Banned hacker's IPs

Monday, 25 June 2018

[Fail2Ban] SSH: banned 62.245.223.168 from natural-breast-active.com

Hi,

The IP 62.245.223.168 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 62.245.223.168:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '62.245.223.160 - 62.245.223.191'

% Abuse contact for '62.245.223.160 - 62.245.223.191' is 'abuse@m-online.net'

inetnum: 62.245.223.160 - 62.245.223.191
netname: THITA-NET
descr: think tank Business Solutions AG
country: de
admin-c: MC31516-RIPE
tech-c: MC31516-RIPE
status: ASSIGNED PA
mnt-by: MNET-MNT
created: 2003-04-03T13:45:40Z
last-modified: 2017-02-22T09:55:56Z
source: RIPE

person: Mohamed Chergui
address: think tank Business Solutions AG
address: Messerschmittstr. 7
address: D-80992 Muenchen
address: Germany
phone: +49.895526770
nic-hdl: MC31516-RIPE
mnt-by: MNET-MNT
created: 2017-02-22T09:55:56Z
last-modified: 2017-02-22T09:55:56Z
source: RIPE # Filtered

% Information related to '62.245.128.0/17AS8767'

route: 62.245.128.0/17
descr: DE-MNET-20001003
origin: AS8767
mnt-by: AS8767-MNT
created: 2002-08-28T12:13:35Z
last-modified: 2011-02-26T08:19:44Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 62.94.44.106 from natural-breast-active.com

Hi,

The IP 62.94.44.106 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 62.94.44.106:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '62.94.44.104 - 62.94.44.111'

% Abuse contact for '62.94.44.104 - 62.94.44.111' is 'abuse@clouditalia.com'

inetnum: 62.94.44.104 - 62.94.44.111
netname: PARADISESPA
descr: PARADISE SPA
country: IT
admin-c: SM18893-RIPE
tech-c: SM18893-RIPE
status: ASSIGNED PA
mnt-by: CLOUDITALIA-MNT
created: 2012-10-24T06:56:24Z
last-modified: 2012-10-24T06:56:24Z
source: RIPE

person: Sabrina Muzzi
address: Via di Tor Vergata 432
address: Roma
phone: +393939196963
nic-hdl: SM18893-RIPE
mnt-by: CLOUDITALIA-MNT
created: 2012-10-24T06:56:23Z
last-modified: 2012-10-24T06:56:23Z
source: RIPE

% Information related to '62.94.0.0/18AS15589'

route: 62.94.0.0/18
descr: CLOUDITALIA
origin: AS15589
remarks: Rome Core
mnt-by: CLOUDITALIA-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2013-09-11T08:55:16Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 88.65.34.78 from natural-breast-active.com

Hi,

The IP 88.65.34.78 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 88.65.34.78:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '88.64.208.0 - 88.66.79.255'

% Abuse contact for '88.64.208.0 - 88.66.79.255' is 'abuse@arcor-ip.de'

inetnum: 88.64.208.0 - 88.66.79.255
netname: ARCOR-DSL-NET15
descr: ARCOR AG
descr: Alfred-Herrhausen-Allee 1
descr: D-65760 Eschborn
country: DE
admin-c: ANOC1-RIPE
tech-c: ANOC1-RIPE
mnt-by: ARCOR-MNT
mnt-lower: ARCOR-MNT
mnt-routes: ARCOR-MNT
status: ASSIGNED PA
created: 2006-02-17T10:31:20Z
last-modified: 2007-07-23T07:52:25Z
source: RIPE

role: Vodafone Germany IP Core Backbone
address: Vodafone GmbH
address: Campus Eschborn
address: Duesseldorfer Strasse 15
address: D-65760 Eschborn
address: Germany
phone: +49 6196 523 0864
remarks: trouble: Security issues abuse@arcor-ip.de
remarks: trouble: Information http://www.vodafone.de
remarks: trouble: Peering contact peering@adm.arcor.net
remarks: trouble: Operational issues :
remarks: DanubiusNOC-DE-FO-FIXED_ro@vodafone.com
remarks: trouble: Address assignment ip-registry@arcor.net
admin-c: SM9000-RIPE
admin-c: NH4266-RIPE
admin-c: JS19072-RIPE
admin-c: AR9338-RIPE
admin-c: TK11590-RIPE
admin-c: RH12597-RIPE
admin-c: MW877-RIPE
admin-c: FB3293-RIPE
admin-c: TG2269-RIPE
tech-c: NH15-RIPE
nic-hdl: ANOC1-RIPE
mnt-by: ARCOR-MNT
created: 2002-07-11T08:48:33Z
last-modified: 2017-11-22T12:07:15Z
source: RIPE # Filtered
abuse-mailbox: abuse@arcor-ip.de

% Information related to '88.64.0.0/13AS3209'

route: 88.64.0.0/13
descr: ARCOR-IP
origin: AS3209
mnt-by: ARCOR-MNT
created: 2009-05-18T07:52:39Z
last-modified: 2009-05-18T07:52:39Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 35.203.172.7 from natural-breast-active.com

Hi,

The IP 35.203.172.7 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 35.203.172.7:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 35.203.172.7"
#
# Use "?" to get help.
#

NetRange: 35.192.0.0 - 35.207.255.255
CIDR: 35.192.0.0/12
NetName: GOOGLE-CLOUD
NetHandle: NET-35-192-0-0-1
Parent: NET35 (NET-35-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Google LLC (GOOGL-2)
RegDate: 2017-03-21
Updated: 2018-01-24
Comment: *** The IP addresses under this Org-ID are in use by Google Cloud customers ***
Comment:
Comment: Direct all copyright and legal complaints to
Comment: https://support.google.com/legal/go/report
Comment:
Comment: Direct all spam and abuse complaints to
Comment: https://support.google.com/code/go/gce_abuse_report
Comment:
Comment: For fastest response, use the relevant forms above.
Comment:
Comment: Complaints can also be sent to the GC Abuse desk
Comment: (google-cloud-compliance@google.com)
Comment: but may have longer turnaround times.
Ref: https://whois.arin.net/rest/net/NET-35-192-0-0-1

OrgName: Google LLC
OrgId: GOOGL-2
Address: 1600 Amphitheatre Parkway
City: Mountain View
StateProv: CA
PostalCode: 94043
Country: US
RegDate: 2006-09-29
Updated: 2017-12-21
Comment: *** The IP addresses under this Org-ID are in use by Google Cloud customers ***
Comment:
Comment: Direct all copyright and legal complaints to
Comment: https://support.google.com/legal/go/report
Comment:
Comment: Direct all spam and abuse complaints to
Comment: https://support.google.com/code/go/gce_abuse_report
Comment:
Comment: For fastest response, use the relevant forms above.
Comment:
Comment: Complaints can also be sent to the GC Abuse desk
Comment: (google-cloud-compliance@google.com)
Comment: but may have longer turnaround times.
Comment:
Comment: Complaints sent to any other POC will be ignored.
Ref: https://whois.arin.net/rest/org/GOOGL-2

OrgTechHandle: ZG39-ARIN
OrgTechName: Google LLC
OrgTechPhone: +1-650-253-0000
OrgTechEmail: arin-contact@google.com
OrgTechRef: https://whois.arin.net/rest/poc/ZG39-ARIN

OrgNOCHandle: GCABU-ARIN
OrgNOCName: GC Abuse
OrgNOCPhone: +1-650-253-0000
OrgNOCEmail: google-cloud-compliance@google.com
OrgNOCRef: https://whois.arin.net/rest/poc/GCABU-ARIN

OrgAbuseHandle: GCABU-ARIN
OrgAbuseName: GC Abuse
OrgAbusePhone: +1-650-253-0000
OrgAbuseEmail: google-cloud-compliance@google.com
OrgAbuseRef: https://whois.arin.net/rest/poc/GCABU-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 213.136.96.109 from natural-breast-active.com

Hi,

The IP 213.136.96.109 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 213.136.96.109:

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '213.136.96.0 - 213.136.99.255'

% Abuse contact for '213.136.96.0 - 213.136.99.255' is 'abuseci@orange-cit.ci'

inetnum: 213.136.96.0 - 213.136.99.255
netname: AVISONET
descr: ISP Cote d'Ivoire
country: CI
admin-c: CTA1-AFRINIC
tech-c: CTA1-AFRINIC
status: ASSIGNED PA
remarks: abuse.oci@orange.com
remarks: (+225) 20345161
remarks: (+225) 20348377
mnt-by: CIT-DT
mnt-lower: CIT-DT
source: AFRINIC # Filtered
parent: 213.136.96.0 - 213.136.127.255

role: CONTACTS TEHNIQUE AVISO
address: CI2M
address: Avenue Houdaille
address: Bp 310 cedex 01 Abidjan
address: Ivoiry Coast
phone: tel:+225-20-30-09-94
admin-c: AAE11-AFRINIC
admin-c: AMH1-AFRINIC
tech-c: TAGE1-AFRINIC
tech-c: NDF1-AFRINIC
nic-hdl: CTA1-AFRINIC
mnt-by: CIT-DT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.78.213.238 from herbalyzer.com

Hi,

The IP 218.78.213.238 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 218.78.213.238:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.78.0.0 - 218.83.255.255'

% Abuse contact for '218.78.0.0 - 218.83.255.255' is 'anti-spam@ns.chinanet.cn.net'

inetnum: 218.78.0.0 - 218.83.255.255
netname: CHINANET-SH
descr: CHINANET Shanghai province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XI5-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-SH
mnt-routes: MAINT-CHINANET-SH
status: ALLOCATED PORTABLE
last-modified: 2015-08-26T01:39:45Z
source: APNIC
mnt-irt: IRT-CHINANET-CN

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC

person: Wu Xiao Li
address: Room 805,61 North Si Chuan Road,Shanghai,200085,PRC
country: CN
phone: +86-21-63630562
fax-no: +86-21-63630566
e-mail: ipms@shtel.com.cn
nic-hdl: XI5-AP
mnt-by: MAINT-CHINANET-SH
abuse-mailbox: ip-admin@mail.online.sh.cn
last-modified: 2014-02-27T08:51:31Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 52.187.160.229 from natural-breast-active.com

Hi,

The IP 52.187.160.229 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 52.187.160.229:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 52.187.160.229"
#
# Use "?" to get help.
#

NetRange: 52.145.0.0 - 52.191.255.255
CIDR: 52.160.0.0/11, 52.145.0.0/16, 52.146.0.0/15, 52.152.0.0/13, 52.148.0.0/14
NetName: MSFT
NetHandle: NET-52-145-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Assignment
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2015-11-24
Updated: 2015-11-24
Ref: https://whois.arin.net/rest/net/NET-52-145-0-0-1

OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-09
Updated: 2017-01-28
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://whois.arin.net/rest/org/MSFT

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://whois.arin.net/rest/poc/MAC74-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://whois.arin.net/rest/poc/MRPD-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 201.184.169.106 from natural-breast-active.com

Hi,

The IP 201.184.169.106 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 201.184.169.106:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net

% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2018-06-25 19:26:39 (BRT -03:00)

inetnum: 201.184/15
status: allocated
aut-num: N/A
owner: EPM Telecomunicaciones S.A. E.S.P.
ownerid: CO-EPME1-LACNIC
responsible: Administrador EPMNET
address: Carrera 77 39b-16, -, -
address: 940 - Medellin - CO
country: CO
phone: +57 4 4152280 []
owner-c: YGO2
tech-c: YGO2
abuse-c: YGO2
inetrev: 201.184/15
nserver: LAUTA.UNE.NET.CO
nsstat: 20180625 AA
nslastaa: 20180625
nserver: BIRLOCHA.UNE.NET.CO
nsstat: 20180625 AA
nslastaa: 20180625
nserver: NSBOG01.UNE.NET.CO
nsstat: 20180625 AA
nslastaa: 20180625
created: 20110331
changed: 20110331

nic-hdl: YGO2
person: Juan Molina
e-mail: adminternet@UNE.NET.CO
address: Cra. 16 Nro. 11A Sur 100, 100, --
address: NA - Medellin - An
country: CO
phone: +57 4 5150505 [0]
created: 20030120
changed: 20110928

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 192.99.45.93 from natural-breast-active.com

Hi,

The IP 192.99.45.93 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 192.99.45.93:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 192.99.45.93"
#
# Use "?" to get help.
#

NetRange: 192.99.0.0 - 192.99.255.255
CIDR: 192.99.0.0/16
NetName: OVH-ARIN-7
NetHandle: NET-192-99-0-0-1
Parent: NET192 (NET-192-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS16276
Organization: OVH Hosting, Inc. (HO-2)
RegDate: 2013-06-17
Updated: 2013-06-17
Comment: www.ovh.com
Ref: https://whois.arin.net/rest/net/NET-192-99-0-0-1

OrgName: OVH Hosting, Inc.
OrgId: HO-2
Address: 800-1801 McGill College
City: Montreal
StateProv: QC
PostalCode: H3A 2N4
Country: CA
RegDate: 2011-06-22
Updated: 2017-01-28
Ref: https://whois.arin.net/rest/org/HO-2

OrgTechHandle: NOC11876-ARIN
OrgTechName: NOC
OrgTechPhone: +1-855-684-5463
OrgTechEmail: noc@ovh.net
OrgTechRef: https://whois.arin.net/rest/poc/NOC11876-ARIN

OrgAbuseHandle: ABUSE3956-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-855-684-5463
OrgAbuseEmail: abuse@ovh.ca
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE3956-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 114.108.177.165 from herbalyzer.com

Hi,

The IP 114.108.177.165 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 114.108.177.165:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 114.108.177.165

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 114.108.128.0 - 114.108.191.255 (/18)
ê¸°ê´€ëª… : (ì£¼)ì—˜ì§€ìœ í"ŒëŸ¬ìŠ¤
ì„œë¹„ìŠ¤ëª… : KIDC
ì£¼ì†Œ : ì„œìš¸íŠ¹ë³„ì&lsqauo;œ ìš©ì‚°êµ¬ í•œê°•ëŒ€ë¡œ 32
ìš°íŽ¸ë²ˆí˜¸ : 04389
í• ë&lsqauo;¹ì¼ìž : 20080521

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-2086-2926
ì „ìžìš°íŽ¸ : ip@kidc.net

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 114.108.177.0 - 114.108.177.255 (/24)
ê¸°ê´€ëª… : (ì£¼)í"Œëž˜ë&lsqauo;‰ìŠ¤
ë„¤íŠ¸ì›Œí¬ êµ¬ë¶„ : CUSTOMER
ì£¼ì†Œ : ëŒ€ì „ ì„œêµ¬ íƒ„ë°©ë™
ìš°íŽ¸ë²ˆí˜¸ : 35267
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20140516

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-70-7011-4563
ì „ìžìš°íŽ¸ : center@kidc.net

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 114.108.128.0 - 114.108.191.255 (/18)
Organization Name : LG DACOM KIDC
Service Name : KIDC
Address : Seoul Yongsan-gu Hangang-daero 32
Zip Code : 04389
Registration Date : 20080521

Name : IP Manager
Phone : +82-2-2086-2926
E-Mail : ip@kidc.net

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 114.108.177.0 - 114.108.177.255 (/24)
Organization Name : plannix
Network Type : CUSTOMER
Address : Gyeryong-ro Seo-gu Daejeon
Zip Code : 35267
Registration Date : 20140516

Name : IP Manager
Phone : +82-70-7011-4563
E-Mail : center@kidc.net

- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 14.152.120.250 from natural-breast-active.com

Hi,

The IP 14.152.120.250 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 14.152.120.250:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '14.144.0.0 - 14.159.255.255'

% Abuse contact for '14.144.0.0 - 14.159.255.255' is 'anti-spam@ns.chinanet.cn.net'

inetnum: 14.144.0.0 - 14.159.255.255
netname: CHINANET-GD
descr: CHINANET Guangdong province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: IC83-AP
status: ALLOCATED PORTABLE
notify: abuse_gdnoc@189.cn
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-GD
last-modified: 2016-05-04T00:25:17Z
source: APNIC
mnt-irt: IRT-CHINANET-CN

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC

person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: gdnoc_HLWI@189.cn
address: NO.18,RO. ZHONGSHANER,YUEXIU DISTRIC,GUANGZHOU
phone: +86-20-87189274
fax-no: +86-20-87189274
country: CN
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse_gdnoc@189.cn
abuse-mailbox: antispam_gdnoc@189.cn
last-modified: 2014-09-22T04:41:26Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 88.87.196.233 from herbalyzer.com

Hi,

The IP 88.87.196.233 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 88.87.196.233:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '88.87.196.0 - 88.87.196.255'

% Abuse contact for '88.87.196.0 - 88.87.196.255' is 'ivan.diaz@orange-ftgroup.com'

inetnum: 88.87.196.0 - 88.87.196.255
netname: ALPI_88-87-196
descr: Xarxa clients ALPI
country: ES
admin-c: JF8827
tech-c: JF8827
status: ASSIGNED PA
mnt-by: FERRI-JF8827
remarks: INFRA-AW
created: 2006-10-23T16:13:29Z
last-modified: 2006-10-23T16:13:29Z
source: RIPE

person: Jorge Ferri Lopez
address: Catalana de Telecomunicacions
address: Societat Operadora de Xarxes,SA (AL-PI)
address: C/Escoles Pies,102
address: 08017 Barcelona
address: SPAIN
phone: +34 935678000
fax-no: +34 935678280
nic-hdl: JF8827
mnt-by: FERRI-JF8827
created: 1970-01-01T00:00:00Z
last-modified: 2010-06-30T13:12:33Z
source: RIPE # Filtered

% Information related to '88.87.192.0/19AS12386'

route: 88.87.192.0/19
descr: Alpi_88-87-192
origin: AS12386
mnt-by: FERRI-JF8827
created: 2006-04-05T15:36:18Z
last-modified: 2006-04-05T15:36:18Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 114.108.151.132 from natural-breast-active.com

Hi,

The IP 114.108.151.132 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 114.108.151.132:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 114.108.151.132

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 114.108.128.0 - 114.108.191.255 (/18)
ê¸°ê´€ëª… : (ì£¼)ì—˜ì§€ìœ í"ŒëŸ¬ìŠ¤
ì„œë¹„ìŠ¤ëª… : KIDC
ì£¼ì†Œ : ì„œìš¸íŠ¹ë³„ì&lsqauo;œ ìš©ì‚°êµ¬ í•œê°•ëŒ€ë¡œ 32
ìš°íŽ¸ë²ˆí˜¸ : 04389
í• ë&lsqauo;¹ì¼ìž : 20080521

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-2086-2926
ì „ìžìš°íŽ¸ : ip@kidc.net

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 114.108.151.128 - 114.108.151.143 (/28)
ê¸°ê´€ëª… : (ì‚¬)ë¶€ì‚°êµì œì˜í™"ì œ ì¡°ì§ìœ„-ë¶€ì‚°
ë„¤íŠ¸ì›Œí¬ êµ¬ë¶„ : CUSTOMER
ì£¼ì†Œ : ë¶€ì‚° í•´ìš´ëŒ€êµ¬ ìš°ë™
ìš°íŽ¸ë²ˆí˜¸ : 48060
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20100223

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-70-7589-2485
ì „ìžìš°íŽ¸ : center@kidc.net

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 114.108.128.0 - 114.108.191.255 (/18)
Organization Name : LG DACOM KIDC
Service Name : KIDC
Address : Seoul Yongsan-gu Hangang-daero 32
Zip Code : 04389
Registration Date : 20080521

Name : IP Manager
Phone : +82-2-2086-2926
E-Mail : ip@kidc.net

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 114.108.151.128 - 114.108.151.143 (/28)
Organization Name : busanmovie
Network Type : CUSTOMER
Address : Haeundae-gu Busan
Zip Code : 48060
Registration Date : 20100223

Name : IP Manager
Phone : +82-70-7589-2485
E-Mail : center@kidc.net

- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 202.80.228.67 from natural-breast-active.com

Hi,

The IP 202.80.228.67 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 202.80.228.67:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '202.80.228.64 - 202.80.228.79'

% Abuse contact for '202.80.228.64 - 202.80.228.79' is 'abuseIPv4@ais.co.th'

inetnum: 202.80.228.64 - 202.80.228.79
netname: BangkokHospitalSurat-by-AWN
descr: tawatchai.cha@glsitc.com
descr: abuseIPv4@sbn.co.th
country: TH
admin-c: SS1412-AP
tech-c: NI36-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-AWN-CO-LTD-TH
mnt-irt: IRT-AWN-CO-LTD-TH
last-modified: 2017-02-28T08:16:33Z
source: APNIC

irt: IRT-AWN-CO-LTD-TH
address: 408/60 PHP Bld. 15th Fl Phaholyothin Rd Samsen Nai Phayathai, Thailand Bangkok 10400
e-mail: abuseIPv4@ais.co.th
abuse-mailbox: abuseIPv4@ais.co.th
admin-c: AWNC1-AP
tech-c: AWNC1-AP
auth: # Filtered
mnt-by: MAINT-AWN-CO-LTD-TH
last-modified: 2015-05-22T09:43:10Z
source: APNIC

person: Naruepon Intarayotha
nic-hdl: NI36-AP
e-mail: naruepoi@ais.co.th
address: Advanced Info Service Public Company Limited
address: 1291/1 Phaholyothin Road, Phayathai, Bangkok 10400, THAILAND
phone: +6622996000 Ext. 3803
fax-no: +6622996076
country: TH
mnt-by: MAINT-TH-AIS
last-modified: 2008-09-04T07:46:11Z
source: APNIC

person: sandeep srivastava
nic-hdl: ss1412-AP
address: 19-17 katchery road alld
address: 19-17 kb marg allahabad
address:
phone: +91-0532-2548154
fax-no: +91-0532-2548149
country: IN
e-mail: rcallahabad@nos.org
mnt-by: MAINT-IN-PER-DOT
last-modified: 2008-09-08T07:40:58Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.241.251.155 from natural-breast-active.com

Hi,

The IP 218.241.251.155 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 218.241.251.155:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.241.128.0 - 218.241.255.255'

% Abuse contact for '218.241.128.0 - 218.241.255.255' is 'ipas@cnnic.cn'

inetnum: 218.241.128.0 - 218.241.255.255
netname: BITNET
descr: Beijing Bitone United Networks Technology Service Co.,Ltd.
descr: No.26 Chaowai Str. Chaoyang District,Beijing,P.R.C
country: CN
admin-c: JL2597-AP
tech-c: JL2597-AP
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
status: ALLOCATED PORTABLE
last-modified: 2015-11-02T06:46:02Z
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-11-01T08:57:39Z
source: APNIC

person: Jonson Li
nic-hdl: JL2597-AP
e-mail: xufuyuan@btte.net
address: 2nd Floor,BLDG HP No.112 Jian Guo
address: Street,Chaoyang District,Beijing
phone: +86-010-65661862-232
fax-no: +86-010-65660882
country: CN
mnt-by: MAINT-CNNIC-AP
last-modified: 2015-03-11T03:06:01Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 106.75.27.238 from natural-breast-active.com

Hi,

The IP 106.75.27.238 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 106.75.27.238:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '106.75.0.0 - 106.75.255.255'

% Abuse contact for '106.75.0.0 - 106.75.255.255' is 'ipas@cnnic.cn'

inetnum: 106.75.0.0 - 106.75.255.255
netname: UCLOUD-NET
descr: Shanghai UCloud Information Technology Company Limited
admin-c: JJ2197-AP
tech-c: JJ2197-AP
country: CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
last-modified: 2017-06-22T01:26:01Z
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-11-01T08:57:39Z
source: APNIC

person: Jinhui Jia
e-mail: jacky.jia@uclud.cn
address: 510,SOHO B,Zhongguancun,Haidian, Beijing
phone: +86-13811069300
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: JJ2197-AP
last-modified: 2017-06-20T10:16:01Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 178.91.253.90 from natural-breast-active.com

Hi,

The IP 178.91.253.90 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 178.91.253.90:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '178.91.253.0 - 178.91.253.255'

% Abuse contact for '178.91.253.0 - 178.91.253.255' is 'abuse@telecom.kz'

inetnum: 178.91.253.0 - 178.91.253.255
netname: NAZARBAEVYNIVER
descr: NAZARBAEVYNIVER
country: KZ
admin-c: BA3539-RIPE
tech-c: BA3539-RIPE
status: ASSIGNED PA
mnt-by: KNIC-MNT
created: 2010-09-09T08:41:34Z
last-modified: 2010-09-09T08:41:34Z
source: RIPE

person: Boranbaev Aslan
address: Kynaeva st. 14, Astana city
phone: +7 7172 688806
nic-hdl: BA3539-RIPE
created: 2010-09-09T08:41:34Z
last-modified: 2016-04-06T18:44:29Z
mnt-by: RIPE-NCC-LOCKED-MNT
source: RIPE

% Information related to '178.91.253.0/24AS9198'

route: 178.91.253.0/24
descr: Kazakhtelecom Data Network Administration
origin: AS9198
mnt-by: KNIC-MNT
created: 2010-10-19T11:06:51Z
last-modified: 2010-10-19T11:06:51Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (BLAARKOP)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 42.7.26.49 from herbalyzer.com

Hi,

The IP 42.7.26.49 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 42.7.26.49:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '42.4.0.0 - 42.7.255.255'

% Abuse contact for '42.4.0.0 - 42.7.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum: 42.4.0.0 - 42.7.255.255
netname: UNICOM-LN
descr: UNICOM Liaoning Province Network
descr: China Unicom
descr: No.21, Jin-Rong Street
descr: Beijing 100033
country: CN
admin-c: CH444-AP
tech-c: ZB17-AP
remarks: service provider
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP
mnt-routes: MAINT-CNCGROUP-RR
mnt-irt: IRT-CU-CN
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
last-modified: 2016-05-04T00:29:10Z
source: APNIC

irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
last-modified: 2017-10-23T05:59:13Z
source: APNIC

person: CNCGroup Hostmaster
nic-hdl: CH444-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Financial Street
address: Beijing,100033,P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CN-CUCGROUP
last-modified: 2017-09-05T06:36:14Z
source: APNIC

person: ZHAO BO
address: 96,JieFang Road ChangChun 130021 China.
country: CN
phone: +86-431-8925217
fax-no: +86-431-8925190
e-mail: wtg@mail.jl.cn
nic-hdl: ZB17-AP
mnt-by: MAINT-CHINANET-JL
last-modified: 2008-09-04T07:30:04Z
source: APNIC

% Information related to '42.4.0.0/14AS4837'

route: 42.4.0.0/14
descr: China Unicom Liaoning Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2011-03-02T05:24:02Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 193.70.41.131 from natural-breast-active.com

Hi,

The IP 193.70.41.131 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 193.70.41.131:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '193.70.0.0 - 193.70.127.255'

% Abuse contact for '193.70.0.0 - 193.70.127.255' is 'abuse@ovh.net'

inetnum: 193.70.0.0 - 193.70.127.255
netname: FR-OVH-930901
country: FR
org: ORG-OS3-RIPE
admin-c: OK217-RIPE
tech-c: OTC2-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: OVH-MNT
mnt-routes: OVH-MNT
mnt-domains: OVH-MNT
created: 2016-10-07T08:19:40Z
last-modified: 2017-01-11T08:00:07Z
source: RIPE # Filtered

organisation: ORG-OS3-RIPE
org-name: OVH SAS
org-type: LIR
address: 2 rue Kellermann
address: 59100
address: Roubaix
address: FRANCE
phone: +33972101007
abuse-c: AR15333-RIPE
admin-c: OTC2-RIPE
admin-c: OK217-RIPE
admin-c: GM84-RIPE
mnt-ref: OVH-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: OVH-MNT
created: 2004-04-17T11:23:17Z
last-modified: 2017-10-30T14:40:06Z
source: RIPE # Filtered

role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered

person: Octave Klaba
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
phone: +33 9 74 53 13 23
nic-hdl: OK217-RIPE
mnt-by: OVH-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-10-30T21:44:51Z
source: RIPE # Filtered

% Information related to '193.70.0.0/17AS16276'

route: 193.70.0.0/17
descr: OVH
origin: AS16276
mnt-by: OVH-MNT
created: 2016-10-07T08:51:27Z
last-modified: 2016-10-07T08:51:27Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 110.45.144.61 from natural-breast-active.com

Hi,

The IP 110.45.144.61 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 110.45.144.61:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 110.45.144.61

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 110.45.128.0 - 110.45.255.255 (/17)
ê¸°ê´€ëª… : (ì£¼)ì—˜ì§€ìœ í"ŒëŸ¬ìŠ¤
ì„œë¹„ìŠ¤ëª… : KIDC
ì£¼ì†Œ : ì„œìš¸íŠ¹ë³„ì&lsqauo;œ ìš©ì‚°êµ¬ í•œê°•ëŒ€ë¡œ 32
ìš°íŽ¸ë²ˆí˜¸ : 04389
í• ë&lsqauo;¹ì¼ìž : 20090320

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-2086-2926
ì „ìžìš°íŽ¸ : ip@kidc.net

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 110.045.144.0 - 110.045.144.255 (/24)
ê¸°ê´€ëª… : ì•„ì‚¬ë&lsqauo;¬
ë„¤íŠ¸ì›Œí¬ êµ¬ë¶„ : CUSTOMER
ì£¼ì†Œ : ì„œìš¸ì&lsqauo;œ ê¸ˆì²œêµ¬ ê°€ì‚°ë™
ìš°íŽ¸ë²ˆí˜¸ : 08507
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20090506

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-2026-2019
ì „ìžìš°íŽ¸ : center@kidc.net

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 110.45.128.0 - 110.45.255.255 (/17)
Organization Name : LG DACOM KIDC
Service Name : KIDC
Address : Seoul Yongsan-gu Hangang-daero 32
Zip Code : 04389
Registration Date : 20090320

Name : IP Manager
Phone : +82-2-2086-2926
E-Mail : ip@kidc.net

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 110.045.144.0 - 110.045.144.255 (/24)
Organization Name : asadal
Network Type : CUSTOMER
Address : Gamasan-ro Geumcheon-gu Seoul
Zip Code : 08507
Registration Date : 20090506

Name : IP Manager
Phone : +82-2-2026-2019
E-Mail : center@kidc.net

- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 14.63.221.108 from natural-breast-active.com

Hi,

The IP 14.63.221.108 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 14.63.221.108:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 14.63.221.108

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 14.32.0.0 - 14.95.255.255 (/10)
ê¸°ê´€ëª… : ì£¼ì&lsqauo;íšŒì‚¬ ì¼€ì´í&lsqauo;°
ì„œë¹„ìŠ¤ëª… : KORNET
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ 90
ìš°íŽ¸ë²ˆí˜¸ : 13606
í• ë&lsqauo;¹ì¼ìž : 20100805

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

--------------------------------------------------------------------------------

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†Œì— ëŒ€í•œ ìœ„ ê´€ë¦¬ëŒ€í–‰ìžì˜ ì‚¬ìš©ìž í• ë&lsqauo;¹ì •ë³´ê°€ ì¡´ìž¬í•˜ì§€ ì•ŠìŠµë&lsqauo;ˆë&lsqauo;¤.

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 14.32.0.0 - 14.95.255.255 (/10)
Organization Name : Korea Telecom
Service Name : KORNET
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code : 13606
Registration Date : 20100805

Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 14.143.5.164 from natural-breast-active.com

Hi,

The IP 14.143.5.164 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 14.143.5.164:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '14.140.0.0 - 14.143.255.255'

% Abuse contact for '14.140.0.0 - 14.143.255.255' is '4755abuse@tatacommunications.com'

inetnum: 14.140.0.0 - 14.143.255.255
netname: TATACOMM-IN
descr: Internet Service Provider
descr: TATA Communications formerly VSNL is Leading ISP,
descr: Data and Voice Carrier in India
admin-c: TC651-AP
tech-c: TC651-AP
country: IN
org: ORG-TCL6-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-routes: MAINT-TATACOMM-IN
mnt-lower: MAINT-TATACOMM-IN
mnt-irt: IRT-TATACOMM-IN
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
last-modified: 2017-08-30T07:19:48Z
source: APNIC

irt: IRT-TATACOMM-IN
address: 6th Floor, LVSB, VSNL
address: Kashinath Dhuru marg, Prabhadevi
address: Dadar(W), Mumbai 400028
address: India
e-mail: ip.admin@tatacommunications.com
abuse-mailbox: 4755abuse@tatacommunications.com
admin-c: IA15-AP
tech-c: IA15-AP
auth: # Filtered
mnt-by: MAINT-TATACOMM-IN
last-modified: 2010-11-23T07:04:33Z
source: APNIC

organisation: ORG-TCL6-AP
org-name: Tata Communications Limited
country: IN
address: Customer Service & Operations
address: Plot Nos. C-21 & C-36
address: 'G' Block, Bandra Kurla Complex,
phone: +91-22-66502826
fax-no: +91-22-66502039
e-mail: ip-addr@tatacommunications.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2017-08-14T01:05:24Z
source: APNIC

role: TATA Communications
nic-hdl: TC651-AP
address: 6th Floor,A Tower, BKC
address: Plot Nos. C-21 & C-36
address: 'G' Block, Bandra Kurla Complex, Mumbai
phone: +91-22-66591637
country: IN
e-mail: ip.admin@tatacommunications.com
admin-c: IA15-AP
tech-c: VT43-AP
mnt-by: MAINT-TATACOMM-IN
last-modified: 2013-10-10T09:16:30Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 112.161.187.208 from herbalyzer.com

Hi,

The IP 112.161.187.208 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 112.161.187.208:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 112.161.187.208

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 112.160.0.0 - 112.191.255.255 (/11)
ê¸°ê´€ëª… : ì£¼ì&lsqauo;íšŒì‚¬ ì¼€ì´í&lsqauo;°
ì„œë¹„ìŠ¤ëª… : KORNET
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ 90
ìš°íŽ¸ë²ˆí˜¸ : 13606
í• ë&lsqauo;¹ì¼ìž : 20090210

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 112.161.187.0 - 112.161.187.255 (/24)
ê¸°ê´€ëª… : (ì£¼) ì¼€ì´í&lsqauo;°
ë„¤íŠ¸ì›Œí¬ êµ¬ë¶„ : CUSTOMER
ì£¼ì†Œ : ê²½ê¸°ë„ ë‚¨ì–'ì£¼ì&lsqauo;œ í‡´ê³„ì›ë©´
ìš°íŽ¸ë²ˆí˜¸ : 472-820
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20150317

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 112.160.0.0 - 112.191.255.255 (/11)
Organization Name : Korea Telecom
Service Name : KORNET
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code : 13606
Registration Date : 20090210

Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 112.161.187.0 - 112.161.187.255 (/24)
Organization Name : KT
Network Type : CUSTOMER
Address : Toegyewon-Myeon Namyangju-Si Gyeonggi-Do
Zip Code : 472-820
Registration Date : 20150317

Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 27.145.67.10 from natural-breast-active.com

Hi,

The IP 27.145.67.10 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 27.145.67.10:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '27.145.0.0 - 27.145.127.255'

% Abuse contact for '27.145.0.0 - 27.145.127.255' is 'abuse@trueinternet.co.th'

inetnum: 27.145.0.0 - 27.145.127.255
netname: TRUENET-BB
descr: TRUE BROADBAND
country: TH
admin-c: TIA6-AP
tech-c: TIA6-AP
status: ALLOCATED NON-PORTABLE
remarks: Abusing network please contact : ipadmin@trueinternet.co.th
mnt-by: MAINT-AP-TRUEINTERNET
mnt-lower: MAINT-AP-TRUEINTERNET
mnt-routes: MAINT-AP-TRUEINTERNET
mnt-irt: IRT-TRUEINTERNET-TH
last-modified: 2013-07-31T08:51:15Z
source: APNIC

irt: IRT-TRUEINTERNET-TH
address: 14th,27 th, floor ,Fortune Town
address: 1 Ratchadaphisek Road, Din Daeng
address: Bangkok 10400
e-mail: abuse@trueinternet.co.th
abuse-mailbox: abuse@trueinternet.co.th
admin-c: TIA6-AP
tech-c: TIA6-AP
auth: # Filtered
mnt-by: MAINT-AP-TRUEINTERNET
last-modified: 2013-07-31T04:58:19Z
source: APNIC

role: TRUE IP ADMINISTRATION
address: 1 Fortune Town, 14th, 27th Floor,
address: Ratchadapisek Road, Din Daeng
address: Din Daeng, Bangkok 10400.
country: TH
phone: +662 6200400
fax-no: +662 6421557
e-mail: ipadmin@trueinternet.co.th
remarks: abuse@trueinternet.co.th
admin-c: AC1013-AP
admin-c: WP1-AP
tech-c: PY184-AP
tech-c: RT271-AP
nic-hdl: TIA6-AP
notify: ipadmin@trueinternet.co.th
mnt-by: MAINT-AP-TRUEINTERNET
last-modified: 2011-12-06T00:10:15Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 222.72.135.177 from natural-breast-active.com

Hi,

The IP 222.72.135.177 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 222.72.135.177:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '222.64.0.0 - 222.73.255.255'

% Abuse contact for '222.64.0.0 - 222.73.255.255' is 'anti-spam@ns.chinanet.cn.net'

inetnum: 222.64.0.0 - 222.73.255.255
netname: CHINANET-SH
descr: CHINANET shanghai province network
descr: China Telecom
descr: No1,jin-rong Street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: XI5-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-SH
mnt-routes: MAINT-CHINANET-SH
remarks: This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your
remarks: organisation account name in the subject line.
status: ALLOCATED PORTABLE
last-modified: 2015-08-26T01:26:11Z
source: APNIC
mnt-irt: IRT-CHINANET-CN

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC

person: Wu Xiao Li
address: Room 805,61 North Si Chuan Road,Shanghai,200085,PRC
country: CN
phone: +86-21-63630562
fax-no: +86-21-63630566
e-mail: ipms@shtel.com.cn
nic-hdl: XI5-AP
mnt-by: MAINT-CHINANET-SH
abuse-mailbox: ip-admin@mail.online.sh.cn
last-modified: 2014-02-27T08:51:31Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 221.161.235.169 from natural-breast-active.com

Hi,

The IP 221.161.235.169 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 221.161.235.169:

[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 221.161.235.169

# KOREAN(UTF8)

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" í•œêµì¸í„°ë„·ì§„í¥ì›ìœ¼ë¡œë¶€í„° ì•„ëž˜ì˜ ê´€ë¦¬ëŒ€í–‰ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 221.144.0.0 - 221.168.255.255 (/12+/13+/16)
ê¸°ê´€ëª… : ì£¼ì&lsqauo;íšŒì‚¬ ì¼€ì´í&lsqauo;°
ì„œë¹„ìŠ¤ëª… : KORNET
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ 90
ìš°íŽ¸ë²ˆí˜¸ : 13606
í• ë&lsqauo;¹ì¼ìž : 20030418

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

ì¡°íšŒí•˜ì&lsqauo; IPv4ì£¼ì†ŒëŠ" ìœ„ì˜ ê´€ë¦¬ëŒ€í–‰ìžë¡œë¶€í„° ì•„ëž˜ì˜ ì‚¬ìš©ìžì—ê²Œ í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ ê°™ìŠµë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------

[ ë„¤íŠ¸ì›Œí¬ í• ë&lsqauo;¹ ì •ë³´ ]
IPv4ì£¼ì†Œ : 221.161.235.160 - 221.161.235.191 (/27)
ê¸°ê´€ëª… : ì£¼ì&lsqauo;íšŒì‚¬ ì¼€ì´í&lsqauo;°
ë„¤íŠ¸ì›Œí¬ êµ¬ë¶„ : INFRA
ì£¼ì†Œ : ê²½ê¸°ë„ ì„±ë‚¨ì&lsqauo;œ ë¶„ë&lsqauo;¹êµ¬ ë¶ˆì •ë¡œ 90
ìš°íŽ¸ë²ˆí˜¸ : 13606
í• ë&lsqauo;¹ë‚´ì— ë"±ë¡ì¼ : 20150317

ì´ë¦„ : IPì£¼ì†Œ ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"ë²ˆí˜¸ : +82-2-500-6630
ì „ìžìš°íŽ¸ : kornet_ip@kt.com

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 221.144.0.0 - 221.168.255.255 (/12+/13+/16)
Organization Name : Korea Telecom
Service Name : KORNET
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code : 13606
Registration Date : 20030418

Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 221.161.235.160 - 221.161.235.191 (/27)
Organization Name : Korea Telecom
Network Type : INFRA
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code : 13606
Registration Date : 20150317

Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 190.153.178.46 from natural-breast-active.com

Hi,

The IP 190.153.178.46 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 190.153.178.46:

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net

% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2018-06-25 17:33:36 (BRT -03:00)

inetnum: 190.153.128/17
status: allocated
aut-num: N/A
owner: Manquehuenet
ownerid: CL-MANQ-LACNIC
responsible: Manuel Suanez Berrios
address: Av del Condor, 796, Huechuraba
address: 858-0704 - Santiago -
country: CL
phone: +56 2 9505862 []
owner-c: MAS309
tech-c: MAS309
abuse-c: MAS309
inetrev: 190.153.176/22
nserver: NS.GTDINTERNET.COM
nsstat: 20180623 AA
nslastaa: 20180623
nserver: NS2.GTDINTERNET.COM
nsstat: 20180623 AA
nslastaa: 20180623
created: 20110328
changed: 20140707

nic-hdl: MAS309
person: Carolina Cofré
e-mail: netadmin@GRUPOGTD.COM
address: Moneda, 920, -
address: NONE - Santiago - SA
country: CL
phone: +56 224139289 [0000]
created: 20140204
changed: 20180329

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 218.78.247.169 from natural-breast-active.com

Hi,

The IP 218.78.247.169 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 218.78.247.169:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '218.78.240.0 - 218.78.247.255'

% Abuse contact for '218.78.240.0 - 218.78.247.255' is 'anti-spam@ns.chinanet.cn.net'

inetnum: 218.78.240.0 - 218.78.247.255
netname: SHANGHAI-EDU-COMMISSION
descr: Shanghai Education Commission
country: CN
admin-c: CHQ1-AP
tech-c: CHQ1-AP
mnt-by: MAINT-CHINANET-SH
status: ASSIGNED NON-PORTABLE
last-modified: 2008-09-04T06:51:55Z
source: APNIC

person: Chen Hai Qiang
address: 460 Yuyuan Road, Shanghai
country: CN
phone: +86-21-62173455
fax-no: +86-21-62538495
e-mail: chq@shec.edu.cn
nic-hdl: CHQ1-AP
mnt-by: MAINT-CHINANET-SH
last-modified: 2008-09-04T07:30:36Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban