Saturday, 6 May 2017

[Fail2Ban] SSH: banned 77.65.21.109 from vps297345.ovh.net

Hi,

The IP 77.65.21.109 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 77.65.21.109 :

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '77.65.0.0 - 77.65.23.255'

% Abuse contact for '77.65.0.0 - 77.65.23.255' is '[email protected]'

inetnum: 77.65.0.0 - 77.65.23.255
netname: ICPNET-5
descr: ICP Network
descr: static assignment address space
country: PL
admin-c: INEA-RIPE
tech-c: INEA-RIPE
status: ASSIGNED PA
mnt-by: INEA-MNT
mnt-lower: INEA-MNT
mnt-routes: INEA-MNT
created: 2010-12-01T15:14:27Z
last-modified: 2015-01-09T14:19:28Z
source: RIPE

role: INEA S.A.
address: ul. Klaudyny Potockiej 25
address: 60-211 Poznan
nic-hdl: INEA-RIPE
mnt-by: INEA-MNT
admin-c: PA7317-RIPE
tech-c: PA7317-RIPE
tech-c: PSZY
created: 2014-07-14T09:26:21Z
last-modified: 2015-01-21T10:25:56Z
source: RIPE # Filtered

% Information related to '77.65.0.0/17AS13110'

route: 77.65.0.0/17
descr: INEA S.A.
descr: Poznan
origin: AS13110
mnt-by: INEA-MNT
created: 2007-02-12T09:03:39Z
last-modified: 2015-01-27T10:14:29Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.88.1 (BLAARKOP)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 61.177.172.34 from vps297345.ovh.net

Hi,

The IP 61.177.172.34 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 61.177.172.34 :

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '61.177.0.0 - 61.177.255.255'

inetnum: 61.177.0.0 - 61.177.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: [email protected] 20020209
changed: [email protected] 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-86588231
phone: +86-25-86588745
fax-no: +86-25-86588104
e-mail: [email protected]
remarks: send anti-spam reports to [email protected]
remarks: send abuse reports to [email protected]
remarks: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: [email protected]
mnt-by: MAINT-CHINANET-JS
changed: [email protected] 20090831
changed: [email protected] 20090831
changed: [email protected] 20090901
source: APNIC
changed: [email protected] 20111114

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: [email protected]
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: [email protected] 20070416
changed: [email protected] 20140227
mnt-by: MAINT-CHINANET
source: APNIC

% Information related to '61.177.0.0/16AS23650'

route: 61.177.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: [email protected] 20030414
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 202.129.29.114 from vps297345.ovh.net

Hi,

The IP 202.129.29.114 has just been banned by Fail2Ban after
7 attempts against SSH.


Here is more information about 202.129.29.114 :

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '202.129.28.0 - 202.129.31.255'

inetnum: 202.129.28.0 - 202.129.31.255
netname: CAT-corperate-Service
country: TH
descr: CAT TELECOM Data Comm. Dept, Intrenet Office
descr: ***send spam abuse to [email protected]***
admin-c: TC476-AP
tech-c: IC174-AP
status: ALLOCATED NON-PORTABLE
changed: [email protected] 20041009
mnt-by: MAINT-TH-THIX-CAT
source: APNIC

person: IP-network CAT Telecom
nic-hdl: IC174-AP
e-mail: [email protected]
address: Data Comm. Dept.(Internet)
address: address: CAT Telecom Public Company Ltd,
address: address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
changed: [email protected] 20051202
mnt-by: MAINT-TH-THIX-CAT
source: APNIC

person: THIX network staff CAT Telecom
nic-hdl: TC476-AP
e-mail: [email protected]
address: Data Comm. Dept.(Internet)
address: address: CAT Telecom Public Company Ltd,
address: address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
changed: [email protected] 20051202
mnt-by: MAINT-TH-THIX-CAT
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 119.78.254.4 from vps297345.ovh.net

Hi,

The IP 119.78.254.4 has just been banned by Fail2Ban after
7 attempts against SSH.


Here is more information about 119.78.254.4 :

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '119.78.0.0 - 119.79.255.255'

inetnum: 119.78.0.0 - 119.79.255.255
netname: CSTNET
descr: China Science & Technology Network
descr: No.4,4th South Street, Zhong Guan Cun, Haidian District,
descr: P.O.Box 349,Beijing 100080
country: CN
admin-c: LH90-AP
tech-c: LH90-AP
status: ALLOCATED PORTABLE
remarks: Send abuse reports to [email protected]
changed: [email protected] 20100326
changed: [email protected] 20151202
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
mnt-lower: MAINT-CN-CSTNET
mnt-routes: MAINT-CN-CSTNET
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
changed: [email protected] 20110428
source: APNIC

person: Li Hong
nic-hdl: LH90-AP
e-mail: [email protected]
address: No.4, Zhongguancun 4th South Street, Haidian District, Beijing
phone: +86-10-58812000
fax-no: +86-10-58812900
country: CN
changed: [email protected] 20041109
mnt-by: MAINT-CN-LIHONG
source: APNIC

% Information related to '119.78.0.0/15AS7497'

route: 119.78.0.0/15
descr: CSTNET's IP
country: CN
origin: AS7497
remarks: Please contact [email protected] if you have any
remarks: Questions regarding this object.
remarks: Antispam mail please send to [email protected].
notify: [email protected]
mnt-by: MAINT-CN-CSTNET
changed: [email protected] 20090510
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 122.129.80.53 from vps297345.ovh.net

Hi,

The IP 122.129.80.53 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 122.129.80.53 :

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '122.129.80.0 - 122.129.80.255'

inetnum: 122.129.80.0 - 122.129.80.255
netname: BRAINNET-PK
descr: Brain Telecommunication Ltd.
descr: 730-Nizam Block Allama Iqbal Town, Lahore.
country: PK
admin-c: AFA2-AP
tech-c: AFA2-AP
status: ALLOCATED NON-PORTABLE
notify: [email protected]
notify: [email protected]
mnt-by: MAINT-PK-AMJAD-BRAINNET
mnt-lower: MAINT-PK-AMJAD-BRAINNET
mnt-routes: MAINT-PK-AMJAD-BRAINNET
mnt-irt: IRT-BRAINNET-PK
changed: [email protected] 20120417
source: APNIC

irt: IRT-BRAINNET-PK
address: Apt Block, 51, #08-140 Sims Drive Singapore 380051
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: AFA2-AP
tech-c: AFA2-AP
auth: # Filtered
mnt-by: MAINT-PK-AMJAD-BRAINNET
changed: [email protected] 20120407
irt-nfy: [email protected]
source: APNIC

person: Amjad Farooq Alvi
nic-hdl: AFA2-AP
e-mail: [email protected]
address: Apt Block, 51, #08-140 Sims Drive Singapore 380051
phone: +65-63384992
fax-no: +65-63384997
country: SG
changed: [email protected] 20070922
mnt-by: MAINT-PK-AMJAD-BRAINNET
source: APNIC

% Information related to '122.129.80.0/24AS17911'

route: 122.129.80.0/24
origin: AS17911
descr: Brain Telecommunication Ltd.
mnt-by: MAINT-PK-AMJAD-BRAINNET
changed: [email protected] 20161214
notify: [email protected]
notify: [email protected]
country: PK
mnt-routes: MAINT-PK-AMJAD-BRAINNET
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 116.31.116.48 from vps297345.ovh.net

Hi,

The IP 116.31.116.48 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 116.31.116.48 :

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '116.16.0.0 - 116.31.255.255'

inetnum: 116.16.0.0 - 116.31.255.255
netname: CHINANET-GD
descr: CHINANET Guangdong province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: IC83-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-GD
mnt-routes: MAINT-CHINANET-GD
status: ALLOCATED PORTABLE
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
source: APNIC
mnt-irt: IRT-CHINANET-CN
changed: [email protected] 20070307

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
changed: [email protected] 20101115
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: [email protected]
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: [email protected] 20070416
changed: [email protected] 20140227
mnt-by: MAINT-CHINANET
source: APNIC

person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: [email protected]
address: NO.18,RO. ZHONGSHANER,YUEXIU DISTRIC,GUANGZHOU
phone: +86-20-87189274
fax-no: +86-20-87189274
country: CN
changed: [email protected] 20110418
changed: [email protected] 20140922
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to [email protected]
abuse-mailbox: [email protected]
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban

[Fail2Ban] ProFTPD: banned 221.207.16.143 from vps297345.ovh.net

Hi,

The IP 221.207.16.143 has just been banned by Fail2Ban after
6 attempts against ProFTPD.


Here is more information about 221.207.16.143 :

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '221.207.0.0 - 221.207.63.255'

inetnum: 221.207.0.0 - 221.207.63.255
netname: UNICOM-QH
descr: China Unicom QingHai province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: CH1302-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-QH
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: This object can only be modified by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to [email protected] with your organisation
remarks: account name in the subject line.
mnt-irt: IRT-CU-CN
changed: [email protected] 20030731
changed: [email protected] 20060124
changed: [email protected] 20090508
source: APNIC

irt: IRT-CU-CN
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
changed: [email protected] 20101110
changed: [email protected] 20101116
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: [email protected]
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: [email protected] 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

% Information related to '221.207.0.0/18AS4837'

route: 221.207.0.0/18
descr: CNC Group CHINA169 Qinghai Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: [email protected] 20060118
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)

Regards,

Fail2Ban