Banned hacker's IPs

Friday 11 May 2018

[Fail2Ban] SSH: banned 50.84.238.171 from natural-breast-active.com

Hi,

The IP 50.84.238.171 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 50.84.238.171:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 50.84.238.171"
#
# Use "?" to get help.
#

NetRange: 50.84.0.0 - 50.84.255.255
CIDR: 50.84.0.0/16
NetName: RCSW
NetHandle: NET-50-84-0-0-1
Parent: NET50 (NET-50-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Time Warner Cable Internet LLC (RCSW)
RegDate: 2010-11-11
Updated: 2012-02-24
Ref: https://whois.arin.net/rest/net/NET-50-84-0-0-1

OrgName: Time Warner Cable Internet LLC
OrgId: RCSW
Address: 6399 S Fiddlers Green Circle
City: Greenwood Village
StateProv: CO
PostalCode: 80111
Country: US
RegDate: 2001-09-06
Updated: 2018-03-07
Comment: Allocations for this OrgID serve Road Runner commercial customers out of the Austin, TX and Tampa Bay, FL RDCs.
Ref: https://whois.arin.net/rest/org/RCSW

OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-703-345-3416
OrgAbuseEmail: abuse@rr.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE10-ARIN

OrgTechHandle: IPADD1-ARIN
OrgTechName: IPAddressing
OrgTechPhone: +1-720-699-4582
OrgTechEmail: ipaddressing@chartercom.com
OrgTechRef: https://whois.arin.net/rest/poc/IPADD1-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 125.212.233.218 from herbalyzer.com

Hi,

The IP 125.212.233.218 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 125.212.233.218:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '125.212.128.0 - 125.212.255.255'

% Abuse contact for '125.212.128.0 - 125.212.255.255' is 'hm-changed@vnnic.vn'

inetnum: 125.212.128.0 - 125.212.255.255
netname: VIETTEL-VN
descr: Viettel Group
descr: No 1, Tran Huu Duc street, My Dinh 2 ward, Nam Tu Liem district, Ha Noi City
country: VN
admin-c: TVT8-AP
tech-c: NDT9-AP
remarks: For spamming matters, mail to soc@viettel.com.vn
mnt-by: MAINT-VN-VNNIC
status: ALLOCATED PORTABLE
mnt-irt: IRT-VNNIC-AP
last-modified: 2017-11-11T09:41:33Z
source: APNIC

irt: IRT-VNNIC-AP
address: Ha Noi, VietNam
phone: +84-24-35564944
fax-no: +84-24-37821462
e-mail: hm-changed@vnnic.vn
abuse-mailbox: hm-changed@vnnic.vn
admin-c: NTTT1-AP
tech-c: NTTT1-AP
auth: # Filtered
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-11-08T09:40:06Z
source: APNIC

person: Nguyen Dang Tiep
address: Viettel Network Corporation
address: No 1, Tran Huu Duc street, My Dinh 2 ward, Nam Tu Liem district, Ha Noi City
country: VN
phone: +84-24-62989898
e-mail: soc@viettel.com.vn
nic-hdl: NDT9-AP
mnt-by: MAINT-VN-VIETEL
last-modified: 2017-11-11T09:40:35Z
source: APNIC

person: Tran Van Thanh
address: Viettel Network Corporation
address: No 1, Tran Huu Duc street, My Dinh 2 ward, Nam Tu Liem district, Ha Noi City
country: VN
phone: +84-989993197
e-mail: soc@viettel.com.vn
nic-hdl: TVT8-AP
mnt-by: MAINT-VN-VIETEL
last-modified: 2017-11-11T09:39:29Z
source: APNIC

% Information related to '125.212.128.0/17AS7552'

route: 125.212.128.0/17
descr: Viettel Corporation
descr: Internet service/exchange provider
descr: VIETEL-AS-AP
country: VN
origin: AS7552
member-of: rs-viettel
remarks: mailto: tiennd@viettel.com.vn
mnt-by: MAINT-VN-VIETEL
last-modified: 2013-12-11T07:28:18Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 13.76.165.31 from natural-breast-active.com

Hi,

The IP 13.76.165.31 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 13.76.165.31:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 13.76.165.31"
#
# Use "?" to get help.
#

NetRange: 13.64.0.0 - 13.107.255.255
CIDR: 13.96.0.0/13, 13.64.0.0/11, 13.104.0.0/14
NetName: MSFT
NetHandle: NET-13-64-0-0-1
Parent: NET13 (NET-13-0-0-0-0)
NetType: Direct Assignment
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2015-03-26
Updated: 2015-03-26
Ref: https://whois.arin.net/rest/net/NET-13-64-0-0-1

OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-09
Updated: 2017-01-28
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://whois.arin.net/rest/org/MSFT

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://whois.arin.net/rest/poc/MAC74-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://whois.arin.net/rest/poc/MRPD-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 72.38.146.158 from natural-breast-active.com

Hi,

The IP 72.38.146.158 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 72.38.146.158:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 72.38.146.158"
#
# Use "?" to get help.
#

Cogeco Cable Inc. CGOC-7BLK (NET-72-38-0-0-1) 72.38.0.0 - 72.39.255.255
Cogeco Cable Inc. CGOC-COMM12 (NET-72-38-144-0-1) 72.38.144.0 - 72.38.159.255

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 80.191.115.125 from natural-breast-active.com

Hi,

The IP 80.191.115.125 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 80.191.115.125:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '80.191.115.0 - 80.191.115.127'

% Abuse contact for '80.191.115.0 - 80.191.115.127' is 'abuse@ito.gov.ir'

inetnum: 80.191.115.0 - 80.191.115.127
netname: DFMB
descr: Daneshkade fani mohandesi bahonar
country: IR
admin-c: HNM14-RIPE
tech-c: HNM14-RIPE
status: ASSIGNED PA
mnt-by: AS12880-MNT
created: 2011-06-15T04:49:01Z
last-modified: 2012-06-27T12:45:13Z
source: RIPE

person: Hagh Negar Mohamad
address: Daneshkadeh fanimohandesi bahonar, Rahmat BLV,,Shiraz,Fars,Iran
phone: +98 711 738 06 01
nic-hdl: HNM14-RIPE
mnt-by: AS12880-MNT
created: 2011-06-15T04:49:01Z
last-modified: 2011-06-15T04:49:01Z
source: RIPE # Filtered

% Information related to '80.191.112.0/20AS12880'

route: 80.191.112.0/20
descr: DCI-Route
descr: Shiraz
origin: AS12880
mnt-by: AS12880-MNT
created: 2005-11-01T10:48:51Z
last-modified: 2005-11-12T21:59:27Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 91.192.197.132 from natural-breast-active.com

Hi,

The IP 91.192.197.132 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 91.192.197.132:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '91.192.196.0 - 91.192.199.255'

% Abuse contact for '91.192.196.0 - 91.192.199.255' is 'abuse@exatel.pl'

inetnum: 91.192.196.0 - 91.192.199.255
netname: SFERANET-BB
country: PL
org: ORG-SFER1-RIPE
admin-c: MCHO1-RIPE
tech-c: MCHO1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-by: MNT-EXATEL
mnt-by: MNT-SFERANET
mnt-routes: MNT-SFERANET
mnt-domains: MNT-SFERANET
descr: iwona@ip.exatel.pl 20071023
created: 2007-03-06T12:38:12Z
last-modified: 2017-10-06T13:55:17Z
source: RIPE
sponsoring-org: ORG-TS16-RIPE

organisation: ORG-SFER1-RIPE
org-name: SFERANET S.A.
org-type: OTHER
descr: SFERANET S.A.
remarks: Internet Service Provider
address: Poland
address: 43-300 Bielsko-Biala
address: ul. PCK 8
phone: +48 334990930
abuse-c: AR22750-RIPE
mnt-ref: MNT-SFERANET
mnt-by: AS8938-MAINT
created: 2007-03-01T09:40:43Z
last-modified: 2017-09-27T08:26:27Z
source: RIPE # Filtered

person: Marcin Chojnacki
address: SferaNET Sp. z o.o.
address: ul. PCK 8
address: 43-300 Bielsko-Biala
address: Poland
phone: +48 508 271 517
mnt-by: AS8938-MAINT
nic-hdl: MCHO1-RIPE
created: 2006-01-12T12:20:54Z
last-modified: 2006-01-12T12:33:39Z
source: RIPE # Filtered

% Information related to '91.192.196.0/22AS43153'

route: 91.192.196.0/22
descr: Sferanet
origin: AS43153
mnt-lower: MNT-SFERANET
mnt-routes: MNT-SFERANET
mnt-by: MNT-SFERANET
created: 2007-10-25T20:19:49Z
last-modified: 2007-10-25T20:49:50Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 178.140.164.136 from herbalyzer.com

Hi,

The IP 178.140.164.136 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 178.140.164.136:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '178.140.160.0 - 178.140.191.255'

% Abuse contact for '178.140.160.0 - 178.140.191.255' is 'abuse@rt.ru'

inetnum: 178.140.160.0 - 178.140.191.255
netname: NCN-BBCUST
descr: NCNET Broadband customers
country: RU
admin-c: NCN7-RIPE
tech-c: NCN7-RIPE
status: ASSIGNED PA
mnt-by: NCNET-MNT
mnt-routes: NCNET-MNT
mnt-lower: NCNET-MNT
created: 2010-12-23T08:00:32Z
last-modified: 2010-12-23T08:00:32Z
source: RIPE

role: NCNET NCC Operations
address: National Cable Networks
address: Nagatinskaya str., 1, bldn. 26
address: 117105 Moscow, Russia
org: ORG-NCN1-RIPE
admin-c: RVP-RIPE
tech-c: RVP-RIPE
phone: +7 495 6859542
fax-no: +7 495 6859530
mnt-by: NCNET-MNT
nic-hdl: NCN7-RIPE
created: 2007-03-26T07:46:58Z
last-modified: 2015-10-12T11:53:05Z
source: RIPE # Filtered
abuse-mailbox: abuse@moscow.rt.ru

% Information related to '178.140.0.0/16AS42610'

route: 178.140.0.0/16
descr: NCNET
origin: AS42610
mnt-by: NCNET-MNT
mnt-lower: NCNET-MNT
created: 2010-04-08T08:24:30Z
last-modified: 2010-04-08T08:24:30Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (BLAARKOP)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 103.99.0.210 from herbalyzer.com

Hi,

The IP 103.99.0.210 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 103.99.0.210:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '103.99.0.0 - 103.99.3.255'

% Abuse contact for '103.99.0.0 - 103.99.3.255' is 'hm-changed@vnnic.vn'

inetnum: 103.99.0.0 - 103.99.3.255
netname: VPSONLINE-VN
descr: VPSONLINE Ltd
descr: Xa Khuc, Chu Phan, Me Linh, Ha Noi City
admin-c: NNA26-AP
tech-c: NNA26-AP
remarks: send spam and abuse report to thaikhanghn@gmail.com
country: VN
mnt-by: MAINT-VN-VNNIC
mnt-routes: MAINT-VN-VNNIC
mnt-irt: IRT-VNNIC-AP
status: ASSIGNED PORTABLE
last-modified: 2017-08-17T02:06:38Z
source: APNIC

irt: IRT-VNNIC-AP
address: Ha Noi, VietNam
phone: +84-24-35564944
fax-no: +84-24-37821462
e-mail: hm-changed@vnnic.vn
abuse-mailbox: hm-changed@vnnic.vn
admin-c: NTTT1-AP
tech-c: NTTT1-AP
auth: # Filtered
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-11-08T09:40:06Z
source: APNIC

person: Nguyen Ngoc An
address: Xa Khuc, Chu Phan, Me Linh, Ha Noi city
country: VN
phone: +84-987444400
e-mail: thaikhanghn@gmail.com
nic-hdl: NNA26-AP
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-08-17T01:53:47Z
source: APNIC

% Information related to '103.99.0.0/22AS135905'

route: 103.99.0.0/22
descr: VPSONLINE-VN
origin: AS135905
mnt-by: MAINT-VN-VNNIC
notify: hanhdd@vnnic.vn
notify: thaikhanghn@gmail.com
last-modified: 2017-08-28T03:25:27Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US4)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 82.135.136.227 from herbalyzer.com

Hi,

The IP 82.135.136.227 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 82.135.136.227:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '82.135.128.0 - 82.135.255.255'

% Abuse contact for '82.135.128.0 - 82.135.255.255' is 'abuse@telia.lt'

inetnum: 82.135.128.0 - 82.135.255.255
org: ORG-LT1-RIPE
admin-c: LTIN1-RIPE
netname: LT-LIETUVOS-20030917
country: LT
tech-c: LTIN1-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: TELECOMLT-MNT
mnt-lower: AS8764-MNT
mnt-lower: TELECOMLT-MNT
mnt-routes: AS8764-MNT
created: 2003-09-17T10:21:09Z
last-modified: 2017-02-01T04:41:45Z
source: RIPE # Filtered

organisation: ORG-LT1-RIPE
org-name: Telia Lietuva, AB
org-type: LIR
address: Lvovo 25
address: LT-03501
address: Vilnius
address: LITHUANIA
phone: +37052367133
fax-no: +37052783736
mnt-ref: AS8764-MNT
mnt-ref: TELECOMLT-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: TELECOMLT-MNT
abuse-c: LTIN2-RIPE
created: 2004-04-17T11:37:19Z
last-modified: 2017-10-30T15:27:52Z
source: RIPE # Filtered

person: Telia Lietuva AB IP NCC
address: Telia Lietuva, AB
address: Lvovo 25
address: LT-03501 Vilnius
address: Lithuania
phone: +370 5 2367082
nic-hdl: LTIN1-RIPE
mnt-by: TELECOMLT-MNT
created: 2002-07-26T06:18:03Z
last-modified: 2017-10-30T21:45:15Z
source: RIPE # Filtered

% Information related to '82.135.136.0/21AS8764'

route: 82.135.136.0/21
descr: Telia Lietuva, AB
origin: AS8764
mnt-by: AS8764-MNT
created: 2004-01-27T20:27:09Z
last-modified: 2017-02-01T07:52:48Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 85.93.204.63 from natural-breast-active.com

Hi,

The IP 85.93.204.63 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 85.93.204.63:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '85.93.203.0 - 85.93.204.255'

% Abuse contact for '85.93.203.0 - 85.93.204.255' is 'abuse@visual-online.lu'

inetnum: 85.93.203.0 - 85.93.204.255
netname: VOLISP
descr: Visual Online S.A.
country: LU
admin-c: CS608-RIPE
tech-c: CS1730-RIPE
remarks: rev-srv: neptun.vo.lu
remarks: rev-srv: merkur.vo.lu
status: ASSIGNED PA
remarks: INFRA-AW
mnt-by: VO-NOC-MNT
mnt-lower: VO-NOC-MNT
created: 2006-07-28T15:21:49Z
last-modified: 2009-09-02T19:14:14Z
source: RIPE
remarks: rev-srv attribute deprecated by RIPE NCC on 02/09/2009

person: Christian Schmit
address: Visual Online S.A.
address: P.O. Box 2534
address: L-1025 Luxembourg
phone: +352-424411-1
fax-no: +352-424411-44
nic-hdl: CS1730-RIPE
created: 1970-01-01T00:00:00Z
last-modified: 2015-06-29T15:10:04Z
source: RIPE # Filtered
mnt-by: VO-NOC-MNT

person: Claude Schuler
address: Visual Online S.A.
address: P.O. Box 2534
address: L-1025 Luxembourg
address: Luxembourg
phone: +352-424411-1
fax-no: +352-424411-44
nic-hdl: CS608-RIPE
mnt-by: VO-NOC-MNT
created: 2001-11-20T21:14:28Z
last-modified: 2010-10-18T09:32:03Z
source: RIPE # Filtered

% Information related to '85.93.192.0/19AS9008'

route: 85.93.192.0/19
descr: Visual Online S.A.
descr: Internet IP space
descr: E-Mail: noc@vo.lu
origin: AS9008
mnt-by: VO-NOC-MNT
mnt-lower: VO-NOC-MNT
mnt-routes: VO-NOC-MNT
created: 2004-12-14T13:57:36Z
last-modified: 2004-12-14T13:57:36Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 51.255.83.104 from herbalyzer.com

Hi,

The IP 51.255.83.104 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 51.255.83.104:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '51.254.0.0 - 51.255.255.255'

% Abuse contact for '51.254.0.0 - 51.255.255.255' is 'abuse@ovh.net'

inetnum: 51.254.0.0 - 51.255.255.255
netname: FR-OVH-20150522
descr: OVH SAS
country: FR
admin-c: OTC2-RIPE
tech-c: OTC2-RIPE
status: LEGACY
mnt-by: OVH-MNT
created: 2015-05-26T08:55:56Z
last-modified: 2015-05-27T15:52:47Z
source: RIPE
org: ORG-OS3-RIPE

organisation: ORG-OS3-RIPE
org-name: OVH SAS
org-type: LIR
address: 2 rue Kellermann
address: 59100
address: Roubaix
address: FRANCE
phone: +33972101007
abuse-c: AR15333-RIPE
admin-c: OTC2-RIPE
admin-c: OK217-RIPE
admin-c: GM84-RIPE
mnt-ref: OVH-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: OVH-MNT
created: 2004-04-17T11:23:17Z
last-modified: 2017-10-30T14:40:06Z
source: RIPE # Filtered

role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered

% Information related to '51.254.0.0/15AS16276'

route: 51.254.0.0/15
descr: OVH
origin: AS16276
mnt-by: OVH-MNT
created: 2015-05-28T17:50:05Z
last-modified: 2015-05-28T17:50:05Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 169.54.164.226 from natural-breast-active.com

Hi,

The IP 169.54.164.226 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 169.54.164.226:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '169.54.164.224 - 169.54.164.231'

% Abuse contact for '169.54.164.224 - 169.54.164.231' is 'abuse@softlayer.com'

inetnum: 169.54.164.224 - 169.54.164.231
netname: NETBLK-SOFTLAYER-RIPE-CUST-MS42210-RIPE
descr: CruiseBe.com
country: UA
admin-c: MS42210-RIPE
tech-c: MS42210-RIPE
status: LEGACY
mnt-by: MAINT-SOFTLAYER-RIPE
created: 2016-12-08T18:01:20Z
last-modified: 2016-12-08T18:01:20Z
source: RIPE

person: Marina Shumaieva
address: Heroyev Stalingrada 6a, apt.178
address: Kyiv, 04210 UA
phone: +1.866.398.7638
nic-hdl: MS42210-RIPE
mnt-by: MAINT-SOFTLAYER-RIPE
created: 2016-12-08T18:01:17Z
last-modified: 2017-10-30T23:32:14Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 89.221.240.171 from natural-breast-active.com

Hi,

The IP 89.221.240.171 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 89.221.240.171:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '89.221.240.0 - 89.221.241.255'

% Abuse contact for '89.221.240.0 - 89.221.241.255' is 'abuse@fsdata.se'

inetnum: 89.221.240.0 - 89.221.241.255
netname: FSDATA-SE-SERVER
descr: Server Hosting
country: SE
admin-c: FS4016-RIPE
tech-c: FS4016-RIPE
status: ASSIGNED PA
mnt-by: MNT-FSD-TECH
created: 2006-10-25T13:29:48Z
last-modified: 2013-06-11T08:41:34Z
source: RIPE
mnt-routes: TELIANET-RR

person: Fredrik Skold
address: FSD Internet Tjanster AB
address: BOX 5026
address: 250 05
address: HELSINGBORG, Sweden
phone: +4642197000
nic-hdl: FS4016-RIPE
created: 2005-11-28T14:33:42Z
last-modified: 2016-04-06T23:20:45Z
mnt-by: RIPE-NCC-LOCKED-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 193.68.57.76 from natural-breast-active.com

Hi,

The IP 193.68.57.76 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 193.68.57.76:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '193.68.57.0 - 193.68.57.255'

% Abuse contact for '193.68.57.0 - 193.68.57.255' is 'abuse@invitel.net'

inetnum: 193.68.57.0 - 193.68.57.255
netname: VTH
descr: Datacenter Hosting Internet
remarks: INFRA-AW
country: HU
admin-c: VINC1-RIPE
tech-c: VINO2-RIPE
status: ASSIGNED PA
mnt-by: AS12301-MNT
created: 2015-04-10T17:07:39Z
last-modified: 2015-04-10T17:07:39Z
source: RIPE

role: INVITEL IP NETWORK COORDINATION CENTER
address: INVITEL Zrt.
address: H-2040 Budaors
address: Edison utca 4.
tech-c: VINO2-RIPE
nic-hdl: VINC1-RIPE
abuse-mailbox: abuse@invitel.net
mnt-by: AS12301-MNT
created: 2002-05-22T10:19:38Z
last-modified: 2016-04-01T21:31:02Z
source: RIPE # Filtered

role: INVITEL IP NETWORK OPERATION
address: INVITEL Zrt.
address: H-2040 Budaors
address: Edison utca 4.
admin-c: VINC1-RIPE
tech-c: JS6489-RIPE
tech-c: IOS2-RIPE
nic-hdl: VINO2-RIPE
abuse-mailbox: abuse@invitel.net
mnt-by: AS12301-MNT
created: 2001-12-12T11:17:58Z
last-modified: 2016-04-01T21:35:16Z
source: RIPE # Filtered

% Information related to '193.68.57.0/24AS12301'

route: 193.68.57.0/24
descr: INVITEL Zrt.
origin: AS12301
mnt-by: AS12301-MNT
created: 2015-04-10T16:59:05Z
last-modified: 2015-04-10T17:10:38Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 8.21.213.131 from natural-breast-active.com

Hi,

The IP 8.21.213.131 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 8.21.213.131:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 8.21.213.131"
#
# Use "?" to get help.
#

NetRange: 8.0.0.0 - 8.127.255.255
CIDR: 8.0.0.0/9
NetName: LVLT-ORG-8-8
NetHandle: NET-8-0-0-0-1
Parent: NET8 (NET-8-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Level 3 Parent, LLC (LPL-141)
RegDate: 1992-12-01
Updated: 2018-04-23
Ref: https://whois.arin.net/rest/net/NET-8-0-0-0-1

OrgName: Level 3 Parent, LLC
OrgId: LPL-141
Address: 100 CenturyLink Drive
City: Monroe
StateProv: LA
PostalCode: 71203
Country: US
RegDate: 2018-02-06
Updated: 2018-02-22
Ref: https://whois.arin.net/rest/org/LPL-141

OrgAbuseHandle: IPADD5-ARIN
OrgAbuseName: ipaddressing
OrgAbusePhone: +1-877-453-8353
OrgAbuseEmail: ipaddressing@level3.com
OrgAbuseRef: https://whois.arin.net/rest/poc/IPADD5-ARIN

OrgTechHandle: IPADD5-ARIN
OrgTechName: ipaddressing
OrgTechPhone: +1-877-453-8353
OrgTechEmail: ipaddressing@level3.com
OrgTechRef: https://whois.arin.net/rest/poc/IPADD5-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 202.59.96.55 from natural-breast-active.com

Hi,

The IP 202.59.96.55 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 202.59.96.55:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '202.59.96.0 - 202.59.111.255'

% Abuse contact for '202.59.96.0 - 202.59.111.255' is 'noc@staff.iinet.net.au'

inetnum: 202.59.96.0 - 202.59.111.255
netname: IINET-AU
descr: iiNet Limited
descr: Locked Bag 16
descr: Cloisters Square, WA, 6850
country: AU
org: ORG-IL1-AP
admin-c: NO20-AP
tech-c: NO20-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-AU-IINET
mnt-irt: IRT-IINET-AU
status: ALLOCATED PORTABLE
last-modified: 2017-08-29T23:02:26Z
source: APNIC

irt: IRT-IINET-AU
address: iiNet Limited
address: Level 9, 250 St Georges Tce
address: Perth
address: WA 6000
e-mail: noc@staff.iinet.net.au
abuse-mailbox: noc@staff.iinet.net.au
admin-c: IH207-AP
tech-c: IH207-AP
auth: # Filtered
mnt-by: MAINT-AU-IH207-AP
last-modified: 2010-12-15T02:05:54Z
source: APNIC

organisation: ORG-IL1-AP
org-name: iiNet Limited
country: AU
address: 502 Hay St
phone: +61-8-9214-2222
fax-no: +61-8-9214-2211
e-mail: noc@iinet.net.au
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2017-08-20T22:54:16Z
source: APNIC

person: Network Operations
nic-hdl: NO20-AP
e-mail: apnic-admin@staff.iinet.net.au
address: iiNet Limited
address: Level 1
address: 502 Hay Street
address: Subiaco WA 6008
phone: +61 8 9214 2222
fax-no: +61 8 9214 2211
country: AU
mnt-by: MAINT-AU-IINET
last-modified: 2012-01-16T06:42:06Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 88.190.183.18 from natural-breast-active.com

Hi,

The IP 88.190.183.18 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 88.190.183.18:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '88.190.183.0 - 88.190.183.255'

% Abuse contact for '88.190.183.0 - 88.190.183.255' is 'abuse@proxad.net'

inetnum: 88.190.183.0 - 88.190.183.255
netname: FR-DEDIBOX
descr: Dedibox SAS
descr: Hosting Customers
descr: Paris, France
remarks: trouble: Information: http://www.dedibox.fr/
remarks: trouble: Spam/Abuse requests: http://www.dedibox.fr/abuse/
remarks: trouble: Spam/Abuse requests: mailto:abuse@support.dedibox.fr
country: FR
admin-c: ACP23-RIPE
tech-c: TCP8-RIPE
status: ASSIGNED PA
mnt-by: PROXAD-MNT
created: 2011-07-14T16:45:51Z
last-modified: 2011-07-14T16:45:51Z
source: RIPE

role: Administrative Contact for ProXad
address: Free SAS / ProXad
address: 8, rue de la Ville L'Eveque
address: 75008 Paris
phone: +33 1 73 50 20 00
fax-no: +33 1 73 92 25 69
remarks: trouble: Information: http://www.proxad.net/
remarks: trouble: Spam/Abuse requests: mailto:abuse@proxad.net
admin-c: APfP1-RIPE
tech-c: TPfP1-RIPE
nic-hdl: ACP23-RIPE
mnt-by: PROXAD-MNT
abuse-mailbox: abuse@proxad.net
created: 2002-06-26T12:46:56Z
last-modified: 2013-08-01T12:16:00Z
source: RIPE # Filtered

role: Technical Contact for ProXad
address: Free SAS / ProXad
address: 8, rue de la Ville L'Eveque
address: 75008 Paris
phone: +33 1 73 50 20 00
fax-no: +33 1 73 92 25 69
remarks: trouble: Information: http://www.proxad.net/
remarks: trouble: Spam/Abuse requests: mailto:abuse@proxad.net
admin-c: APfP1-RIPE
tech-c: TPfP1-RIPE
nic-hdl: TCP8-RIPE
mnt-by: PROXAD-MNT
created: 2002-06-26T12:29:10Z
last-modified: 2011-06-14T09:03:07Z
source: RIPE # Filtered
abuse-mailbox: abuse@proxad.net

% Information related to '88.160.0.0/11AS12322'

route: 88.160.0.0/11
descr: ProXad network / Free SAS
descr: Paris, France
origin: AS12322
mnt-by: PROXAD-MNT
created: 2005-10-03T13:45:51Z
last-modified: 2005-10-03T13:45:51Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 80.226.132.185 from natural-breast-active.com

Hi,

The IP 80.226.132.185 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 80.226.132.185:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '80.226.64.0 - 80.226.255.255'

% Abuse contact for '80.226.64.0 - 80.226.255.255' is 'abuse@vodafone.de'

inetnum: 80.226.64.0 - 80.226.255.255
netname: DE-D2VODAFONE
descr: Vodafone GmbH
descr: Mobile Internet Access (2G&3G)
country: DE
admin-c: LEIF-RIPE
admin-c: BRST1-RIPE
tech-c: SCJO2-RIPE
tech-c: BRST1-RIPE
tech-c: VFAB2-RIPE
status: ASSIGNED PA
mnt-by: MMO-MNT
mnt-lower: MMO-MNT
mnt-routes: MMO-MNT
created: 2006-02-02T15:14:07Z
last-modified: 2016-04-20T14:00:53Z
source: RIPE # Filtered

role: Legal Requests for german agencies only
address: Am Seestern 1
address: D-40547 Duesseldorf
address: Germany
org: ORG-VDG1-RIPE
phone: +49 172 7654934
fax-no: +49 1520 917 2007
mnt-by: MMO-MNT
admin-c: LEIF-RIPE
tech-c: BRST1-RIPE
nic-hdl: VFAB2-RIPE
created: 2008-06-30T13:48:16Z
last-modified: 2010-12-08T09:38:05Z
source: RIPE # Filtered

person: Stephan Braehler
address: Vodafone GmbH
address: Ferdinand-Braun-Platz 1
address: D- 40549 Duesseldorf
phone: +49 211 533 2224
nic-hdl: BRST1-RIPE
mnt-by: MMO-MNT
created: 2006-09-02T08:47:08Z
last-modified: 2014-05-23T07:07:31Z
source: RIPE # Filtered

person: Christoph Leifeld
address: Vodafone D2 GmbH
address: Am Seestern 5
address: D-40547 Duesseldorf
address: Germany
phone: +49 211 533 3008
nic-hdl: LEIF-RIPE
mnt-by: MMO-MNT
created: 2006-05-31T15:56:07Z
last-modified: 2008-06-04T09:17:40Z
source: RIPE # Filtered

person: Jens-Olaf Schmidt
address: Vodafone D2 GmbH
address: Am Seestern 5
address: D-40547 Duesseldorf
address: Germany
phone: +49 211 533 2224
mnt-by: MMO-MNT
nic-hdl: SCJO2-RIPE
created: 2007-11-19T13:15:20Z
last-modified: 2011-01-28T10:26:32Z
source: RIPE # Filtered

% Information related to '80.226.0.0/16AS15709'

route: 80.226.0.0/16
descr: Vodafone GmbH
origin: AS15709
mnt-by: MMO-MNT
mnt-by: ARCOR-MNT
created: 2002-04-10T07:01:18Z
last-modified: 2016-04-20T14:08:34Z
source: RIPE

% Information related to '80.226.0.0/16AS3209'

route: 80.226.0.0/16
descr: Vodafone D2 GmbH
origin: AS3209
mnt-by: ARCOR-MNT
created: 2010-11-24T14:23:22Z
last-modified: 2010-11-24T14:23:22Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 185.29.148.16 from natural-breast-active.com

Hi,

The IP 185.29.148.16 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 185.29.148.16:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '185.29.148.0 - 185.29.148.255'

% Abuse contact for '185.29.148.0 - 185.29.148.255' is 'contact@aspserveur.com'

inetnum: 185.29.148.0 - 185.29.148.255
netname: FR-ASPSERVEUR-DSec
descr: ASPSERVEUR
country: FR
org: ORG-AA412-RIPE
admin-c: SE840-RIPE
tech-c: SE840-RIPE
status: ASSIGNED PA
remarks: ASPSERVEUR DSEC INFRA
mnt-by: ASPSERVEUR-MNT
created: 2013-09-24T22:53:53Z
last-modified: 2013-09-24T22:53:53Z
source: RIPE

organisation: ORG-AA412-RIPE
org-name: ASPSERVEUR
org-type: LIR
address: 785 voie Antiope Z.A.C. Athélia III
address: 13600
address: La Ciotat
address: FRANCE
phone: +33172890118
phone: +33427851338
fax-no: +33176616115
fax-no: +33484285655
admin-c: SE840-RIPE
admin-c: RN6748-RIPE
abuse-c: AR15189-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: ASPSERVEUR-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: ASPSERVEUR-MNT
created: 2008-01-22T10:10:49Z
last-modified: 2016-06-10T19:26:08Z
source: RIPE # Filtered

person: ENDERLE Sebastien
address: ASPserveur
address: 785 voie Antiope
address: Z.A.C. Athélia III
address: 13600 La Ciotat
address: France
mnt-by: ASPSERVEUR-MNT
phone: +33 4 88 66 17 62
fax-no: +33 4 88 66 17 24
nic-hdl: SE840-RIPE
mnt-by: ASPSERVEUR-MNT
created: 2004-11-12T12:53:25Z
last-modified: 2010-11-02T19:43:43Z
source: RIPE # Filtered

% Information related to '185.29.148.0/24AS34235'

route: 185.29.148.0/24
descr: ASPSERVEUR DSEC ROUTING
origin: AS34235
mnt-by: ASPSERVEUR-MNT
created: 2013-09-24T22:57:43Z
last-modified: 2013-09-24T22:57:43Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 192.99.206.59 from natural-breast-active.com

Hi,

The IP 192.99.206.59 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 192.99.206.59:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 192.99.206.59"
#
# Use "?" to get help.
#

OVH Hosting, Inc. OVH-ARIN-7 (NET-192-99-0-0-1) 192.99.0.0 - 192.99.255.255
Ideeclic Inc. OVH-CUST-648620 (NET-192-99-206-48-1) 192.99.206.48 - 192.99.206.63

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 119.42.83.94 from natural-breast-active.com

Hi,

The IP 119.42.83.94 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 119.42.83.94:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '119.42.80.0 - 119.42.95.255'

% Abuse contact for '119.42.80.0 - 119.42.95.255' is 'nmc@cat.net.th'

inetnum: 119.42.80.0 - 119.42.95.255
netname: CAT-BB-NET
descr: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
admin-c: TU38-AP
tech-c: PS474-AP
tech-c: WP273-AP
tech-c: PD452-AP
tech-c: CB840-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-TH-THIX-CAT
mnt-irt: IRT-CATBB-TH
last-modified: 2018-02-07T10:15:52Z
source: APNIC

irt: IRT-CATBB-TH
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
e-mail: nmc@cat.net.th
abuse-mailbox: nmc@cat.net.th
admin-c: CB840-AP
tech-c: TU38-AP
tech-c: PS474-AP
tech-c: WP273-AP
tech-c: PD452-AP
auth: # Filtered
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2018-02-07T10:10:39Z
source: APNIC

person: CAT Broadband
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
phone: +66-261-42138
e-mail: nmc@cat.net.th
nic-hdl: CB840-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2018-02-07T08:56:35Z
source: APNIC

person: Passanon dumsood
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
phone: +66-261-42138
e-mail: passanon.d@cat.net.th
nic-hdl: PD452-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2017-06-13T04:19:50Z
source: APNIC

person: Passakorn Senaliang
nic-hdl: PS474-AP
e-mail: pass2000@cat.net.th
address: CAT-BB-NET
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
phone: +66-261-42138
fax-no: +66-261-42682
country: TH
mnt-by: MAINT-NEW
last-modified: 2008-09-25T12:35:57Z
source: APNIC

person: Theerachai Udomkitpanya
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok
country: TH
phone: +66-261-42918
e-mail: theerachai.u@cattelecom.com
nic-hdl: TU38-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2017-11-23T10:20:25Z
source: APNIC

person: Weerapong Pankaew
nic-hdl: WP273-AP
e-mail: pankaew@cat.net.th
address: CAT-BB-NET
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
phone: +66-261-42138
fax-no: +66-261-42682
country: TH
mnt-by: MAINT-NEW
last-modified: 2008-09-25T12:45:58Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 99.30.232.236 from natural-breast-active.com

Hi,

The IP 99.30.232.236 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 99.30.232.236:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 99.30.232.236"
#
# Use "?" to get help.
#

AT&T Internet Services SBCIS-SBIS (NET-99-10-64-0-1) 99.10.64.0 - 99.75.191.255
Private Customer - AT&T Internet Services SBC-99-30-232-232-29-1712073942 (NET-99-30-232-232-1) 99.30.232.232 - 99.30.232.239

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 138.97.92.78 from natural-breast-active.com

Hi,

The IP 138.97.92.78 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 138.97.92.78:

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2018-05-11T07:45:33-03:00

% Permission denied. For more information, contact abuse@registro.br

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 46.8.158.15 from natural-breast-active.com

Hi,

The IP 46.8.158.15 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 46.8.158.15:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '46.8.158.0 - 46.8.158.255'

% Abuse contact for '46.8.158.0 - 46.8.158.255' is 'abuse@argotel.ru'

inetnum: 46.8.158.0 - 46.8.158.255
netname: ARGOTEL-NET
country: RU
org: ORG-IGP4-RIPE
admin-c: IG2988-RIPE
tech-c: IG2988-RIPE
status: ASSIGNED PA
mnt-by: MNT-NETART
mnt-routes: team-host-ru-mnt
created: 2017-09-19T15:32:49Z
last-modified: 2017-09-19T15:58:35Z
source: RIPE

organisation: ORG-IGP4-RIPE
org-name: Ildar Gilmutdinov PE
org-type: OTHER
address: Ugreshskaya 2/23
address: Moscow, Russia
abuse-c: AR36745-RIPE
mnt-ref: MNT-NETART
mnt-by: MNT-NETART
created: 2016-06-21T14:32:44Z
last-modified: 2016-06-21T14:34:15Z
source: RIPE # Filtered

person: Ildar Gilmutdinov
address: Ugreshskaya 2/23
address: Moscow, Russia
phone: +7 495 1780827
nic-hdl: IG2988-RIPE
mnt-by: MNT-NETART
created: 2016-06-21T14:32:44Z
last-modified: 2016-06-21T14:32:44Z
source: RIPE

% Information related to '46.8.158.0/24AS202984'

route: 46.8.158.0/24
origin: AS202984
mnt-by: team-host-ru-mnt
created: 2017-09-19T15:59:51Z
last-modified: 2017-09-19T15:59:51Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (BLAARKOP)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 91.121.165.211 from herbalyzer.com

Hi,

The IP 91.121.165.211 has just been banned by Fail2Ban after
5 attempts against SSH.

Here is more information about 91.121.165.211:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '91.121.160.0 - 91.121.175.255'

% Abuse contact for '91.121.160.0 - 91.121.175.255' is 'abuse@ovh.net'

inetnum: 91.121.160.0 - 91.121.175.255
netname: OVH
descr: OVH SAS
descr: Dedicated Servers
country: FR
admin-c: OK217-RIPE
tech-c: OTC2-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
created: 2016-06-13T14:55:47Z
last-modified: 2016-06-13T14:55:47Z
source: RIPE

role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered

person: Octave Klaba
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
phone: +33 9 74 53 13 23
nic-hdl: OK217-RIPE
mnt-by: OVH-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2017-10-30T21:44:51Z
source: RIPE # Filtered

% Information related to '91.121.0.0/16AS16276'

route: 91.121.0.0/16
descr: OVH ISP
descr: Paris, France
origin: AS16276
mnt-by: OVH-MNT
created: 2007-10-16T17:33:02Z
last-modified: 2007-10-16T17:33:02Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 192.99.245.137 from natural-breast-active.com

Hi,

The IP 192.99.245.137 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 192.99.245.137:

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 192.99.245.137"
#
# Use "?" to get help.
#

NetRange: 192.99.0.0 - 192.99.255.255
CIDR: 192.99.0.0/16
NetName: OVH-ARIN-7
NetHandle: NET-192-99-0-0-1
Parent: NET192 (NET-192-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS16276
Organization: OVH Hosting, Inc. (HO-2)
RegDate: 2013-06-17
Updated: 2013-06-17
Comment: www.ovh.com
Ref: https://whois.arin.net/rest/net/NET-192-99-0-0-1

OrgName: OVH Hosting, Inc.
OrgId: HO-2
Address: 800-1801 McGill College
City: Montreal
StateProv: QC
PostalCode: H3A 2N4
Country: CA
RegDate: 2011-06-22
Updated: 2017-01-28
Ref: https://whois.arin.net/rest/org/HO-2

OrgTechHandle: NOC11876-ARIN
OrgTechName: NOC
OrgTechPhone: +1-855-684-5463
OrgTechEmail: noc@ovh.net
OrgTechRef: https://whois.arin.net/rest/poc/NOC11876-ARIN

OrgAbuseHandle: ABUSE3956-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-855-684-5463
OrgAbuseEmail: abuse@ovh.ca
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE3956-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 59.120.243.8 from natural-breast-active.com

Hi,

The IP 59.120.243.8 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 59.120.243.8:

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '59.112.0.0 - 59.123.255.255'

% Abuse contact for '59.112.0.0 - 59.123.255.255' is 'hostmaster@twnic.net.tw'

inetnum: 59.112.0.0 - 59.123.255.255
netname: HINET-NET
descr: Data Communication Business Group,
descr: Chunghwa Telecom Co.,Ltd.
descr: No.21, Sec.1, Xinyi Rd., Taipei City
descr: 10048, Taiwan
country: TW
admin-c: HN27-AP
tech-c: HN27-AP
mnt-by: MAINT-TW-TWNIC
mnt-irt: IRT-TWNIC-AP
status: ALLOCATED PORTABLE
last-modified: 2013-12-04T12:38:05Z
source: APNIC

irt: IRT-TWNIC-AP
address: Taipei, Taiwan, 100
e-mail: hostmaster@twnic.net.tw
abuse-mailbox: hostmaster@twnic.net.tw
admin-c: TWA2-AP
tech-c: TWA2-AP
auth: # Filtered
remarks: Please note that TWNIC is not an ISP and is not empowered
remarks: to investigate complaints of network abuse.
mnt-by: MAINT-TW-TWNIC
last-modified: 2015-10-08T07:58:24Z
source: APNIC

person: HINET Network-Adm
address: CHTD, Chunghwa Telecom Co., Ltd.
address: No. 21, Sec. 21, Hsin-Yi Rd.,
address: Taipei Taiwan 100
country: TW
phone: +886 2 2322 3495
phone: +886 2 2322 3442
phone: +886 2 2344 3007
fax-no: +886 2 2344 2513
fax-no: +886 2 2395 5671
e-mail: network-adm@hinet.net
nic-hdl: HN27-AP
remarks: same as TWNIC nic-handle HN184-TW
mnt-by: MAINT-TW-TWNIC
last-modified: 2011-08-22T06:04:01Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 79.7.177.180 from natural-breast-active.com

Hi,

The IP 79.7.177.180 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 79.7.177.180:

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '79.0.0.0 - 79.7.255.255'

% Abuse contact for '79.0.0.0 - 79.7.255.255' is 'abuse@business.telecomitalia.it'

inetnum: 79.0.0.0 - 79.7.255.255
netname: TELECOM-ADSL-9
descr: Telecom Italia S.p.A. TIN EASY LITE
country: IT
admin-c: BS104-RIPE
tech-c: BS104-RIPE
status: ASSIGNED PA
mnt-by: TIWS-MNT
mnt-lower: TIWS-MNT
mnt-routes: TIWS-MNT
created: 2009-10-06T08:42:21Z
last-modified: 2015-10-23T09:10:43Z
source: RIPE

person: BBBEASYIP STAFF
address: Viale Parco De Medici, 61
address: 00148 Roma
address: Italy
phone: +39 06 36881
nic-hdl: BS104-RIPE
mnt-by: TIWS-MNT
created: 2001-10-19T12:23:31Z
last-modified: 2017-12-07T14:48:49Z
source: RIPE # Filtered

% Information related to '79.6.0.0/15AS3269'

route: 79.6.0.0/15
descr: INTERBUSINESS
origin: AS3269
mnt-by: TIWS-MNT
mnt-routes: INTERB-MNT
created: 2007-03-21T14:35:13Z
last-modified: 2007-03-21T14:35:13Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 14.29.123.176 from natural-breast-active.com

Hi,

The IP 14.29.123.176 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 14.29.123.176:

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '14.16.0.0 - 14.31.255.255'

% Abuse contact for '14.16.0.0 - 14.31.255.255' is 'anti-spam@ns.chinanet.cn.net'

inetnum: 14.16.0.0 - 14.31.255.255
netname: CHINANET-GD
descr: CHINANET Guangdong province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: IC83-AP
status: ALLOCATED PORTABLE
notify: abuse_gdnoc@189.cn
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-GD
last-modified: 2016-05-04T00:25:15Z
source: APNIC
mnt-irt: IRT-CHINANET-CN

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC

person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: gdnoc_HLWI@189.cn
address: NO.18,RO. ZHONGSHANER,YUEXIU DISTRIC,GUANGZHOU
phone: +86-20-87189274
fax-no: +86-20-87189274
country: CN
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse_gdnoc@189.cn
abuse-mailbox: antispam_gdnoc@189.cn
last-modified: 2014-09-22T04:41:26Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 87.128.127.52 from natural-breast-active.com

Hi,

The IP 87.128.127.52 has just been banned by Fail2Ban after
2 attempts against SSH.

Here is more information about 87.128.127.52:

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '87.128.0.0 - 87.128.127.255'

% Abuse contact for '87.128.0.0 - 87.128.127.255' is 'abuse@telekom.de'

inetnum: 87.128.0.0 - 87.128.127.255
netname: DTAG-STATIC10
descr: Deutsche Telekom AG
descr: T-DSL Business static dial-up
org: ORG-DTAG1-RIPE
country: DE
admin-c: DTIP
tech-c: DTST
status: ASSIGNED PA
mnt-by: DTAG-NIC
created: 2014-09-17T09:45:22Z
last-modified: 2014-09-17T09:45:22Z
source: RIPE

organisation: ORG-DTAG1-RIPE
org-name: Deutsche Telekom AG
org-type: OTHER
address: Group Information Security, SDA/Abuse
address: T-Online-Allee 1
address: DE 64295 Darmstadt
remarks: abuse contact in case of Spam,
hack attacks, illegal activity,
violation, scans, probes, etc.
mnt-ref: DTAG-NIC
mnt-by: DTAG-NIC
abuse-c: DTAG4-RIPE
created: 2014-06-17T11:47:04Z
last-modified: 2014-06-17T11:47:04Z
source: RIPE # Filtered

person: DTAG Global IP-Addressing
address: Deutsche Telekom AG
address: Darmstadt, Germany
phone: +49 180 2 33 1000
fax-no: +49 6151 6809399
nic-hdl: DTIP
mnt-by: DTAG-NIC
created: 2003-01-29T10:22:59Z
last-modified: 2015-11-27T08:02:45Z
source: RIPE # Filtered

person: Security Team
address: Deutsche Telekom AG
address: Darmstadt, Germany
phone: +49 180 2 33 1000
fax-no: +49 6151 6809399
nic-hdl: DTST
mnt-by: DTAG-NIC
created: 2003-01-29T10:31:11Z
last-modified: 2015-11-27T08:03:38Z
source: RIPE # Filtered

% Information related to '87.128.0.0/11AS3320'

route: 87.128.0.0/11
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
created: 2005-05-07T20:51:49Z
last-modified: 2005-05-07T20:51:49Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.91.2 (HEREFORD)

Regards,

Fail2Ban