163.com'
inetnum: 114.119.0.0 - 114.119.127.255
netname: SACCL
descr: Shenzhen Aosida Communication Co., Ltd.
descr: 808,8th Building,No 4 Nanyou Industry,NanShan District
country: CN
admin-c: SACC1-AP
tech-c: SACC1-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-SACCL-CN
mnt-routes: MAINT-SACCL-CN
mnt-irt: IRT-SACCL-CN
status: ALLOCATED PORTABLE
last-modified: 2014-06-27T04:59:15Z
source: APNIC
irt: IRT-SACCL-CN
address: 808,8th Building,No 4 Nanyou Industry,NanShan District, ShenZhen Guangdong Province 518000
e-mail: sherry998877@163.com
abuse-mailbox: sherry998877@163.com
admin-c: SACC1-AP
tech-c: SACC1-AP
auth: # Filtered
mnt-by: MAINT-SACCL-CN
last-modified: 2014-06-03T05:04:34Z
source: APNIC
role: Shenzhen Aosida Communication Co Ltd administra
address: 808,8th Building,No 4 Nanyou Industry,NanShan District, ShenZhen Guangdong Province 518000
country: CN
phone: +86-0755-86158808
fax-no: +86-0755-86158808
e-mail: sherry998877@163.com
admin-c: SACC1-AP
tech-c: SACC1-AP
nic-hdl: SACC1-AP
mnt-by: MAINT-SACCL-CN
last-modified: 2014-06-03T05:04:27Z
source: APNIC
% Information related to '114.119.0.0/17AS17816'
route: 114.119.0.0/17
descr: China Unicom CHINA169 Guangdong Province network
descr: Addresses from CNNIC
country: CN
origin: AS17816
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2009-02-02T03:25:12Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US3)
Regards,
Fail2Ban
Tuesday 19 June 2018
[Fail2Ban] SSH: banned 218.156.85.17 from natural-breast-active.com
Hi,
The IP 218.156.85.17 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 218.156.85.17:
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 218.156.85.17
# KOREAN(UTF8)
조회하ì&lsqauo; IPv4주소ëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 218.152.0.0 - 218.159.255.255 (/13)
기관명 : 주ì&lsqauo;회사 ì¼€ì´í&lsqauo;°
서비스명 : KORNET
주소 : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ 분ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ 90
우편번호 : 13606
í• ë&lsqauo;¹ì¼ìž : 20020305
ì´ë¦„ : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com
조회하ì&lsqauo; IPv4주소ëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------
[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 218.156.85.16 - 218.156.85.31 (/28)
기관명 : ì¤'앙방송주ì&lsqauo;회사
ë„¤íŠ¸ì›Œí¬ êµ¬ë¶„ : CUSTOMER
주소 : ì¸ì²œê´'ì—ì&lsqauo;œ ì¤'구 ìš´ì„œë™
우편번호 : 400-340
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20150317
ì´ë¦„ : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
[ Network Information ]
IPv4 Address : 218.152.0.0 - 218.159.255.255 (/13)
Organization Name : Korea Telecom
Service Name : KORNET
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code : 13606
Registration Date : 20020305
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com
--------------------------------------------------------------------------------
More specific assignment information is as follows.
[ Network Information ]
IPv4 Address : 218.156.85.16 - 218.156.85.31 (/28)
Organization Name : Jungangbangsongjusikhoesa
Network Type : CUSTOMER
Address : Unseo-Dong Jung-Gu Incheongwangyeok-Si
Zip Code : 400-340
Registration Date : 20150317
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com
- KISA/KRNIC WHOIS Service -
Regards,
Fail2Ban
The IP 218.156.85.17 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 218.156.85.17:
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 218.156.85.17
# KOREAN(UTF8)
조회하ì&lsqauo; IPv4주소ëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 218.152.0.0 - 218.159.255.255 (/13)
기관명 : 주ì&lsqauo;회사 ì¼€ì´í&lsqauo;°
서비스명 : KORNET
주소 : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ 분ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ 90
우편번호 : 13606
í• ë&lsqauo;¹ì¼ìž : 20020305
ì´ë¦„ : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com
조회하ì&lsqauo; IPv4주소ëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------
[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 218.156.85.16 - 218.156.85.31 (/28)
기관명 : ì¤'앙방송주ì&lsqauo;회사
ë„¤íŠ¸ì›Œí¬ êµ¬ë¶„ : CUSTOMER
주소 : ì¸ì²œê´'ì—ì&lsqauo;œ ì¤'구 ìš´ì„œë™
우편번호 : 400-340
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20150317
ì´ë¦„ : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
[ Network Information ]
IPv4 Address : 218.152.0.0 - 218.159.255.255 (/13)
Organization Name : Korea Telecom
Service Name : KORNET
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code : 13606
Registration Date : 20020305
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com
--------------------------------------------------------------------------------
More specific assignment information is as follows.
[ Network Information ]
IPv4 Address : 218.156.85.16 - 218.156.85.31 (/28)
Organization Name : Jungangbangsongjusikhoesa
Network Type : CUSTOMER
Address : Unseo-Dong Jung-Gu Incheongwangyeok-Si
Zip Code : 400-340
Registration Date : 20150317
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com
- KISA/KRNIC WHOIS Service -
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 92.241.103.240 from natural-breast-active.com
Hi,
The IP 92.241.103.240 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 92.241.103.240:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '92.241.103.0 - 92.241.103.255'
% Abuse contact for '92.241.103.0 - 92.241.103.255' is 'abuse@smoltelecom.ru'
inetnum: 92.241.103.0 - 92.241.103.255
netname: SMOLTELECOM-CITYCOMM-NET
descr: Smoltelecom PPPoE (static IPs for Citicomm, pool #1)
country: RU
admin-c: AS14187-RIPE
tech-c: SA5357-RIPE
status: ASSIGNED PA
mnt-by: MNT-SMOLTELECOM
created: 2011-12-27T09:35:43Z
last-modified: 2011-12-30T05:06:53Z
source: RIPE
role: Smoltelecom Admin
address: 214012, Russian Federation, Smolensk, Kashen str., 1-511
admin-c: AS14187-RIPE
admin-c: IS1687-RIPE
tech-c: AS14187-RIPE
tech-c: IS1687-RIPE
nic-hdl: SA5357-RIPE
mnt-by: MNT-SMOLTELECOM
created: 2007-12-11T06:32:54Z
last-modified: 2010-12-15T07:42:28Z
source: RIPE # Filtered
person: Anatoly Sennov
address: 214012, Russian Federation, Smolensk, Kashen str., 1-511
phone: +7(481)2328802
mnt-by: MNT-SMOLTELECOM
nic-hdl: AS14187-RIPE
created: 2007-12-10T08:20:07Z
last-modified: 2010-11-23T11:02:36Z
source: RIPE # Filtered
% Information related to '92.241.96.0/19AS44265'
route: 92.241.96.0/19
descr: RU-SMOLTELECOM-NET
origin: AS44265
mnt-by: MNT-SMOLTELECOM
created: 2008-03-12T08:52:39Z
last-modified: 2008-03-12T08:52:39Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)
Regards,
Fail2Ban
The IP 92.241.103.240 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 92.241.103.240:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '92.241.103.0 - 92.241.103.255'
% Abuse contact for '92.241.103.0 - 92.241.103.255' is 'abuse@smoltelecom.ru'
inetnum: 92.241.103.0 - 92.241.103.255
netname: SMOLTELECOM-CITYCOMM-NET
descr: Smoltelecom PPPoE (static IPs for Citicomm, pool #1)
country: RU
admin-c: AS14187-RIPE
tech-c: SA5357-RIPE
status: ASSIGNED PA
mnt-by: MNT-SMOLTELECOM
created: 2011-12-27T09:35:43Z
last-modified: 2011-12-30T05:06:53Z
source: RIPE
role: Smoltelecom Admin
address: 214012, Russian Federation, Smolensk, Kashen str., 1-511
admin-c: AS14187-RIPE
admin-c: IS1687-RIPE
tech-c: AS14187-RIPE
tech-c: IS1687-RIPE
nic-hdl: SA5357-RIPE
mnt-by: MNT-SMOLTELECOM
created: 2007-12-11T06:32:54Z
last-modified: 2010-12-15T07:42:28Z
source: RIPE # Filtered
person: Anatoly Sennov
address: 214012, Russian Federation, Smolensk, Kashen str., 1-511
phone: +7(481)2328802
mnt-by: MNT-SMOLTELECOM
nic-hdl: AS14187-RIPE
created: 2007-12-10T08:20:07Z
last-modified: 2010-11-23T11:02:36Z
source: RIPE # Filtered
% Information related to '92.241.96.0/19AS44265'
route: 92.241.96.0/19
descr: RU-SMOLTELECOM-NET
origin: AS44265
mnt-by: MNT-SMOLTELECOM
created: 2008-03-12T08:52:39Z
last-modified: 2008-03-12T08:52:39Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 124.68.10.20 from natural-breast-active.com
Hi,
The IP 124.68.10.20 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 124.68.10.20:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '124.68.0.0 - 124.68.63.255'
% Abuse contact for '124.68.0.0 - 124.68.63.255' is 'ipas@cnnic.cn'
inetnum: 124.68.0.0 - 124.68.63.255
netname: CHINACOMM
descr: CECT-CHINACOMM COMMUNICATIONS Co.,Ltd.
descr: INTERNET COMMUNICATIONS
country: CN
admin-c: ML850-AP
tech-c: LD690-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
status: ALLOCATED PORTABLE
last-modified: 2015-11-06T09:26:01Z
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-11-01T08:57:39Z
source: APNIC
person: Li Ding
nic-hdl: LD690-AP
e-mail: dingli_12@126.com
address: B904,Yuhui Mansion,No.73,Fucheng Road
address: Haidian District, Beijing, China
phone: +86-10-58256888-876
fax-no: +86-10-58256888
country: CN
mnt-by: MAINT-CNNIC-AP
last-modified: 2013-09-12T01:02:03Z
source: APNIC
person: Ma Liming
nic-hdl: ML850-AP
e-mail: cect-ipmaster@163.com
address: B904,Yuhui Mansion,No.73,Fucheng Road,
address: Haidian District, Beijing, China
phone: +86-10-64169966
fax-no: +86-10-64163632
country: CN
mnt-by: MAINT-CNNIC-AP
last-modified: 2013-12-27T01:20:02Z
source: APNIC
% Information related to '124.68.0.0/17AS4837'
route: 124.68.0.0/17
descr: China Unicom Tianjin Province network
descr: Addresses from CNNIC
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2009-06-24T09:00:49Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
The IP 124.68.10.20 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 124.68.10.20:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '124.68.0.0 - 124.68.63.255'
% Abuse contact for '124.68.0.0 - 124.68.63.255' is 'ipas@cnnic.cn'
inetnum: 124.68.0.0 - 124.68.63.255
netname: CHINACOMM
descr: CECT-CHINACOMM COMMUNICATIONS Co.,Ltd.
descr: INTERNET COMMUNICATIONS
country: CN
admin-c: ML850-AP
tech-c: LD690-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
status: ALLOCATED PORTABLE
last-modified: 2015-11-06T09:26:01Z
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-11-01T08:57:39Z
source: APNIC
person: Li Ding
nic-hdl: LD690-AP
e-mail: dingli_12@126.com
address: B904,Yuhui Mansion,No.73,Fucheng Road
address: Haidian District, Beijing, China
phone: +86-10-58256888-876
fax-no: +86-10-58256888
country: CN
mnt-by: MAINT-CNNIC-AP
last-modified: 2013-09-12T01:02:03Z
source: APNIC
person: Ma Liming
nic-hdl: ML850-AP
e-mail: cect-ipmaster@163.com
address: B904,Yuhui Mansion,No.73,Fucheng Road,
address: Haidian District, Beijing, China
phone: +86-10-64169966
fax-no: +86-10-64163632
country: CN
mnt-by: MAINT-CNNIC-AP
last-modified: 2013-12-27T01:20:02Z
source: APNIC
% Information related to '124.68.0.0/17AS4837'
route: 124.68.0.0/17
descr: China Unicom Tianjin Province network
descr: Addresses from CNNIC
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2009-06-24T09:00:49Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 62.107.62.87 from natural-breast-active.com
Hi,
The IP 62.107.62.87 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 62.107.62.87:
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '62.107.0.0 - 62.107.63.255'
% Abuse contact for '62.107.0.0 - 62.107.63.255' is 'abuse@stofanet.dk'
inetnum: 62.107.0.0 - 62.107.63.255
netname: STOFANET-AARH-NET-1
descr: Stofa A/S
descr: Cable operator
country: DK
admin-c: SA958-RIPE
tech-c: SA958-RIPE
remarks: rev-srv: ns1.stofanet.dk
remarks: rev-srv: ns2.stofanet.dk
status: ASSIGNED PA
mnt-by: STOFA-MNT
created: 2002-07-22T13:38:30Z
last-modified: 2013-07-05T06:49:33Z
source: RIPE
remarks: rev-srv attribute deprecated by RIPE NCC on 02/09/2009
role: Stofa AS
address: Stofa A/S
address: Slet Parkvej 5-7
address: DK-8310 Tranbjerg
address: Denmark
phone: +45 88 30 30 30
fax-no: +45 88 13 15 56
abuse-mailbox: abuse@stofanet.dk
admin-c: JANC4-RIPE
tech-c: JANC4-RIPE
nic-hdl: SA958-RIPE
remarks: For reporting network abuse, security issues, or spam,
remarks: send e-mail to abuse@stofanet.dk.
mnt-by: STOFA-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2018-02-16T11:38:49Z
source: RIPE # Filtered
% Information related to '62.107.0.0/16AS197288'
route: 62.107.0.0/16
descr: STOFA A/S
origin: AS197288
mnt-by: STOFA-MNT
mnt-by: DK-ESS-MNT
created: 2011-12-12T12:50:41Z
last-modified: 2014-06-13T10:53:45Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)
Regards,
Fail2Ban
The IP 62.107.62.87 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 62.107.62.87:
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '62.107.0.0 - 62.107.63.255'
% Abuse contact for '62.107.0.0 - 62.107.63.255' is 'abuse@stofanet.dk'
inetnum: 62.107.0.0 - 62.107.63.255
netname: STOFANET-AARH-NET-1
descr: Stofa A/S
descr: Cable operator
country: DK
admin-c: SA958-RIPE
tech-c: SA958-RIPE
remarks: rev-srv: ns1.stofanet.dk
remarks: rev-srv: ns2.stofanet.dk
status: ASSIGNED PA
mnt-by: STOFA-MNT
created: 2002-07-22T13:38:30Z
last-modified: 2013-07-05T06:49:33Z
source: RIPE
remarks: rev-srv attribute deprecated by RIPE NCC on 02/09/2009
role: Stofa AS
address: Stofa A/S
address: Slet Parkvej 5-7
address: DK-8310 Tranbjerg
address: Denmark
phone: +45 88 30 30 30
fax-no: +45 88 13 15 56
abuse-mailbox: abuse@stofanet.dk
admin-c: JANC4-RIPE
tech-c: JANC4-RIPE
nic-hdl: SA958-RIPE
remarks: For reporting network abuse, security issues, or spam,
remarks: send e-mail to abuse@stofanet.dk.
mnt-by: STOFA-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2018-02-16T11:38:49Z
source: RIPE # Filtered
% Information related to '62.107.0.0/16AS197288'
route: 62.107.0.0/16
descr: STOFA A/S
origin: AS197288
mnt-by: STOFA-MNT
mnt-by: DK-ESS-MNT
created: 2011-12-12T12:50:41Z
last-modified: 2014-06-13T10:53:45Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 208.113.131.35 from herbalyzer.com
Hi,
The IP 208.113.131.35 has just been banned by Fail2Ban after
5 attempts against SSH.
Here is more information about 208.113.131.35:
[Querying whois.arin.net]
[whois.arin.net]
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 208.113.131.35"
#
# Use "?" to get help.
#
NetRange: 208.113.128.0 - 208.113.255.255
CIDR: 208.113.128.0/17
NetName: DREAMHOST-BLK6
NetHandle: NET-208-113-128-0-1
Parent: NET208 (NET-208-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: New Dream Network, LLC (NDN)
RegDate: 2006-04-12
Updated: 2012-03-02
Ref: https://whois.arin.net/rest/net/NET-208-113-128-0-1
OrgName: New Dream Network, LLC
OrgId: NDN
Address: 417 Associated Rd.
Address: PMB #257
City: Brea
StateProv: CA
PostalCode: 92821
Country: US
RegDate: 2001-04-16
Updated: 2017-01-28
Comment: Address location was created regardless of geographic location.
Ref: https://whois.arin.net/rest/org/NDN
OrgNOCHandle: NETOP274-ARIN
OrgNOCName: NetOPs
OrgNOCPhone: +1-714-706-4182
OrgNOCEmail: netops@dreamhost.com
OrgNOCRef: https://whois.arin.net/rest/poc/NETOP274-ARIN
OrgTechHandle: NETOP274-ARIN
OrgTechName: NetOPs
OrgTechPhone: +1-714-706-4182
OrgTechEmail: netops@dreamhost.com
OrgTechRef: https://whois.arin.net/rest/poc/NETOP274-ARIN
OrgAbuseHandle: DAT5-ARIN
OrgAbuseName: DreamHost Abuse Team
OrgAbusePhone: +1-714-706-4182
OrgAbuseEmail: abuse@dreamhost.com
OrgAbuseRef: https://whois.arin.net/rest/poc/DAT5-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#
Regards,
Fail2Ban
The IP 208.113.131.35 has just been banned by Fail2Ban after
5 attempts against SSH.
Here is more information about 208.113.131.35:
[Querying whois.arin.net]
[whois.arin.net]
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 208.113.131.35"
#
# Use "?" to get help.
#
NetRange: 208.113.128.0 - 208.113.255.255
CIDR: 208.113.128.0/17
NetName: DREAMHOST-BLK6
NetHandle: NET-208-113-128-0-1
Parent: NET208 (NET-208-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: New Dream Network, LLC (NDN)
RegDate: 2006-04-12
Updated: 2012-03-02
Ref: https://whois.arin.net/rest/net/NET-208-113-128-0-1
OrgName: New Dream Network, LLC
OrgId: NDN
Address: 417 Associated Rd.
Address: PMB #257
City: Brea
StateProv: CA
PostalCode: 92821
Country: US
RegDate: 2001-04-16
Updated: 2017-01-28
Comment: Address location was created regardless of geographic location.
Ref: https://whois.arin.net/rest/org/NDN
OrgNOCHandle: NETOP274-ARIN
OrgNOCName: NetOPs
OrgNOCPhone: +1-714-706-4182
OrgNOCEmail: netops@dreamhost.com
OrgNOCRef: https://whois.arin.net/rest/poc/NETOP274-ARIN
OrgTechHandle: NETOP274-ARIN
OrgTechName: NetOPs
OrgTechPhone: +1-714-706-4182
OrgTechEmail: netops@dreamhost.com
OrgTechRef: https://whois.arin.net/rest/poc/NETOP274-ARIN
OrgAbuseHandle: DAT5-ARIN
OrgAbuseName: DreamHost Abuse Team
OrgAbusePhone: +1-714-706-4182
OrgAbuseEmail: abuse@dreamhost.com
OrgAbuseRef: https://whois.arin.net/rest/poc/DAT5-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 116.199.168.34 from herbalyzer.com
Hi,
The IP 116.199.168.34 has just been banned by Fail2Ban after
5 attempts against SSH.
Here is more information about 116.199.168.34:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '116.199.168.34 - 116.199.168.34'
% Abuse contact for '116.199.168.34 - 116.199.168.34' is 'netabuse@capturenetworks.com'
inetnum: 116.199.168.34 - 116.199.168.34
netname: CAPTURE-9-NET-IN
descr: CAPTURE NETWORK SYSTEMS PVT. LTD.
country: IN
admin-c: CNSP1-AP
tech-c: CNSP1-AP
status: ALLOCATED NON-PORTABLE
remarks: Broadband
mnt-by: MAINT-CAPTURE-9-NET-IN
mnt-lower: MAINT-CAPTURE-9-NET-IN
mnt-routes: MAINT-CAPTURE-9-NET-IN
mnt-irt: IRT-CAPTURE-9-NET-IN
last-modified: 2013-04-08T10:07:07Z
source: APNIC
irt: IRT-CAPTURE-9-NET-IN
address: B/217, Rolex Shopping Center, Station Road, Goregaon (w), Mumbai 400062, India
e-mail: netabuse@capturenetworks.com
abuse-mailbox: netabuse@capturenetworks.com
admin-c: CNSP1-AP
tech-c: CNSP1-AP
auth: # Filtered
mnt-by: MAINT-CAPTURE-9-NET-IN
last-modified: 2014-10-10T09:46:21Z
source: APNIC
role: CAPTURE NETWORK SYSTEMS PVT LTD - network admini
address: B/217, Rolex Shopping Center, Station Road, Goregaon (w), Mumbai 400062, India
country: IN
phone: +91 22 28754693
e-mail: milan@capturenetworks.com
admin-c: CNSP1-AP
tech-c: CNSP1-AP
nic-hdl: CNSP1-AP
mnt-by: MAINT-CAPTURE-9-NET-IN
last-modified: 2009-03-05T02:07:50Z
source: APNIC
% Information related to '116.199.168.0/24AS45661'
route: 116.199.168.0/24
descr: route object for 116.199.168.0/24
route object for 116.199.169.0/24
route object for 116.199.170.0/24
origin: AS45661
mnt-by: MAINT-CAPTURE-9-NET-IN
last-modified: 2010-12-10T11:04:33Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US3)
Regards,
Fail2Ban
The IP 116.199.168.34 has just been banned by Fail2Ban after
5 attempts against SSH.
Here is more information about 116.199.168.34:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '116.199.168.34 - 116.199.168.34'
% Abuse contact for '116.199.168.34 - 116.199.168.34' is 'netabuse@capturenetworks.com'
inetnum: 116.199.168.34 - 116.199.168.34
netname: CAPTURE-9-NET-IN
descr: CAPTURE NETWORK SYSTEMS PVT. LTD.
country: IN
admin-c: CNSP1-AP
tech-c: CNSP1-AP
status: ALLOCATED NON-PORTABLE
remarks: Broadband
mnt-by: MAINT-CAPTURE-9-NET-IN
mnt-lower: MAINT-CAPTURE-9-NET-IN
mnt-routes: MAINT-CAPTURE-9-NET-IN
mnt-irt: IRT-CAPTURE-9-NET-IN
last-modified: 2013-04-08T10:07:07Z
source: APNIC
irt: IRT-CAPTURE-9-NET-IN
address: B/217, Rolex Shopping Center, Station Road, Goregaon (w), Mumbai 400062, India
e-mail: netabuse@capturenetworks.com
abuse-mailbox: netabuse@capturenetworks.com
admin-c: CNSP1-AP
tech-c: CNSP1-AP
auth: # Filtered
mnt-by: MAINT-CAPTURE-9-NET-IN
last-modified: 2014-10-10T09:46:21Z
source: APNIC
role: CAPTURE NETWORK SYSTEMS PVT LTD - network admini
address: B/217, Rolex Shopping Center, Station Road, Goregaon (w), Mumbai 400062, India
country: IN
phone: +91 22 28754693
e-mail: milan@capturenetworks.com
admin-c: CNSP1-AP
tech-c: CNSP1-AP
nic-hdl: CNSP1-AP
mnt-by: MAINT-CAPTURE-9-NET-IN
last-modified: 2009-03-05T02:07:50Z
source: APNIC
% Information related to '116.199.168.0/24AS45661'
route: 116.199.168.0/24
descr: route object for 116.199.168.0/24
route object for 116.199.169.0/24
route object for 116.199.170.0/24
origin: AS45661
mnt-by: MAINT-CAPTURE-9-NET-IN
last-modified: 2010-12-10T11:04:33Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 178.33.182.230 from natural-breast-active.com
Hi,
The IP 178.33.182.230 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 178.33.182.230:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '178.33.182.228 - 178.33.182.231'
% Abuse contact for '178.33.182.228 - 178.33.182.231' is 'abuse@ovh.net'
inetnum: 178.33.182.228 - 178.33.182.231
netname: mgmsystems-ext2
descr: MGM Systems external infrastructure
country: PL
org: ORG-OS23-RIPE
admin-c: OTC12-RIPE
tech-c: OTC12-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
created: 2012-01-23T14:13:03Z
last-modified: 2012-01-23T14:13:03Z
source: RIPE
organisation: ORG-OS23-RIPE
org-name: OVH Sp. z o. o.
org-type: OTHER
address: Ul. Szkocka 5 lok. 1
address: 54-402 Wroclaw
address: Poland
admin-c: OTC2-RIPE
mnt-ref: OVH-MNT
mnt-by: OVH-MNT
created: 2005-09-02T12:40:01Z
last-modified: 2017-10-30T16:09:25Z
source: RIPE # Filtered
role: OVH PL Technical Contact
address: OVH Sp. z o. o.
address: Ul. Szkocka 5 lok. 1
address: 54-402 Wroclaw
address: Poland
admin-c: OK217-RIPE
tech-c: GM84-RIPE
nic-hdl: OTC12-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2009-09-16T16:09:56Z
last-modified: 2013-10-30T11:40:58Z
source: RIPE # Filtered
% Information related to '178.32.0.0/15AS16276'
route: 178.32.0.0/15
descr: OVH ISP
descr: Paris, France
origin: AS16276
mnt-by: OVH-MNT
created: 2010-01-19T16:39:43Z
last-modified: 2010-01-19T16:39:43Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)
Regards,
Fail2Ban
The IP 178.33.182.230 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 178.33.182.230:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '178.33.182.228 - 178.33.182.231'
% Abuse contact for '178.33.182.228 - 178.33.182.231' is 'abuse@ovh.net'
inetnum: 178.33.182.228 - 178.33.182.231
netname: mgmsystems-ext2
descr: MGM Systems external infrastructure
country: PL
org: ORG-OS23-RIPE
admin-c: OTC12-RIPE
tech-c: OTC12-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
created: 2012-01-23T14:13:03Z
last-modified: 2012-01-23T14:13:03Z
source: RIPE
organisation: ORG-OS23-RIPE
org-name: OVH Sp. z o. o.
org-type: OTHER
address: Ul. Szkocka 5 lok. 1
address: 54-402 Wroclaw
address: Poland
admin-c: OTC2-RIPE
mnt-ref: OVH-MNT
mnt-by: OVH-MNT
created: 2005-09-02T12:40:01Z
last-modified: 2017-10-30T16:09:25Z
source: RIPE # Filtered
role: OVH PL Technical Contact
address: OVH Sp. z o. o.
address: Ul. Szkocka 5 lok. 1
address: 54-402 Wroclaw
address: Poland
admin-c: OK217-RIPE
tech-c: GM84-RIPE
nic-hdl: OTC12-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2009-09-16T16:09:56Z
last-modified: 2013-10-30T11:40:58Z
source: RIPE # Filtered
% Information related to '178.32.0.0/15AS16276'
route: 178.32.0.0/15
descr: OVH ISP
descr: Paris, France
origin: AS16276
mnt-by: OVH-MNT
created: 2010-01-19T16:39:43Z
last-modified: 2010-01-19T16:39:43Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 120.195.20.232 from natural-breast-active.com
Hi,
The IP 120.195.20.232 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 120.195.20.232:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '120.192.0.0 - 120.255.255.255'
% Abuse contact for '120.192.0.0 - 120.255.255.255' is 'abuse@chinamobile.com'
inetnum: 120.192.0.0 - 120.255.255.255
netname: CMNET
descr: China Mobile Communications Corporation
descr: Mobile Communications Network Operator in China
descr: Internet Service Provider in China
country: CN
org: ORG-CM1-AP
admin-c: JS686-AP
tech-c: HL1318-AP
remarks: service provider
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CN-CMCC
mnt-routes: MAINT-CN-CMCC
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
last-modified: 2017-08-30T07:22:04Z
source: APNIC
mnt-irt: IRT-CHINAMOBILE-CN
irt: IRT-CHINAMOBILE-CN
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail: abuse@chinamobile.com
abuse-mailbox: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
auth: # Filtered
mnt-by: MAINT-CN-CMCC
last-modified: 2014-11-18T02:41:02Z
source: APNIC
organisation: ORG-CM1-AP
org-name: China Mobile
country: CN
address: 29, Jinrong Ave.
phone: +86-10-5260-6688
fax-no: +86-10-5261-6187
e-mail: hostmaster@chinamobile.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2017-08-23T12:56:36Z
source: APNIC
person: haijun li
nic-hdl: HL1318-AP
e-mail: hostmaster@chinamobile.com
address: 29,Jinrong Ave, Xicheng district,beijing,100032
phone: +86 1052686688
fax-no: +86 10 52616187
country: CN
mnt-by: MAINT-CN-CMCC
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:38:38Z
source: APNIC
person: Jinxia Sun
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
country: CN
phone: +86-10-52686688
fax-no: +86-10-66006012
e-mail: hostmaster@chinamobile.com
nic-hdl: JS686-AP
remarks: ------------------------------
remarks: Please send abuse e-mail to
remarks: abuse@chinamobile.com
remarks: Please send probe e-mail to
remarks: security@chinamobile.com
remarks: -------------------------------
mnt-by: MAINT-CN-CMCC
last-modified: 2014-11-18T02:47:03Z
source: APNIC
% Information related to '120.192.0.0/11AS9808'
route: 120.192.0.0/11
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
last-modified: 2008-11-05T07:31:17Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
The IP 120.195.20.232 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 120.195.20.232:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '120.192.0.0 - 120.255.255.255'
% Abuse contact for '120.192.0.0 - 120.255.255.255' is 'abuse@chinamobile.com'
inetnum: 120.192.0.0 - 120.255.255.255
netname: CMNET
descr: China Mobile Communications Corporation
descr: Mobile Communications Network Operator in China
descr: Internet Service Provider in China
country: CN
org: ORG-CM1-AP
admin-c: JS686-AP
tech-c: HL1318-AP
remarks: service provider
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CN-CMCC
mnt-routes: MAINT-CN-CMCC
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
last-modified: 2017-08-30T07:22:04Z
source: APNIC
mnt-irt: IRT-CHINAMOBILE-CN
irt: IRT-CHINAMOBILE-CN
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail: abuse@chinamobile.com
abuse-mailbox: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
auth: # Filtered
mnt-by: MAINT-CN-CMCC
last-modified: 2014-11-18T02:41:02Z
source: APNIC
organisation: ORG-CM1-AP
org-name: China Mobile
country: CN
address: 29, Jinrong Ave.
phone: +86-10-5260-6688
fax-no: +86-10-5261-6187
e-mail: hostmaster@chinamobile.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2017-08-23T12:56:36Z
source: APNIC
person: haijun li
nic-hdl: HL1318-AP
e-mail: hostmaster@chinamobile.com
address: 29,Jinrong Ave, Xicheng district,beijing,100032
phone: +86 1052686688
fax-no: +86 10 52616187
country: CN
mnt-by: MAINT-CN-CMCC
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:38:38Z
source: APNIC
person: Jinxia Sun
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
country: CN
phone: +86-10-52686688
fax-no: +86-10-66006012
e-mail: hostmaster@chinamobile.com
nic-hdl: JS686-AP
remarks: ------------------------------
remarks: Please send abuse e-mail to
remarks: abuse@chinamobile.com
remarks: Please send probe e-mail to
remarks: security@chinamobile.com
remarks: -------------------------------
mnt-by: MAINT-CN-CMCC
last-modified: 2014-11-18T02:47:03Z
source: APNIC
% Information related to '120.192.0.0/11AS9808'
route: 120.192.0.0/11
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
last-modified: 2008-11-05T07:31:17Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 1.234.79.66 from natural-breast-active.com
Hi,
The IP 1.234.79.66 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 1.234.79.66:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 1.234.79.66
# KOREAN(UTF8)
조회하ì&lsqauo; IPv4주소ëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 1.234.0.0 - 1.255.255.255 (/12+/14+/15)
기관명 : ì—스케ì´ë¸Œë¡œë"œë°´ë"œì£¼ì&lsqauo;회사
서비스명 : broadNnet
주소 : 서울특별ì&lsqauo;œ ì¤'구 퇴계로 24
우편번호 : 04637
í• ë&lsqauo;¹ì¼ìž : 20100726
ì´ë¦„ : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com
조회하ì&lsqauo; IPv4주소ëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------
[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 1.234.79.0 - 1.234.79.255 (/24)
기관명 : ì—스케ì´ë¸Œë¡œë"œë°´ë"œì£¼ì&lsqauo;회사
ë„¤íŠ¸ì›Œí¬ êµ¬ë¶„ : INFRA
주소 : 서울특별ì&lsqauo;œ ì¤'구 퇴계로
우편번호 : 04637
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20120713
ì´ë¦„ : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
[ Network Information ]
IPv4 Address : 1.234.0.0 - 1.255.255.255 (/12+/14+/15)
Organization Name : SK Broadband Co Ltd
Service Name : broadNnet
Address : Seoul Jung-gu Toegye-ro 24
Zip Code : 04637
Registration Date : 20100726
Name : IP Manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com
--------------------------------------------------------------------------------
More specific assignment information is as follows.
[ Network Information ]
IPv4 Address : 1.234.79.0 - 1.234.79.255 (/24)
Organization Name : SK Broadband Co Ltd
Network Type : INFRA
Address : Seoul Jung-gu Toegye-ro
Zip Code : 04637
Registration Date : 20120713
Name : IP Manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com
- KISA/KRNIC WHOIS Service -
Regards,
Fail2Ban
The IP 1.234.79.66 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 1.234.79.66:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 1.234.79.66
# KOREAN(UTF8)
조회하ì&lsqauo; IPv4주소ëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 1.234.0.0 - 1.255.255.255 (/12+/14+/15)
기관명 : ì—스케ì´ë¸Œë¡œë"œë°´ë"œì£¼ì&lsqauo;회사
서비스명 : broadNnet
주소 : 서울특별ì&lsqauo;œ ì¤'구 퇴계로 24
우편번호 : 04637
í• ë&lsqauo;¹ì¼ìž : 20100726
ì´ë¦„ : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com
조회하ì&lsqauo; IPv4주소ëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------
[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 1.234.79.0 - 1.234.79.255 (/24)
기관명 : ì—스케ì´ë¸Œë¡œë"œë°´ë"œì£¼ì&lsqauo;회사
ë„¤íŠ¸ì›Œí¬ êµ¬ë¶„ : INFRA
주소 : 서울특별ì&lsqauo;œ ì¤'구 퇴계로
우편번호 : 04637
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20120713
ì´ë¦„ : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-106-2
ì „ìžìš°íŽ¸ : ip-adm@skbroadband.com
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
[ Network Information ]
IPv4 Address : 1.234.0.0 - 1.255.255.255 (/12+/14+/15)
Organization Name : SK Broadband Co Ltd
Service Name : broadNnet
Address : Seoul Jung-gu Toegye-ro 24
Zip Code : 04637
Registration Date : 20100726
Name : IP Manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com
--------------------------------------------------------------------------------
More specific assignment information is as follows.
[ Network Information ]
IPv4 Address : 1.234.79.0 - 1.234.79.255 (/24)
Organization Name : SK Broadband Co Ltd
Network Type : INFRA
Address : Seoul Jung-gu Toegye-ro
Zip Code : 04637
Registration Date : 20120713
Name : IP Manager
Phone : +82-2-106-2
E-Mail : ip-adm@skbroadband.com
- KISA/KRNIC WHOIS Service -
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 116.253.146.218 from herbalyzer.com
Hi,
The IP 116.253.146.218 has just been banned by Fail2Ban after
5 attempts against SSH.
Here is more information about 116.253.146.218:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '116.252.0.0 - 116.253.255.255'
% Abuse contact for '116.252.0.0 - 116.253.255.255' is 'anti-spam@ns.chinanet.cn.net'
inetnum: 116.252.0.0 - 116.253.255.255
netname: CHINANET-GX
descr: CHINANET Guangxi province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CR76-AP
tech-c: BD37-AP
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-GX
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
last-modified: 2016-05-04T00:07:40Z
source: APNIC
mnt-irt: IRT-CHINANET-CN
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC
person: Bin Deng
nic-hdl: BD37-AP
e-mail: nocsjz@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2835112
fax-no: +86-771-2839278
country: CN
mnt-by: MAINT-CHINANET-GX
last-modified: 2016-05-04T02:31:23Z
source: APNIC
person: Cailing Ruan
nic-hdl: CR76-AP
e-mail: nocsjz@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2815987
fax-no: +86-771-2839278
country: CN
mnt-by: MAINT-CHINANET-GX
last-modified: 2016-05-04T02:30:06Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US3)
Regards,
Fail2Ban
The IP 116.253.146.218 has just been banned by Fail2Ban after
5 attempts against SSH.
Here is more information about 116.253.146.218:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '116.252.0.0 - 116.253.255.255'
% Abuse contact for '116.252.0.0 - 116.253.255.255' is 'anti-spam@ns.chinanet.cn.net'
inetnum: 116.252.0.0 - 116.253.255.255
netname: CHINANET-GX
descr: CHINANET Guangxi province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CR76-AP
tech-c: BD37-AP
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-GX
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
last-modified: 2016-05-04T00:07:40Z
source: APNIC
mnt-irt: IRT-CHINANET-CN
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC
person: Bin Deng
nic-hdl: BD37-AP
e-mail: nocsjz@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2835112
fax-no: +86-771-2839278
country: CN
mnt-by: MAINT-CHINANET-GX
last-modified: 2016-05-04T02:31:23Z
source: APNIC
person: Cailing Ruan
nic-hdl: CR76-AP
e-mail: nocsjz@189.cn
address: Guangxi data comm.Bureau
address: 35 Minzhu Road
address: Nanning city
address: Guangxi 530015 China
phone: +86-771-2815987
fax-no: +86-771-2839278
country: CN
mnt-by: MAINT-CHINANET-GX
last-modified: 2016-05-04T02:30:06Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 210.96.184.226 from natural-breast-active.com
Hi,
The IP 210.96.184.226 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 210.96.184.226:
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 210.96.184.226
# KOREAN(UTF8)
조회하ì&lsqauo; IPv4주소ëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 210.96.128.0 - 210.96.255.255 (/17)
기관명 : (주)ì—˜ì§€ìœ í"ŒëŸ¬ìŠ¤
서비스명 : BORANET
주소 : 서울특별ì&lsqauo;œ 용산구 한강대로 32
우편번호 : 04389
í• ë&lsqauo;¹ì¼ìž : 20030402
ì´ë¦„ : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-10-1
ì „ìžìš°íŽ¸ : ipadm@lguplus.co.kr
--------------------------------------------------------------------------------
조회하ì&lsqauo; IPv4ì£¼ì†Œì— ëŒ€í•œ 위 관리대행ìžì˜ ì‚¬ìš©ìž í• ë&lsqauo;¹ì •ë³´ê°€ 존재하지 않습ë&lsqauo;ˆë&lsqauo;¤.
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
[ Network Information ]
IPv4 Address : 210.96.128.0 - 210.96.255.255 (/17)
Organization Name : LG DACOM Corporation
Service Name : BORANET
Address : Seoul Yongsan-gu Hangang-daero 32
Zip Code : 04389
Registration Date : 20030402
Name : IP Manager
Phone : +82-2-10-1
E-Mail : ipadm@lguplus.co.kr
- KISA/KRNIC WHOIS Service -
Regards,
Fail2Ban
The IP 210.96.184.226 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 210.96.184.226:
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 210.96.184.226
# KOREAN(UTF8)
조회하ì&lsqauo; IPv4주소ëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 210.96.128.0 - 210.96.255.255 (/17)
기관명 : (주)ì—˜ì§€ìœ í"ŒëŸ¬ìŠ¤
서비스명 : BORANET
주소 : 서울특별ì&lsqauo;œ 용산구 한강대로 32
우편번호 : 04389
í• ë&lsqauo;¹ì¼ìž : 20030402
ì´ë¦„ : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-10-1
ì „ìžìš°íŽ¸ : ipadm@lguplus.co.kr
--------------------------------------------------------------------------------
조회하ì&lsqauo; IPv4ì£¼ì†Œì— ëŒ€í•œ 위 관리대행ìžì˜ ì‚¬ìš©ìž í• ë&lsqauo;¹ì •ë³´ê°€ 존재하지 않습ë&lsqauo;ˆë&lsqauo;¤.
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
[ Network Information ]
IPv4 Address : 210.96.128.0 - 210.96.255.255 (/17)
Organization Name : LG DACOM Corporation
Service Name : BORANET
Address : Seoul Yongsan-gu Hangang-daero 32
Zip Code : 04389
Registration Date : 20030402
Name : IP Manager
Phone : +82-2-10-1
E-Mail : ipadm@lguplus.co.kr
- KISA/KRNIC WHOIS Service -
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 176.31.187.204 from natural-breast-active.com
Hi,
The IP 176.31.187.204 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 176.31.187.204:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '176.31.0.0 - 176.31.255.255'
% Abuse contact for '176.31.0.0 - 176.31.255.255' is 'abuse@ovh.net'
inetnum: 176.31.0.0 - 176.31.255.255
netname: FR-OVH-20110520
country: FR
org: ORG-OS3-RIPE
admin-c: OK217-RIPE
tech-c: OTC2-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: OVH-MNT
mnt-routes: OVH-MNT
mnt-domains: OVH-MNT
created: 2011-05-20T12:37:48Z
last-modified: 2017-01-11T08:00:06Z
source: RIPE # Filtered
organisation: ORG-OS3-RIPE
org-name: OVH SAS
org-type: LIR
address: 2 rue Kellermann
address: 59100
address: Roubaix
address: FRANCE
phone: +33972101007
abuse-c: AR15333-RIPE
admin-c: OTC2-RIPE
admin-c: OK217-RIPE
admin-c: GM84-RIPE
mnt-ref: OVH-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: OVH-MNT
created: 2004-04-17T11:23:17Z
last-modified: 2017-10-30T14:40:06Z
source: RIPE # Filtered
role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered
person: Octave Klaba
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
phone: +33 9 74 53 13 23
nic-hdl: OK217-RIPE
mnt-by: OVH-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-10-30T21:44:51Z
source: RIPE # Filtered
% Information related to '176.31.184.0/22AS16276'
route: 176.31.184.0/22
descr: OVH
origin: AS16276
mnt-by: OVH-MNT
created: 2012-02-09T14:07:43Z
last-modified: 2012-02-09T14:07:43Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)
Regards,
Fail2Ban
The IP 176.31.187.204 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 176.31.187.204:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '176.31.0.0 - 176.31.255.255'
% Abuse contact for '176.31.0.0 - 176.31.255.255' is 'abuse@ovh.net'
inetnum: 176.31.0.0 - 176.31.255.255
netname: FR-OVH-20110520
country: FR
org: ORG-OS3-RIPE
admin-c: OK217-RIPE
tech-c: OTC2-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: OVH-MNT
mnt-routes: OVH-MNT
mnt-domains: OVH-MNT
created: 2011-05-20T12:37:48Z
last-modified: 2017-01-11T08:00:06Z
source: RIPE # Filtered
organisation: ORG-OS3-RIPE
org-name: OVH SAS
org-type: LIR
address: 2 rue Kellermann
address: 59100
address: Roubaix
address: FRANCE
phone: +33972101007
abuse-c: AR15333-RIPE
admin-c: OTC2-RIPE
admin-c: OK217-RIPE
admin-c: GM84-RIPE
mnt-ref: OVH-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: OVH-MNT
created: 2004-04-17T11:23:17Z
last-modified: 2017-10-30T14:40:06Z
source: RIPE # Filtered
role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered
person: Octave Klaba
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
phone: +33 9 74 53 13 23
nic-hdl: OK217-RIPE
mnt-by: OVH-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-10-30T21:44:51Z
source: RIPE # Filtered
% Information related to '176.31.184.0/22AS16276'
route: 176.31.184.0/22
descr: OVH
origin: AS16276
mnt-by: OVH-MNT
created: 2012-02-09T14:07:43Z
last-modified: 2012-02-09T14:07:43Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 118.193.234.94 from natural-breast-active.com
Hi,
The IP 118.193.234.94 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 118.193.234.94:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '118.193.128.0 - 118.193.255.255'
% Abuse contact for '118.193.128.0 - 118.193.255.255' is 'ip@cnispgroup.com'
inetnum: 118.193.128.0 - 118.193.255.255
netname: ANCHNET
descr: Shanghai Anchnet Network Technology Stock Co.,Ltd
descr: Building 4,NO.1 West Hulan Road,Shanghai,PRC
country: CN
admin-c: CJ2546-AP
tech-c: JY3624-AP
status: allocated non-portable
mnt-by: MAINT-AP-CNISP
mnt-irt: IRT-CNISP-CN
last-modified: 2017-04-19T07:46:19Z
source: APNIC
irt: IRT-CNISP-CN
address: Beijing CNISP Technology Co., Ltd
e-mail: ip@cnispgroup.com
abuse-mailbox: ip@cnispgroup.com
admin-c: CM2275-AP
tech-c: CM2275-AP
auth: # Filtered
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-03T07:08:38Z
source: APNIC
person: CINDY JIANG
address: Building 4,NO.1 West Hulan Road,Shanghai,PRC
address: ANCHANG
country: CN
phone: +86-21-60832266-6617
e-mail: purchase@51idc.com
nic-hdl: CJ2546-AP
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-22T02:25:12Z
source: APNIC
person: JIANG YUANMING
address: Building 4,NO.1 West Hulan Road,Shanghai,PRC
address: ANCHANG
country: CN
phone: +86-21-60832266-8855
e-mail: anch-global-noc@service-51idc.com
nic-hdl: JY3624-AP
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-22T02:26:15Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
The IP 118.193.234.94 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 118.193.234.94:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '118.193.128.0 - 118.193.255.255'
% Abuse contact for '118.193.128.0 - 118.193.255.255' is 'ip@cnispgroup.com'
inetnum: 118.193.128.0 - 118.193.255.255
netname: ANCHNET
descr: Shanghai Anchnet Network Technology Stock Co.,Ltd
descr: Building 4,NO.1 West Hulan Road,Shanghai,PRC
country: CN
admin-c: CJ2546-AP
tech-c: JY3624-AP
status: allocated non-portable
mnt-by: MAINT-AP-CNISP
mnt-irt: IRT-CNISP-CN
last-modified: 2017-04-19T07:46:19Z
source: APNIC
irt: IRT-CNISP-CN
address: Beijing CNISP Technology Co., Ltd
e-mail: ip@cnispgroup.com
abuse-mailbox: ip@cnispgroup.com
admin-c: CM2275-AP
tech-c: CM2275-AP
auth: # Filtered
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-03T07:08:38Z
source: APNIC
person: CINDY JIANG
address: Building 4,NO.1 West Hulan Road,Shanghai,PRC
address: ANCHANG
country: CN
phone: +86-21-60832266-6617
e-mail: purchase@51idc.com
nic-hdl: CJ2546-AP
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-22T02:25:12Z
source: APNIC
person: JIANG YUANMING
address: Building 4,NO.1 West Hulan Road,Shanghai,PRC
address: ANCHANG
country: CN
phone: +86-21-60832266-8855
e-mail: anch-global-noc@service-51idc.com
nic-hdl: JY3624-AP
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-22T02:26:15Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 139.162.122.110 from natural-breast-active.com
Hi,
The IP 139.162.122.110 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 139.162.122.110:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '139.162.0.0 - 139.162.255.255'
% Abuse contact for '139.162.0.0 - 139.162.255.255' is 'abuse@linode.com'
inetnum: 139.162.0.0 - 139.162.255.255
netname: EU-LINODE-20141229
descr: 139.162.0.0/16
org: ORG-LL198-RIPE
country: US
admin-c: TA2589-RIPE
tech-c: TA2589-RIPE
tech-c: LA538-RIPE
status: LEGACY
remarks: For information on "status:" attribute read https://www.ripe.net/data-tools/db/faq/faq-status-values-legacy-resources
remarks: Please send abuse reports to abuse@linode.com
mnt-by: linode-leg-mnt
created: 2004-02-02T16:20:09Z
last-modified: 2015-05-05T01:52:02Z
source: RIPE
organisation: ORG-LL198-RIPE
org-name: Linode, LLC
org-type: OTHER
address: 329 E. Jimmie Leeds Road, Suite A, Galloway, NJ 08205
abuse-c: AR31889-RIPE
mnt-ref: linode-leg-mnt
mnt-by: linode-leg-mnt
created: 2015-04-20T03:09:43Z
last-modified: 2017-10-30T14:40:35Z
source: RIPE # Filtered
person: Linode Abuse Support
address: 329 E. Jimmie Leeds Road, Suite A, Galloway, NJ 08205, USA
phone: +16093807100
nic-hdl: LA538-RIPE
mnt-by: Linode-mnt
created: 2009-11-11T15:16:50Z
last-modified: 2017-10-30T22:07:33Z
source: RIPE
person: Thomas Asaro
address: 329 E. Jimmie Leeds Road, Suite A, Galloway, NJ 08205, USA
phone: +16093807504
nic-hdl: TA2589-RIPE
mnt-by: Linode-mnt
created: 2009-11-02T17:17:56Z
last-modified: 2014-11-20T18:51:15Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)
Regards,
Fail2Ban
The IP 139.162.122.110 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 139.162.122.110:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '139.162.0.0 - 139.162.255.255'
% Abuse contact for '139.162.0.0 - 139.162.255.255' is 'abuse@linode.com'
inetnum: 139.162.0.0 - 139.162.255.255
netname: EU-LINODE-20141229
descr: 139.162.0.0/16
org: ORG-LL198-RIPE
country: US
admin-c: TA2589-RIPE
tech-c: TA2589-RIPE
tech-c: LA538-RIPE
status: LEGACY
remarks: For information on "status:" attribute read https://www.ripe.net/data-tools/db/faq/faq-status-values-legacy-resources
remarks: Please send abuse reports to abuse@linode.com
mnt-by: linode-leg-mnt
created: 2004-02-02T16:20:09Z
last-modified: 2015-05-05T01:52:02Z
source: RIPE
organisation: ORG-LL198-RIPE
org-name: Linode, LLC
org-type: OTHER
address: 329 E. Jimmie Leeds Road, Suite A, Galloway, NJ 08205
abuse-c: AR31889-RIPE
mnt-ref: linode-leg-mnt
mnt-by: linode-leg-mnt
created: 2015-04-20T03:09:43Z
last-modified: 2017-10-30T14:40:35Z
source: RIPE # Filtered
person: Linode Abuse Support
address: 329 E. Jimmie Leeds Road, Suite A, Galloway, NJ 08205, USA
phone: +16093807100
nic-hdl: LA538-RIPE
mnt-by: Linode-mnt
created: 2009-11-11T15:16:50Z
last-modified: 2017-10-30T22:07:33Z
source: RIPE
person: Thomas Asaro
address: 329 E. Jimmie Leeds Road, Suite A, Galloway, NJ 08205, USA
phone: +16093807504
nic-hdl: TA2589-RIPE
mnt-by: Linode-mnt
created: 2009-11-02T17:17:56Z
last-modified: 2014-11-20T18:51:15Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 77.74.79.114 from natural-breast-active.com
Hi,
The IP 77.74.79.114 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 77.74.79.114:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '77.74.79.0 - 77.74.79.255'
% Abuse contact for '77.74.79.0 - 77.74.79.255' is 'abuse@garstelecom.ru'
inetnum: 77.74.79.0 - 77.74.79.255
netname: RU-GARSTELECOM
country: RU
admin-c: GARS-RIPE
tech-c: GARS-RIPE
status: ASSIGNED PA
mnt-by: GARS-MNT
created: 2016-10-31T08:43:29Z
last-modified: 2016-10-31T08:43:29Z
source: RIPE
role: GARSTELECOM MT
org: ORG-GT6-RIPE
address: Russia
admin-c: AK5380-RIPE
tech-c: AE10290-RIPE
nic-hdl: GARS-RIPE
mnt-by: GARS-MNT
abuse-mailbox: abuse@garstelecom.ru
created: 2013-04-04T07:14:27Z
last-modified: 2017-11-30T07:02:33Z
source: RIPE # Filtered
% Information related to '77.74.79.0/24AS31261'
route: 77.74.79.0/24
origin: AS31261
mnt-by: GARS-MNT
created: 2016-10-31T08:44:31Z
last-modified: 2016-10-31T08:44:31Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (BLAARKOP)
Regards,
Fail2Ban
The IP 77.74.79.114 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 77.74.79.114:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '77.74.79.0 - 77.74.79.255'
% Abuse contact for '77.74.79.0 - 77.74.79.255' is 'abuse@garstelecom.ru'
inetnum: 77.74.79.0 - 77.74.79.255
netname: RU-GARSTELECOM
country: RU
admin-c: GARS-RIPE
tech-c: GARS-RIPE
status: ASSIGNED PA
mnt-by: GARS-MNT
created: 2016-10-31T08:43:29Z
last-modified: 2016-10-31T08:43:29Z
source: RIPE
role: GARSTELECOM MT
org: ORG-GT6-RIPE
address: Russia
admin-c: AK5380-RIPE
tech-c: AE10290-RIPE
nic-hdl: GARS-RIPE
mnt-by: GARS-MNT
abuse-mailbox: abuse@garstelecom.ru
created: 2013-04-04T07:14:27Z
last-modified: 2017-11-30T07:02:33Z
source: RIPE # Filtered
% Information related to '77.74.79.0/24AS31261'
route: 77.74.79.0/24
origin: AS31261
mnt-by: GARS-MNT
created: 2016-10-31T08:44:31Z
last-modified: 2016-10-31T08:44:31Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (BLAARKOP)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 133.18.200.37 from natural-breast-active.com
This summary is not available. Please
click here to view the post.
[Fail2Ban] SSH: banned 103.78.102.163 from natural-breast-active.com
Hi,
The IP 103.78.102.163 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 103.78.102.163:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '103.78.100.0 - 103.78.103.255'
% Abuse contact for '103.78.100.0 - 103.78.103.255' is 'corporate@vjn.co.id'
inetnum: 103.78.100.0 - 103.78.103.255
netname: VJN-ID
descr: PT Virtual Jaringan Nasional
descr: Internet Service Provider
descr: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
descr: Sungaijawi Dalam, Pontianak Barat
descr: Kota Pontianak, Kalimantan Barat
admin-c: IA256-AP
tech-c: IA256-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-lower: MAINT-ID-VJN
mnt-irt: IRT-VJN-ID
mnt-routes: MAINT-ID-VJN
status: ALLOCATED PORTABLE
last-modified: 2016-11-10T04:22:27Z
source: APNIC
irt: IRT-VJN-ID
address: PT Virtual Jaringan Nasional
address: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
address: Sungaijawi Dalam, Pontianak Barat
address: Kota Pontianak, Kalimantan Barat
e-mail: corporate@vjn.co.id
abuse-mailbox: corporate@vjn.co.id
admin-c: IA256-AP
tech-c: IA256-AP
auth: # Filtered
mnt-by: MAINT-ID-VJN
last-modified: 2018-05-31T22:31:25Z
source: APNIC
person: Indrayanto Adi
address: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
address: Sungaijawi Dalam, Pontianak Barat
address: Kota Pontianak, Kalimantan Barat
country: ID
phone: +62-561-778889
e-mail: anto@vjn.co.id
nic-hdl: IA256-AP
mnt-by: MAINT-ID-VJN
last-modified: 2016-11-10T04:27:07Z
source: APNIC
% Information related to '103.78.100.0 - 103.78.103.255'
inetnum: 103.78.100.0 - 103.78.103.255
netname: VJN-ID
descr: PT Virtual Jaringan Nasional
descr: Internet Service Provider
descr: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
descr: Sungaijawi Dalam, Pontianak Barat
descr: Kota Pontianak, Kalimantan Barat
admin-c: IA256-AP
tech-c: IA256-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-lower: MAINT-ID-VJN
mnt-irt: IRT-VJN-ID
mnt-routes: MAINT-ID-VJN
status: ALLOCATED PORTABLE
last-modified: 2016-11-10T04:22:27Z
source: IDNIC
irt: IRT-VJN-ID
address: PT Virtual Jaringan Nasional
address: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
address: Sungaijawi Dalam, Pontianak Barat
address: Kota Pontianak, Kalimantan Barat
e-mail: corporate@vjn.co.id
abuse-mailbox: corporate@vjn.co.id
admin-c: IA256-AP
tech-c: IA256-AP
auth: # Filtered
mnt-by: MAINT-ID-VJN
last-modified: 2016-11-10T06:41:49Z
source: IDNIC
person: Indrayanto Adi
address: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
address: Sungaijawi Dalam, Pontianak Barat
address: Kota Pontianak, Kalimantan Barat
country: ID
phone: +62-561-778889
e-mail: anto@vjn.co.id
nic-hdl: IA256-AP
mnt-by: MAINT-ID-VJN
last-modified: 2016-11-10T04:27:07Z
source: IDNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
The IP 103.78.102.163 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 103.78.102.163:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '103.78.100.0 - 103.78.103.255'
% Abuse contact for '103.78.100.0 - 103.78.103.255' is 'corporate@vjn.co.id'
inetnum: 103.78.100.0 - 103.78.103.255
netname: VJN-ID
descr: PT Virtual Jaringan Nasional
descr: Internet Service Provider
descr: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
descr: Sungaijawi Dalam, Pontianak Barat
descr: Kota Pontianak, Kalimantan Barat
admin-c: IA256-AP
tech-c: IA256-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-lower: MAINT-ID-VJN
mnt-irt: IRT-VJN-ID
mnt-routes: MAINT-ID-VJN
status: ALLOCATED PORTABLE
last-modified: 2016-11-10T04:22:27Z
source: APNIC
irt: IRT-VJN-ID
address: PT Virtual Jaringan Nasional
address: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
address: Sungaijawi Dalam, Pontianak Barat
address: Kota Pontianak, Kalimantan Barat
e-mail: corporate@vjn.co.id
abuse-mailbox: corporate@vjn.co.id
admin-c: IA256-AP
tech-c: IA256-AP
auth: # Filtered
mnt-by: MAINT-ID-VJN
last-modified: 2018-05-31T22:31:25Z
source: APNIC
person: Indrayanto Adi
address: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
address: Sungaijawi Dalam, Pontianak Barat
address: Kota Pontianak, Kalimantan Barat
country: ID
phone: +62-561-778889
e-mail: anto@vjn.co.id
nic-hdl: IA256-AP
mnt-by: MAINT-ID-VJN
last-modified: 2016-11-10T04:27:07Z
source: APNIC
% Information related to '103.78.100.0 - 103.78.103.255'
inetnum: 103.78.100.0 - 103.78.103.255
netname: VJN-ID
descr: PT Virtual Jaringan Nasional
descr: Internet Service Provider
descr: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
descr: Sungaijawi Dalam, Pontianak Barat
descr: Kota Pontianak, Kalimantan Barat
admin-c: IA256-AP
tech-c: IA256-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-lower: MAINT-ID-VJN
mnt-irt: IRT-VJN-ID
mnt-routes: MAINT-ID-VJN
status: ALLOCATED PORTABLE
last-modified: 2016-11-10T04:22:27Z
source: IDNIC
irt: IRT-VJN-ID
address: PT Virtual Jaringan Nasional
address: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
address: Sungaijawi Dalam, Pontianak Barat
address: Kota Pontianak, Kalimantan Barat
e-mail: corporate@vjn.co.id
abuse-mailbox: corporate@vjn.co.id
admin-c: IA256-AP
tech-c: IA256-AP
auth: # Filtered
mnt-by: MAINT-ID-VJN
last-modified: 2016-11-10T06:41:49Z
source: IDNIC
person: Indrayanto Adi
address: Jl. Tabrani Ahmad Gg. H. Husein Akbar No.2F
address: Sungaijawi Dalam, Pontianak Barat
address: Kota Pontianak, Kalimantan Barat
country: ID
phone: +62-561-778889
e-mail: anto@vjn.co.id
nic-hdl: IA256-AP
mnt-by: MAINT-ID-VJN
last-modified: 2016-11-10T04:27:07Z
source: IDNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 170.81.56.103 from natural-breast-active.com
Hi,
The IP 170.81.56.103 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 170.81.56.103:
[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]
% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2018-06-19T18:08:57-03:00
% Permission denied. For more information, contact abuse@registro.br
% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.
Regards,
Fail2Ban
The IP 170.81.56.103 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 170.81.56.103:
[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]
% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2018-06-19T18:08:57-03:00
% Permission denied. For more information, contact abuse@registro.br
% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 134.213.30.192 from natural-breast-active.com
Hi,
The IP 134.213.30.192 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 134.213.30.192:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '134.213.24.0 - 134.213.31.255'
% Abuse contact for '134.213.24.0 - 134.213.31.255' is 'abuse@rackspace.com'
inetnum: 134.213.24.0 - 134.213.31.255
netname: RSPC-UK-CLOUD-SERVERS-UK
status: LEGACY
remarks: For information on "status:" attribute read https://www.ripe.net/data-tools/db/faq/faq-status-values-legacy-resources
created: 2013-10-22T14:19:40Z
last-modified: 2014-05-27T12:52:45Z
source: RIPE # Filtered
descr: Cloud Servers UK IP Space
country: GB
admin-c: IA247-RIPE
tech-c: IA247-RIPE
mnt-by: RSPC-MNT
person: IP Admin
address: Rackspace Hosting 5000 Walzem, San Antonio, Texas 78218
phone: +1 210 312 4000
fax-no: +1 210 312 4000
nic-hdl: IA247-RIPE
remarks: # Rackspace Abuse Department
remarks: # Please send any complaints to the following:
remarks: For abuse send email to # abuse@rackspace.com
mnt-by: RSPC-MNT
created: 2002-08-28T21:43:52Z
last-modified: 2016-06-02T17:55:04Z
source: RIPE # Filtered
% Information related to '134.213.0.0/16AS15395'
route: 134.213.0.0/16
descr: Rackspace
origin: AS15395
mnt-by: RSPC-MNT
created: 2017-02-16T21:10:05Z
last-modified: 2017-02-16T21:10:05Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (BLAARKOP)
Regards,
Fail2Ban
The IP 134.213.30.192 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 134.213.30.192:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '134.213.24.0 - 134.213.31.255'
% Abuse contact for '134.213.24.0 - 134.213.31.255' is 'abuse@rackspace.com'
inetnum: 134.213.24.0 - 134.213.31.255
netname: RSPC-UK-CLOUD-SERVERS-UK
status: LEGACY
remarks: For information on "status:" attribute read https://www.ripe.net/data-tools/db/faq/faq-status-values-legacy-resources
created: 2013-10-22T14:19:40Z
last-modified: 2014-05-27T12:52:45Z
source: RIPE # Filtered
descr: Cloud Servers UK IP Space
country: GB
admin-c: IA247-RIPE
tech-c: IA247-RIPE
mnt-by: RSPC-MNT
person: IP Admin
address: Rackspace Hosting 5000 Walzem, San Antonio, Texas 78218
phone: +1 210 312 4000
fax-no: +1 210 312 4000
nic-hdl: IA247-RIPE
remarks: # Rackspace Abuse Department
remarks: # Please send any complaints to the following:
remarks: For abuse send email to # abuse@rackspace.com
mnt-by: RSPC-MNT
created: 2002-08-28T21:43:52Z
last-modified: 2016-06-02T17:55:04Z
source: RIPE # Filtered
% Information related to '134.213.0.0/16AS15395'
route: 134.213.0.0/16
descr: Rackspace
origin: AS15395
mnt-by: RSPC-MNT
created: 2017-02-16T21:10:05Z
last-modified: 2017-02-16T21:10:05Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (BLAARKOP)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 185.207.105.154 from natural-breast-active.com
Hi,
The IP 185.207.105.154 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 185.207.105.154:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '185.207.104.0 - 185.207.107.255'
% Abuse contact for '185.207.104.0 - 185.207.107.255' is 'abuse@netcup.de'
inetnum: 185.207.104.0 - 185.207.107.255
netname: DE-NETCUP-SERVER-AT2-20170608
country: DE
org: ORG-NG146-RIPE
admin-c: OW623-RIPE
tech-c: OW623-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: NETCUP-MNT
created: 2017-06-08T10:12:18Z
last-modified: 2017-06-08T10:12:18Z
source: RIPE
organisation: ORG-NG146-RIPE
org-name: netcup GmbH
org-type: LIR
address: Daimlerstr. 25
address: 76185
address: Karlsruhe
address: GERMANY
admin-c: OW623-RIPE
tech-c: OW623-RIPE
abuse-c: AR41308-RIPE
mnt-by: RIPE-NCC-HM-MNT
mnt-by: NETCUP-MNT
created: 2017-06-07T14:11:09Z
last-modified: 2017-06-29T12:45:24Z
source: RIPE # Filtered
mnt-ref: NETCUP-MNT
phone: +4972175407550
person: Oliver Werner
address: Daimlerstr. 25
address: 76185
address: Karlsruhe
address: GERMANY
phone: +4972175407550
nic-hdl: OW623-RIPE
mnt-by: de-netcup-server-at2-1-mnt
created: 2017-06-07T14:11:09Z
last-modified: 2017-06-07T14:11:09Z
source: RIPE
% Information related to '185.207.104.0/22AS197540'
route: 185.207.104.0/22
origin: AS197540
mnt-by: NETCUP-MNT
created: 2017-07-20T08:36:47Z
last-modified: 2017-07-20T08:36:47Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)
Regards,
Fail2Ban
The IP 185.207.105.154 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 185.207.105.154:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '185.207.104.0 - 185.207.107.255'
% Abuse contact for '185.207.104.0 - 185.207.107.255' is 'abuse@netcup.de'
inetnum: 185.207.104.0 - 185.207.107.255
netname: DE-NETCUP-SERVER-AT2-20170608
country: DE
org: ORG-NG146-RIPE
admin-c: OW623-RIPE
tech-c: OW623-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: NETCUP-MNT
created: 2017-06-08T10:12:18Z
last-modified: 2017-06-08T10:12:18Z
source: RIPE
organisation: ORG-NG146-RIPE
org-name: netcup GmbH
org-type: LIR
address: Daimlerstr. 25
address: 76185
address: Karlsruhe
address: GERMANY
admin-c: OW623-RIPE
tech-c: OW623-RIPE
abuse-c: AR41308-RIPE
mnt-by: RIPE-NCC-HM-MNT
mnt-by: NETCUP-MNT
created: 2017-06-07T14:11:09Z
last-modified: 2017-06-29T12:45:24Z
source: RIPE # Filtered
mnt-ref: NETCUP-MNT
phone: +4972175407550
person: Oliver Werner
address: Daimlerstr. 25
address: 76185
address: Karlsruhe
address: GERMANY
phone: +4972175407550
nic-hdl: OW623-RIPE
mnt-by: de-netcup-server-at2-1-mnt
created: 2017-06-07T14:11:09Z
last-modified: 2017-06-07T14:11:09Z
source: RIPE
% Information related to '185.207.104.0/22AS197540'
route: 185.207.104.0/22
origin: AS197540
mnt-by: NETCUP-MNT
created: 2017-07-20T08:36:47Z
last-modified: 2017-07-20T08:36:47Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 181.50.122.237 from natural-breast-active.com
Hi,
The IP 181.50.122.237 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 181.50.122.237:
[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2018-06-19 17:42:07 (BRT -03:00)
inetnum: 181.48/13
status: allocated
aut-num: N/A
owner: Telmex Colombia S.A.
ownerid: CO-ACSA-LACNIC
responsible: Operaciones Core IP
address: CLARO FIJO COLOMBIA - Cra 68A No. 24B-10, 11111,
address: 11111 - Bogota - DC
country: CO
phone: +57 01 7480000 []
owner-c: ATI
tech-c: ATI
abuse-c: ATI
inetrev: 181.50/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20180617 AA
nslastaa: 20180617
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20180617 AA
nslastaa: 20180617
created: 20110502
changed: 20110502
nic-hdl: ATI
person: Network Security Team
e-mail: abuse@TELMEXLA.NET.CO
address: Carrera 68a #24b-10, 00, Plaza Claro
address: 111321 - Bogota - DC
country: CO
phone: +57 017480456 [81966]
created: 20020909
changed: 20180302
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
The IP 181.50.122.237 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 181.50.122.237:
[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2018-06-19 17:42:07 (BRT -03:00)
inetnum: 181.48/13
status: allocated
aut-num: N/A
owner: Telmex Colombia S.A.
ownerid: CO-ACSA-LACNIC
responsible: Operaciones Core IP
address: CLARO FIJO COLOMBIA - Cra 68A No. 24B-10, 11111,
address: 11111 - Bogota - DC
country: CO
phone: +57 01 7480000 []
owner-c: ATI
tech-c: ATI
abuse-c: ATI
inetrev: 181.50/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20180617 AA
nslastaa: 20180617
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20180617 AA
nslastaa: 20180617
created: 20110502
changed: 20110502
nic-hdl: ATI
person: Network Security Team
e-mail: abuse@TELMEXLA.NET.CO
address: Carrera 68a #24b-10, 00, Plaza Claro
address: 111321 - Bogota - DC
country: CO
phone: +57 017480456 [81966]
created: 20020909
changed: 20180302
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 169.255.104.20 from natural-breast-active.com
Hi,
The IP 169.255.104.20 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 169.255.104.20:
[Querying whois.arin.net]
[Redirected to whois.afrinic.net]
[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '169.255.104.0 - 169.255.104.127'
% No abuse contact registered for 169.255.104.0 - 169.255.104.127
inetnum: 169.255.104.0 - 169.255.104.127
netname: Embarq_Infrastructure
descr: Embarq_Devices_Servers
country: KE
admin-c: cm31-afrinic
tech-c: cm31-afrinic
status: ASSIGNED PA
mnt-by: EMBARQ-MNT
source: AFRINIC # Filtered
parent: 169.255.104.0 - 169.255.107.255
person: Charles Muhu
address: NHIF Building
address: Upper Hill Nairobi
phone: tel:+254-722-267046
nic-hdl: CM31-AFRINIC
mnt-by: GENERATED-WVD3AAVS8QLADOCS1KW543FW6EANJ4UQ-MNT
source: AFRINIC # Filtered
Regards,
Fail2Ban
The IP 169.255.104.20 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 169.255.104.20:
[Querying whois.arin.net]
[Redirected to whois.afrinic.net]
[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '169.255.104.0 - 169.255.104.127'
% No abuse contact registered for 169.255.104.0 - 169.255.104.127
inetnum: 169.255.104.0 - 169.255.104.127
netname: Embarq_Infrastructure
descr: Embarq_Devices_Servers
country: KE
admin-c: cm31-afrinic
tech-c: cm31-afrinic
status: ASSIGNED PA
mnt-by: EMBARQ-MNT
source: AFRINIC # Filtered
parent: 169.255.104.0 - 169.255.107.255
person: Charles Muhu
address: NHIF Building
address: Upper Hill Nairobi
phone: tel:+254-722-267046
nic-hdl: CM31-AFRINIC
mnt-by: GENERATED-WVD3AAVS8QLADOCS1KW543FW6EANJ4UQ-MNT
source: AFRINIC # Filtered
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 220.166.95.195 from natural-breast-active.com
Hi,
The IP 220.166.95.195 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 220.166.95.195:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '220.166.0.0 - 220.167.127.255'
% Abuse contact for '220.166.0.0 - 220.167.127.255' is 'anti-spam@ns.chinanet.cn.net'
inetnum: 220.166.0.0 - 220.167.127.255
netname: CHINANET-SC
descr: CHINANET sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XS16-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SC
status: ALLOCATED NON-PORTABLE
last-modified: 2008-09-04T06:52:05Z
source: APNIC
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC
person: Xiaodong Shi
nic-hdl: XS16-AP
e-mail: scipadmin2013@189.cn
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
mnt-by: MAINT-CHINANET-SC
last-modified: 2013-12-30T01:32:36Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
The IP 220.166.95.195 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 220.166.95.195:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '220.166.0.0 - 220.167.127.255'
% Abuse contact for '220.166.0.0 - 220.167.127.255' is 'anti-spam@ns.chinanet.cn.net'
inetnum: 220.166.0.0 - 220.167.127.255
netname: CHINANET-SC
descr: CHINANET sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XS16-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SC
status: ALLOCATED NON-PORTABLE
last-modified: 2008-09-04T06:52:05Z
source: APNIC
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC
person: Xiaodong Shi
nic-hdl: XS16-AP
e-mail: scipadmin2013@189.cn
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
mnt-by: MAINT-CHINANET-SC
last-modified: 2013-12-30T01:32:36Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 218.84.31.197 from natural-breast-active.com
Hi,
The IP 218.84.31.197 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 218.84.31.197:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '218.84.0.0 - 218.84.255.255'
% Abuse contact for '218.84.0.0 - 218.84.255.255' is 'anti-spam@ns.chinanet.cn.net'
inetnum: 218.84.0.0 - 218.84.255.255
netname: CHINANET-XJ
country: CN
descr: CHINANET xinjiang province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
admin-c: CH93-AP
tech-c: LZ38-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CN-CHINANET-XINJIANG
last-modified: 2008-09-04T06:51:15Z
source: APNIC
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC
person: LI ZHAO
address: XINJIANG DATA COMMUNICATINS BUREAU
address: 30 HUANGHE ROAD URUMQI XINJIANG
address: CHINA
country: CN
phone: +86-991-5820832
fax-no: +86-991-5820831
e-mail: ZHAOLI@XJTELECOM.COM.CN
nic-hdl: LZ38-AP
mnt-by: MAINT-CN-CHINANET-XINJIANG
last-modified: 2008-09-04T07:30:00Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
The IP 218.84.31.197 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 218.84.31.197:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '218.84.0.0 - 218.84.255.255'
% Abuse contact for '218.84.0.0 - 218.84.255.255' is 'anti-spam@ns.chinanet.cn.net'
inetnum: 218.84.0.0 - 218.84.255.255
netname: CHINANET-XJ
country: CN
descr: CHINANET xinjiang province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
admin-c: CH93-AP
tech-c: LZ38-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CN-CHINANET-XINJIANG
last-modified: 2008-09-04T06:51:15Z
source: APNIC
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC
person: LI ZHAO
address: XINJIANG DATA COMMUNICATINS BUREAU
address: 30 HUANGHE ROAD URUMQI XINJIANG
address: CHINA
country: CN
phone: +86-991-5820832
fax-no: +86-991-5820831
e-mail: ZHAOLI@XJTELECOM.COM.CN
nic-hdl: LZ38-AP
mnt-by: MAINT-CN-CHINANET-XINJIANG
last-modified: 2008-09-04T07:30:00Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 103.53.0.197 from natural-breast-active.com
Hi,
The IP 103.53.0.197 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 103.53.0.197:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '103.53.0.0 - 103.53.3.255'
% Abuse contact for '103.53.0.0 - 103.53.3.255' is 'joe@mag.net.id'
inetnum: 103.53.0.0 - 103.53.3.255
netname: MAGNET-ID
descr: PT Mitra Akses Globalindo
descr: Internet Service Provider
descr: Ged. Matapel Lt.4
descr: Jl. Arjuna Utara No.46
descr: Duri Kepa, Jakarta Barat
admin-c: MJM23-AP
tech-c: MJM23-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-lower: MAINT-ID-MAGNET
mnt-irt: IRT-MAGNET-ID
mnt-routes: MAINT-ID-MAGNET
status: ALLOCATED PORTABLE
last-modified: 2015-03-17T10:45:25Z
source: APNIC
irt: IRT-MAGNET-ID
address: PT Mitra Akses Globalindo
address: Ged. Matapel Lt.4
address: Jl. Arjuna Utara No.46
address: Duri Kepa, Jakarta Barat
e-mail: joe@mag.net.id
abuse-mailbox: joe@mag.net.id
admin-c: MJM23-AP
tech-c: MJM23-AP
auth: # Filtered
mnt-by: MAINT-ID-MAGNET
last-modified: 2018-05-31T22:30:51Z
source: APNIC
person: M Johana Mashari
address: Ged. Matapel Lt.4
address: Jl. Arjuna Utara No.46
address: Duri Kepa, Jakarta Barat
country: ID
phone: +62-21-5608771
e-mail: joe@mag.net.id
nic-hdl: MJM23-AP
mnt-by: MAINT-ID-MAGNET
last-modified: 2015-03-17T10:49:51Z
source: APNIC
% Information related to '103.53.0.0/22AS63873'
route: 103.53.0.0/22
descr: PT Mitra Akses Globalindo
descr: Internet Service Provider
descr: Graha Matapel Lt. 4
descr: Jl. Arjuna Utara No. 46
descr: Jakarta 11510
origin: AS63873
mnt-by: MAINT-ID-MAGNET
last-modified: 2017-05-08T10:50:28Z
source: APNIC
% Information related to '103.53.0.0 - 103.53.3.255'
inetnum: 103.53.0.0 - 103.53.3.255
netname: MAGNET-ID
descr: PT Mitra Akses Globalindo
descr: Internet Service Provider
descr: Ged. Matapel Lt.4
descr: Jl. Arjuna Utara No.46
descr: Duri Kepa, Jakarta Barat
admin-c: MJM23-AP
tech-c: MJM23-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-lower: MAINT-ID-MAGNET
mnt-irt: IRT-MAGNET-ID
mnt-routes: MAINT-ID-MAGNET
status: ALLOCATED PORTABLE
last-modified: 2015-03-17T10:45:25Z
source: IDNIC
irt: IRT-MAGNET-ID
address: PT Mitra Akses Globalindo
address: Ged. Matapel Lt.4
address: Jl. Arjuna Utara No.46
address: Duri Kepa, Jakarta Barat
e-mail: joe@mag.net.id
abuse-mailbox: joe@mag.net.id
admin-c: MJM23-AP
tech-c: MJM23-AP
auth: # Filtered
mnt-by: MAINT-ID-MAGNET
last-modified: 2015-03-17T09:46:18Z
source: IDNIC
person: M Johana Mashari
address: Ged. Matapel Lt.4
address: Jl. Arjuna Utara No.46
address: Duri Kepa, Jakarta Barat
country: ID
phone: +62-21-5608771
e-mail: joe@mag.net.id
nic-hdl: MJM23-AP
mnt-by: MAINT-ID-MAGNET
last-modified: 2015-03-17T10:49:51Z
source: IDNIC
% Information related to '103.53.0.0/22AS63873'
route: 103.53.0.0/22
descr: PT Mitra Akses Globalindo
descr: Internet Service Provider
descr: Graha Matapel Lt. 4
descr: Jl. Arjuna Utara No. 46
descr: Jakarta 11510
origin: AS63873
mnt-by: MAINT-ID-MAGNET
last-modified: 2017-05-08T10:50:28Z
source: IDNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
The IP 103.53.0.197 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 103.53.0.197:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '103.53.0.0 - 103.53.3.255'
% Abuse contact for '103.53.0.0 - 103.53.3.255' is 'joe@mag.net.id'
inetnum: 103.53.0.0 - 103.53.3.255
netname: MAGNET-ID
descr: PT Mitra Akses Globalindo
descr: Internet Service Provider
descr: Ged. Matapel Lt.4
descr: Jl. Arjuna Utara No.46
descr: Duri Kepa, Jakarta Barat
admin-c: MJM23-AP
tech-c: MJM23-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-lower: MAINT-ID-MAGNET
mnt-irt: IRT-MAGNET-ID
mnt-routes: MAINT-ID-MAGNET
status: ALLOCATED PORTABLE
last-modified: 2015-03-17T10:45:25Z
source: APNIC
irt: IRT-MAGNET-ID
address: PT Mitra Akses Globalindo
address: Ged. Matapel Lt.4
address: Jl. Arjuna Utara No.46
address: Duri Kepa, Jakarta Barat
e-mail: joe@mag.net.id
abuse-mailbox: joe@mag.net.id
admin-c: MJM23-AP
tech-c: MJM23-AP
auth: # Filtered
mnt-by: MAINT-ID-MAGNET
last-modified: 2018-05-31T22:30:51Z
source: APNIC
person: M Johana Mashari
address: Ged. Matapel Lt.4
address: Jl. Arjuna Utara No.46
address: Duri Kepa, Jakarta Barat
country: ID
phone: +62-21-5608771
e-mail: joe@mag.net.id
nic-hdl: MJM23-AP
mnt-by: MAINT-ID-MAGNET
last-modified: 2015-03-17T10:49:51Z
source: APNIC
% Information related to '103.53.0.0/22AS63873'
route: 103.53.0.0/22
descr: PT Mitra Akses Globalindo
descr: Internet Service Provider
descr: Graha Matapel Lt. 4
descr: Jl. Arjuna Utara No. 46
descr: Jakarta 11510
origin: AS63873
mnt-by: MAINT-ID-MAGNET
last-modified: 2017-05-08T10:50:28Z
source: APNIC
% Information related to '103.53.0.0 - 103.53.3.255'
inetnum: 103.53.0.0 - 103.53.3.255
netname: MAGNET-ID
descr: PT Mitra Akses Globalindo
descr: Internet Service Provider
descr: Ged. Matapel Lt.4
descr: Jl. Arjuna Utara No.46
descr: Duri Kepa, Jakarta Barat
admin-c: MJM23-AP
tech-c: MJM23-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-lower: MAINT-ID-MAGNET
mnt-irt: IRT-MAGNET-ID
mnt-routes: MAINT-ID-MAGNET
status: ALLOCATED PORTABLE
last-modified: 2015-03-17T10:45:25Z
source: IDNIC
irt: IRT-MAGNET-ID
address: PT Mitra Akses Globalindo
address: Ged. Matapel Lt.4
address: Jl. Arjuna Utara No.46
address: Duri Kepa, Jakarta Barat
e-mail: joe@mag.net.id
abuse-mailbox: joe@mag.net.id
admin-c: MJM23-AP
tech-c: MJM23-AP
auth: # Filtered
mnt-by: MAINT-ID-MAGNET
last-modified: 2015-03-17T09:46:18Z
source: IDNIC
person: M Johana Mashari
address: Ged. Matapel Lt.4
address: Jl. Arjuna Utara No.46
address: Duri Kepa, Jakarta Barat
country: ID
phone: +62-21-5608771
e-mail: joe@mag.net.id
nic-hdl: MJM23-AP
mnt-by: MAINT-ID-MAGNET
last-modified: 2015-03-17T10:49:51Z
source: IDNIC
% Information related to '103.53.0.0/22AS63873'
route: 103.53.0.0/22
descr: PT Mitra Akses Globalindo
descr: Internet Service Provider
descr: Graha Matapel Lt. 4
descr: Jl. Arjuna Utara No. 46
descr: Jakarta 11510
origin: AS63873
mnt-by: MAINT-ID-MAGNET
last-modified: 2017-05-08T10:50:28Z
source: IDNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 58.135.198.97 from natural-breast-active.com
Hi,
The IP 58.135.198.97 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 58.135.198.97:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '58.128.0.0 - 58.135.255.255'
% Abuse contact for '58.128.0.0 - 58.135.255.255' is 'ipas@cnnic.cn'
inetnum: 58.128.0.0 - 58.135.255.255
netname: BJENET
descr: Beijing Education Information Network
descr: Service Center Corporation
descr: NO.39 Xueyuan Road,Haidian District ,Beijing, PRC
country: CN
admin-c: ZM776-AP
tech-c: BW887-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
status: ALLOCATED PORTABLE
last-modified: 2014-12-26T03:22:02Z
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-11-01T08:57:39Z
source: APNIC
person: Xing Yanhong
address: NO.39 Xueyuan Road,Haidian District ,Beijing, PRC
country: cn
phone: +86-010-82364916
fax-no: +86-010-62308338
e-mail: XYH@BJEDU.COM.CN
nic-hdl: BW887-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-12-26T03:04:02Z
source: APNIC
person: Dongliang Wang
address: NO.39 Xueyuan Road,Haidian District ,Beijing, PRC
phone: +86-010-82364918
fax-no: +86-010-62308338
country: cn
e-mail: wdl@bjedu.com.cn
nic-hdl: ZM776-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-12-26T03:04:01Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
The IP 58.135.198.97 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 58.135.198.97:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '58.128.0.0 - 58.135.255.255'
% Abuse contact for '58.128.0.0 - 58.135.255.255' is 'ipas@cnnic.cn'
inetnum: 58.128.0.0 - 58.135.255.255
netname: BJENET
descr: Beijing Education Information Network
descr: Service Center Corporation
descr: NO.39 Xueyuan Road,Haidian District ,Beijing, PRC
country: CN
admin-c: ZM776-AP
tech-c: BW887-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
status: ALLOCATED PORTABLE
last-modified: 2014-12-26T03:22:02Z
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-11-01T08:57:39Z
source: APNIC
person: Xing Yanhong
address: NO.39 Xueyuan Road,Haidian District ,Beijing, PRC
country: cn
phone: +86-010-82364916
fax-no: +86-010-62308338
e-mail: XYH@BJEDU.COM.CN
nic-hdl: BW887-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-12-26T03:04:02Z
source: APNIC
person: Dongliang Wang
address: NO.39 Xueyuan Road,Haidian District ,Beijing, PRC
phone: +86-010-82364918
fax-no: +86-010-62308338
country: cn
e-mail: wdl@bjedu.com.cn
nic-hdl: ZM776-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-12-26T03:04:01Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 61.142.172.14 from natural-breast-active.com
Hi,
The IP 61.142.172.14 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 61.142.172.14:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '61.142.172.0 - 61.142.172.31'
% Abuse contact for '61.142.172.0 - 61.142.172.31' is 'anti-spam@ns.chinanet.cn.net'
inetnum: 61.142.172.0 - 61.142.172.31
netname: FS-JYJ-GOV
descr: Foshan Education
country: CN
admin-c: FS-AP
tech-c: IC83-AP
mnt-by: MAINT-CHINANET-GD
status: ASSIGNED NON-PORTABLE
last-modified: 2008-10-22T07:01:04Z
source: APNIC
person: FOSHAN WANJIAN
address: No.202, Fen Jiang Nan Road, Foshan, China
country: CN
phone: +86-757-83103777
e-mail: ipadm@gddc.com.cn
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse@gddc.com.cn
nic-hdl: FS-AP
mnt-by: MAINT-CHINANET-GD
last-modified: 2008-09-04T07:51:09Z
source: APNIC
person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: gdnoc_HLWI@189.cn
address: NO.18,RO. ZHONGSHANER,YUEXIU DISTRIC,GUANGZHOU
phone: +86-20-87189274
fax-no: +86-20-87189274
country: CN
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse_gdnoc@189.cn
abuse-mailbox: antispam_gdnoc@189.cn
last-modified: 2014-09-22T04:41:26Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
The IP 61.142.172.14 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 61.142.172.14:
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '61.142.172.0 - 61.142.172.31'
% Abuse contact for '61.142.172.0 - 61.142.172.31' is 'anti-spam@ns.chinanet.cn.net'
inetnum: 61.142.172.0 - 61.142.172.31
netname: FS-JYJ-GOV
descr: Foshan Education
country: CN
admin-c: FS-AP
tech-c: IC83-AP
mnt-by: MAINT-CHINANET-GD
status: ASSIGNED NON-PORTABLE
last-modified: 2008-10-22T07:01:04Z
source: APNIC
person: FOSHAN WANJIAN
address: No.202, Fen Jiang Nan Road, Foshan, China
country: CN
phone: +86-757-83103777
e-mail: ipadm@gddc.com.cn
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse@gddc.com.cn
nic-hdl: FS-AP
mnt-by: MAINT-CHINANET-GD
last-modified: 2008-09-04T07:51:09Z
source: APNIC
person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: gdnoc_HLWI@189.cn
address: NO.18,RO. ZHONGSHANER,YUEXIU DISTRIC,GUANGZHOU
phone: +86-20-87189274
fax-no: +86-20-87189274
country: CN
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse_gdnoc@189.cn
abuse-mailbox: antispam_gdnoc@189.cn
last-modified: 2014-09-22T04:41:26Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 118.193.234.93 from natural-breast-active.com
Hi,
The IP 118.193.234.93 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 118.193.234.93:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '118.193.128.0 - 118.193.255.255'
% Abuse contact for '118.193.128.0 - 118.193.255.255' is 'ip@cnispgroup.com'
inetnum: 118.193.128.0 - 118.193.255.255
netname: ANCHNET
descr: Shanghai Anchnet Network Technology Stock Co.,Ltd
descr: Building 4,NO.1 West Hulan Road,Shanghai,PRC
country: CN
admin-c: CJ2546-AP
tech-c: JY3624-AP
status: allocated non-portable
mnt-by: MAINT-AP-CNISP
mnt-irt: IRT-CNISP-CN
last-modified: 2017-04-19T07:46:19Z
source: APNIC
irt: IRT-CNISP-CN
address: Beijing CNISP Technology Co., Ltd
e-mail: ip@cnispgroup.com
abuse-mailbox: ip@cnispgroup.com
admin-c: CM2275-AP
tech-c: CM2275-AP
auth: # Filtered
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-03T07:08:38Z
source: APNIC
person: CINDY JIANG
address: Building 4,NO.1 West Hulan Road,Shanghai,PRC
address: ANCHANG
country: CN
phone: +86-21-60832266-6617
e-mail: purchase@51idc.com
nic-hdl: CJ2546-AP
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-22T02:25:12Z
source: APNIC
person: JIANG YUANMING
address: Building 4,NO.1 West Hulan Road,Shanghai,PRC
address: ANCHANG
country: CN
phone: +86-21-60832266-8855
e-mail: anch-global-noc@service-51idc.com
nic-hdl: JY3624-AP
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-22T02:26:15Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
The IP 118.193.234.93 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 118.193.234.93:
[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '118.193.128.0 - 118.193.255.255'
% Abuse contact for '118.193.128.0 - 118.193.255.255' is 'ip@cnispgroup.com'
inetnum: 118.193.128.0 - 118.193.255.255
netname: ANCHNET
descr: Shanghai Anchnet Network Technology Stock Co.,Ltd
descr: Building 4,NO.1 West Hulan Road,Shanghai,PRC
country: CN
admin-c: CJ2546-AP
tech-c: JY3624-AP
status: allocated non-portable
mnt-by: MAINT-AP-CNISP
mnt-irt: IRT-CNISP-CN
last-modified: 2017-04-19T07:46:19Z
source: APNIC
irt: IRT-CNISP-CN
address: Beijing CNISP Technology Co., Ltd
e-mail: ip@cnispgroup.com
abuse-mailbox: ip@cnispgroup.com
admin-c: CM2275-AP
tech-c: CM2275-AP
auth: # Filtered
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-03T07:08:38Z
source: APNIC
person: CINDY JIANG
address: Building 4,NO.1 West Hulan Road,Shanghai,PRC
address: ANCHANG
country: CN
phone: +86-21-60832266-6617
e-mail: purchase@51idc.com
nic-hdl: CJ2546-AP
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-22T02:25:12Z
source: APNIC
person: JIANG YUANMING
address: Building 4,NO.1 West Hulan Road,Shanghai,PRC
address: ANCHANG
country: CN
phone: +86-21-60832266-8855
e-mail: anch-global-noc@service-51idc.com
nic-hdl: JY3624-AP
mnt-by: MAINT-AP-CNISP
last-modified: 2017-05-22T02:26:15Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Regards,
Fail2Ban
[Fail2Ban] SSH: banned 41.208.150.114 from natural-breast-active.com
Hi,
The IP 41.208.150.114 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 41.208.150.114:
[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '41.208.147.64 - 41.208.150.127'
% No abuse contact registered for 41.208.147.64 - 41.208.150.127
inetnum: 41.208.147.64 - 41.208.150.127
netname: GlobalVoice
descr: VoIP
country: SN
admin-c: MN1281-AFRINIC
tech-c: FN4-AFRINIC
status: ASSIGNED PA
mnt-by: SMM-MNT
mnt-lower: SMM-MNT
source: AFRINIC # Filtered
parent: 41.208.128.0 - 41.208.191.255
person: Fatoumata Ndiaye
address: Sonatel
address: Direction des Reseaux
address: Direction des Operations Reseaux
address: Technopole
address: SENEGAL
phone: tel:+221-8793223
fax-no: tel:+221-8330026
nic-hdl: FN4-AFRINIC
mnt-by: GENERATED-OH7KSKKFL1B210SSDYNWY065S45FVAXZ-MNT
source: AFRINIC # Filtered
person: Mody Ndiaye
address: SOCIETE NATIONALES DES TELECOMMUNICATIONS
address: Sonatel
address: Dakar
address: Senegal
phone: tel:+221-8392337
fax-no: tel:+221-8233698
nic-hdl: MN1281-AFRINIC
remarks: data has been transferred from RIPE Whois Database 20050221
mnt-by: SMM-MNT
source: AFRINIC # Filtered
% Information related to '41.208.128.0/18AS8346'
route: 41.208.128.0/18
descr: Route Object
origin: AS8346
mnt-lower: SMM-MNT
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
Regards,
Fail2Ban
The IP 41.208.150.114 has just been banned by Fail2Ban after
2 attempts against SSH.
Here is more information about 41.208.150.114:
[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '41.208.147.64 - 41.208.150.127'
% No abuse contact registered for 41.208.147.64 - 41.208.150.127
inetnum: 41.208.147.64 - 41.208.150.127
netname: GlobalVoice
descr: VoIP
country: SN
admin-c: MN1281-AFRINIC
tech-c: FN4-AFRINIC
status: ASSIGNED PA
mnt-by: SMM-MNT
mnt-lower: SMM-MNT
source: AFRINIC # Filtered
parent: 41.208.128.0 - 41.208.191.255
person: Fatoumata Ndiaye
address: Sonatel
address: Direction des Reseaux
address: Direction des Operations Reseaux
address: Technopole
address: SENEGAL
phone: tel:+221-8793223
fax-no: tel:+221-8330026
nic-hdl: FN4-AFRINIC
mnt-by: GENERATED-OH7KSKKFL1B210SSDYNWY065S45FVAXZ-MNT
source: AFRINIC # Filtered
person: Mody Ndiaye
address: SOCIETE NATIONALES DES TELECOMMUNICATIONS
address: Sonatel
address: Dakar
address: Senegal
phone: tel:+221-8392337
fax-no: tel:+221-8233698
nic-hdl: MN1281-AFRINIC
remarks: data has been transferred from RIPE Whois Database 20050221
mnt-by: SMM-MNT
source: AFRINIC # Filtered
% Information related to '41.208.128.0/18AS8346'
route: 41.208.128.0/18
descr: Route Object
origin: AS8346
mnt-lower: SMM-MNT
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
Regards,
Fail2Ban
Subscribe to:
Posts (Atom)