Monday, 23 October 2017

[Fail2Ban] SSH: banned 181.51.187.91 from vps297345.ovh.net

Hi,

The IP 181.51.187.91 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 181.51.187.91 :

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2017-10-24 04:50:27 (BRST -02:00)

inetnum: 181.48/13
status: allocated
aut-num: N/A
owner: Telmex Colombia S.A.
ownerid: CO-ACSA-LACNIC
responsible: Operaciones Core IP
address: CLARO FIJO COLOMBIA - Cra 7 No. 63-44, 11111,
address: 11111 - Bogota - DC
country: CO
phone: +57 01 7480000 []
owner-c: ATI
tech-c: ATI
abuse-c: ATI
inetrev: 181.51/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20171022 AA
nslastaa: 20171022
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20171022 AA
nslastaa: 20171022
created: 20110502
changed: 20110502

nic-hdl: ATI
person: Network Security Team
e-mail: [email protected]
address: Cra 7 # 63-44 Piso 6, 00, 00
address: 10 - Bogota - DC
country: CO
phone: +57 01 7480456 [81966]
created: 20020909
changed: 20151008

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 202.51.74.55 from vps297345.ovh.net

Hi,

The IP 202.51.74.55 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 202.51.74.55 :

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '202.51.64.0 - 202.51.95.255'

% Abuse contact for '202.51.64.0 - 202.51.95.255' is '[email protected]'

inetnum: 202.51.64.0 - 202.51.95.255
netname: CCNEP-NP-AP
descr: Communications and communicate Nepal (P)Ltd.
descr: Siddhi Bhawan, Kantipath
descr: PO BOX 11291
descr: Kathmandu
country: NP
org: ORG-CCNP1-AP
admin-c: SS668-AP
tech-c: SS668-AP
remarks: --------------------------------------------------
remarks: This object can only be modified by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to [email protected] with your organisation
remarks: account name in the subject line.
remarks: ----------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-NP-CCNEP
mnt-routes: MAINT-NP-CCNEP
mnt-irt: IRT-CCNEP-NP
status: ALLOCATED PORTABLE
last-modified: 2017-08-29T23:12:31Z
source: APNIC

irt: IRT-CCNEP-NP
address: Communications & Communicate Nepal
address: Kantipath, Kathmandu
address: Nepal
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: SH307-AP
tech-c: SH307-AP
auth: # Filtered
mnt-by: MAINT-NP-CCNEP
last-modified: 2010-11-22T06:37:42Z
source: APNIC

organisation: ORG-CCNP1-AP
org-name: Communications & Communicate Nepal Pvt Ltd
country: NP
address: Ekantakunna
address: Lalitpur
phone: +977-9851027668
e-mail: [email protected]
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2017-08-29T23:21:16Z
source: APNIC

person: Suresh Prasad Shrestha
nic-hdl: SS668-AP
e-mail: [email protected]
address: Communications & Communicate Nepal
address: Kantipath, Kathmandu
address: Nepal
phone: +977-1-261-439
fax-no: +977-1-243-726
country: NP
mnt-by: MAINT-NEW
last-modified: 2008-09-04T07:29:20Z
source: APNIC

% Information related to '202.51.74.0/23AS23647'

route: 202.51.74.0/23
descr: CCNEP 202.51.74.0/23
origin: AS23647
mnt-by: MAINT-NP-CCNEP
last-modified: 2016-11-22T06:00:33Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 189.42.20.131 from vps297345.ovh.net

Hi,

The IP 189.42.20.131 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 189.42.20.131 :

[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2017-10-24 04:05:55 (BRST -02:00)

inetnum: 189.42.20.128/28
aut-num
: AS4230
abuse-c: GSE6
owner: Bilu Industria de Alimentos LTDA
ownerid: 78.216.298/0001-69
responsible: Marcio Moreira
owner-c: MAM2367
tech-c: MAM2367
created: 20111008
changed: 20130307
inetnum-up: 189.42.0.0/15

nic-hdl-br: MAM2367
person: Marcio Moreira
created: 20030830
changed: 20030830

nic-hdl-br: GSE6
person: Grupo de Segurança Internet da Embratel
created: 20001005
changed: 20160720

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to [email protected]
% and [email protected]
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 24.7.90.146 from vps297345.ovh.net

Hi,

The IP 24.7.90.146 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 24.7.90.146 :

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 24.7.90.146"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=24.7.90.146?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Comcast Cable Communications BAYAREA-11 (NET-24-7-0-0-1) 24.7.0.0 - 24.7.127.255
Comcast Cable Communications, LLC EASTERNSHORE-1 (NET-24-0-0-0-1) 24.0.0.0 - 24.15.255.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 219.74.45.45 from vps297345.ovh.net

Hi,

The IP 219.74.45.45 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 219.74.45.45 :

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '219.74.0.0 - 219.75.127.255'

% Abuse contact for '219.74.0.0 - 219.75.127.255' is '[email protected]'

inetnum: 219.74.0.0 - 219.75.127.255
netname: SINGNET-SG
descr: SingNet Pte Ltd
descr: 2 Stirling Road
descr: #03-00 Queenstown Exchange
descr: Singapore 148943
country: SG
org: ORG-SPL1-AP
admin-c: SH9-AP
tech-c: SH9-AP
status: ALLOCATED PORTABLE
remarks: ----------------------------------------------------------
remarks: This object can only be modified by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to [email protected] with your organisation
remarks: account name in the subject line.
remarks: ----------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-SG-SINGNET
mnt-routes: MAINT-SG-SINGNET
mnt-irt: IRT-SINGNET-SG
last-modified: 2017-08-29T22:58:36Z
source: APNIC

irt: IRT-SINGNET-SG
address: SingNet Engineering & Operations
address: 2 Stirling Road
address: #03-00 Queenstown Exchange
address: Singapore 148943
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: SH9-AP
tech-c: SH9-AP
auth: # Filtered
mnt-by: MAINT-SG-SINGNET
last-modified: 2011-01-14T03:36:00Z
source: APNIC

organisation: ORG-SPL1-AP
org-name: SingNet Pte Ltd
country: SG
address: c/o Singapore Telecommunications
address: Accounts Payable Department
address: 31 Exeter Road, # 16-00 Comcent
phone: +65-6472-2580
fax-no: +65-6471-9812
e-mail: [email protected]
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2017-10-11T01:28:39Z
source: APNIC

person: SingNet Hostmaster
address: SingNet Engineering & Operations
address: 2 Stirling Road
address: #03-00 Queenstown Exchange
address: Singapore 148943
country: SG
phone: +65 7845922
fax-no: +65 4753273
e-mail: [email protected]
nic-hdl: SH9-AP
notify: [email protected]
mnt-by: MAINT-SG-SINGNET
last-modified: 2011-12-22T05:14:44Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 176.31.110.73 from vps297345.ovh.net

Hi,

The IP 176.31.110.73 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 176.31.110.73 :

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '176.31.96.0 - 176.31.127.255'

% Abuse contact for '176.31.96.0 - 176.31.127.255' is '[email protected]'

inetnum: 176.31.96.0 - 176.31.127.255
netname: OVH
descr: OVH SAS
descr: Dedicated servers
descr: http://www.ovh.com
country: FR
admin-c: OK217-RIPE
tech-c: OTC2-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
created: 2011-10-27T14:07:25Z
last-modified: 2011-10-27T14:07:25Z
source: RIPE # Filtered

role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: [email protected]
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered

person: Octave Klaba
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
phone: +33 9 74 53 13 23
nic-hdl: OK217-RIPE
abuse-mailbox: [email protected]
mnt-by: OVH-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2010-10-05T08:51:16Z
source: RIPE # Filtered

% Information related to '176.31.0.0/16AS16276'

route: 176.31.0.0/16
descr: OVH ISP
descr: Paris, France
origin: AS16276
mnt-by: OVH-MNT
created: 2011-05-20T12:54:00Z
last-modified: 2011-05-20T12:54:00Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.90 (WAGYU)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 213.59.255.158 from vps297345.ovh.net

Hi,

The IP 213.59.255.158 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 213.59.255.158 :

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '213.59.192.0 - 213.59.255.255'

% Abuse contact for '213.59.192.0 - 213.59.255.255' is '[email protected]'

inetnum: 213.59.192.0 - 213.59.255.255
netname: RU-RTK-20000224
country: RU
org: ORG-JR8-RIPE
admin-c: RTNC-RIPE
tech-c: RTNC-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: ROSTELECOM-MNT
mnt-lower: ROSTELECOM-MNT
mnt-routes: ROSTELECOM-MNT
created: 2014-10-10T12:32:29Z
last-modified: 2016-08-09T13:25:47Z
source: RIPE

organisation: ORG-JR8-RIPE
org-name: PJSC Rostelecom
org-type: LIR
address: 25-2, Dubovaya Roscha street
address: 127427
address: MOSCOW
address: RUSSIAN FEDERATION
phone: +7 495 339 11 22
fax-no: +74999953619
admin-c: RTNC-RIPE
admin-c: ES1680-RIPE
admin-c: DS4715-RIPE
admin-c: EP6706-RIPE
admin-c: AA728-RIPE
admin-c: SVS153-RIPE
admin-c: ASV77-RIPE
admin-c: RVP-RIPE
admin-c: VEV57-RIPE
admin-c: TR4627-RIPE
admin-c: TL4565-RIPE
admin-c: AVB77-RIPE
admin-c: DN216-RIPE
admin-c: DA2353-RIPE
admin-c: ANK2555-RIPE
admin-c: IS111-RIPE
admin-c: VE128-RIPE
admin-c: SS216-RIPE
abuse-c: RTNC-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: ROSTELECOM-MNT
abuse-mailbox: [email protected]
mnt-by: RIPE-NCC-HM-MNT
mnt-by: ROSTELECOM-MNT
created: 2005-03-22T11:11:20Z
last-modified: 2017-04-28T12:13:35Z
source: RIPE # Filtered

role: JSC Rostelecom Technical Team
address: JSC Rostelecom
address: Russian Federation
abuse-mailbox: [email protected]
admin-c: DS4715-RIPE
admin-c: EEA-RIPE
admin-c: AV3066-RIPE
tech-c: DS4715-RIPE
tech-c: EEA-RIPE
tech-c: AV3066-RIPE
remarks: trouble: ---------------------------------------------------------------
remarks: trouble: Rostelecom NOC is available 24 x 7
remarks: trouble: e-mail [email protected]
remarks: trouble: ---------------------------------------------------------------
remarks: ------------------------------------------------------------------------
remarks: peering requests: [email protected]
remarks: ------------------------------------------------------------------------
remarks: http://www.rostelecom.ru/, looking-glass http://lg.ip.rt.ru/
remarks: ------------------------------------------------------------------------
nic-hdl: RTNC-RIPE
mnt-by: ROSTELECOM-MNT
created: 2007-11-27T13:28:11Z
last-modified: 2017-07-13T12:10:12Z
source: RIPE # Filtered

% Information related to '213.59.252.0/22AS12389'

route: 213.59.252.0/22
descr: ROSTELECOM NETS
origin: AS12389
mnt-by: ROSTELECOM-MNT
created: 2017-04-18T07:39:06Z
last-modified: 2017-04-18T07:39:06Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (HEREFORD)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 93.115.136.156 from vps297345.ovh.net

Hi,

The IP 93.115.136.156 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 93.115.136.156 :

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '93.115.136.0 - 93.115.139.255'

% Abuse contact for '93.115.136.0 - 93.115.139.255' is '[email protected]'

inetnum: 93.115.136.0 - 93.115.139.255
netname: MOLDTELECOM-NET
descr: JSC "Moldtelecom" S.A.
descr: Chisinau, Moldova
country: MD
admin-c: MLA32-RIPE
tech-c: MLA32-RIPE
status: ASSIGNED PA
remarks: INFRA-AW
remarks: MPLS, Option 82, FTTx
mnt-by: MOLDTELECOM-MNT
mnt-domains: MOLDTELECOM-MNT
mnt-lower: MOLDTELECOM-MNT
created: 2016-07-27T06:08:18Z
last-modified: 2016-07-27T06:08:18Z
source: RIPE

role: Moldtelecom LIR Adminstrators
remarks:
address: JSC "Moldtelecom" S.A.
address: 10, Stefan cel Mare ave.
address: Chisinau, Moldova
address: MD-2001
phone: +373 22570565
fax-no: +373 22542601
remarks:
admin-c: VSM13-RIPE
tech-c: NM2546-RIPE
nic-hdl: MLA32-RIPE
abuse-mailbox: [email protected]
remarks:
mnt-by: MOLDTELECOM-MNT
created: 2009-07-27T14:40:05Z
last-modified: 2009-07-27T14:40:05Z
source: RIPE # Filtered

% Information related to '93.115.136.0/21AS8926'

route: 93.115.136.0/21
descr: JSC MOLDTELECOM SA
origin: AS8926
mnt-by: MNT-MOLDTELECOM
created: 2014-03-03T08:44:54Z
last-modified: 2014-03-03T08:44:54Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (BLAARKOP)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 103.89.88.136 from vps297345.ovh.net

Hi,

The IP 103.89.88.136 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 103.89.88.136 :

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '103.89.88.0 - 103.89.91.255'

% Abuse contact for '103.89.88.0 - 103.89.91.255' is '[email protected]'

inetnum: 103.89.88.0 - 103.89.91.255
netname: ETC-VN
descr: ETC Viet Nam development technology company limited
descr: Xa Khuc, Chu Phan, Me Linh, HaNoi
admin-c: NNA25-AP
tech-c: NDM6-AP
country: VN
mnt-by: MAINT-VN-VNNIC
mnt-lower: MAINT-VN-VNNIC
mnt-irt: IRT-VNNIC-AP
mnt-routes: MAINT-VN-VNNIC
status: ALLOCATED PORTABLE
last-modified: 2017-03-30T08:17:17Z
source: APNIC

irt: IRT-VNNIC-AP
address: Ha Noi, VietNam
phone: +84-4-35564944
fax-no: +84-4-37821462
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: PT174-AP
tech-c: NTTT1-AP
auth: # Filtered
mnt-by: MAINT-VN-VNNIC
last-modified: 2010-11-07T23:14:27Z
source: APNIC

person: Nguyen Duc Manh
address: Xa Khuc, Chu Phan, Me Linh, Ha Noi
country: VN
phone: +84-1698129166
e-mail: [email protected]
nic-hdl: NDM6-AP
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-03-30T07:08:00Z
source: APNIC

person: Nguyen Ngoc An
address: Xa Khuc, Chu Phan, Me Linh, Ha Noi
country: VN
phone: +84-987444400
e-mail: [email protected]
nic-hdl: NNA25-AP
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-03-30T06:58:47Z
source: APNIC

% Information related to '103.89.88.0/22AS135905'

route: 103.89.88.0/22
descr: ETC-VN
origin: AS135905
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-04-11T08:05:46Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 54.191.248.124 from vps297345.ovh.net

Hi,

The IP 54.191.248.124 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 54.191.248.124 :

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 54.191.248.124"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=54.191.248.124?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Amazon Technologies Inc. AMAZON-2011L (NET-54-176-0-0-1) 54.176.0.0 - 54.191.255.255
Amazon.com, Inc. AMAZO-ZPDX8 (NET-54-188-0-0-1) 54.188.0.0 - 54.191.255.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 175.117.146.45 from vps297345.ovh.net

Hi,

The IP 175.117.146.45 has just been banned by Fail2Ban after
7 attempts against SSH.


Here is more information about 175.117.146.45 :

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 175.117.146.45


# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 175.112.0.0 - 175.127.255.255 (/12)
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
서비스명 : broadNnet
주소 : 서울특별ì&lsqauo;œ ì¤'구 퇴계로 24
우편번호 : 04637
í• ë&lsqauo;¹ì¼ìž : 20091217

이름 : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-106-2
전자우편 : [email protected]

조회하ì&lsqauo;  IPv4주소ëŠ" 위의 관리대행자로부터 아래의 사용자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------


[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 175.117.146.0 - 175.117.146.255 (/24)
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
네트워크 구분 : INFRA
주소 : 서울특별ì&lsqauo;œ ì¤'구 퇴계로
우편번호 : 04637
í• ë&lsqauo;¹ë‚´ì—­ ë"±ë¡ì¼ : 20100302

이름 : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-106-2
전자우편 : [email protected]


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 175.112.0.0 - 175.127.255.255 (/12)
Organization Name : SK Broadband Co Ltd
Service Name : broadNnet
Address : Seoul Jung-gu Toegye-ro 24
Zip Code : 04637
Registration Date : 20091217

Name : IP Manager
Phone : +82-2-106-2
E-Mail : [email protected]

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 175.117.146.0 - 175.117.146.255 (/24)
Organization Name : SK Broadband Co Ltd
Network Type : INFRA
Address : Seoul Jung-gu Toegye-ro
Zip Code : 04637
Registration Date : 20100302

Name : IP Manager
Phone : +82-2-106-2
E-Mail : [email protected]



- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 177.8.165.118 from vps297345.ovh.net

Hi,

The IP 177.8.165.118 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 177.8.165.118 :

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2017-10-24 02:04:01 (BRST -02:00)

inetnum: 177.8.165.116/30
aut-num
: AS53231
abuse-c: GRLTD8
owner: UDDO Unidade de Diagnóstico e Densitometria Óssea
ownerid: 59.586.321/0001-62
responsible: Beatriz Maria Leme
owner-c: BEMLE
tech-c: BEMLE
created: 20171002
changed: 20171002
inetnum-up: 177.8.160.0/20

nic-hdl-br: BEMLE
person: Beatriz Maria Leme
created: 20080810
changed: 20080810

nic-hdl-br: GRLTD8
person: GrupoHost LTDA
created: 20100510
changed: 20150819

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to [email protected]
% and [email protected]
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 64.17.72.122 from vps297345.ovh.net

Hi,

The IP 64.17.72.122 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 64.17.72.122 :

[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous. The query is assumed to be:
# "n 64.17.72.122"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=64.17.72.122?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 64.17.68.0 - 64.17.73.255
CIDR: 64.17.72.0/23, 64.17.68.0/22
NetName: NETBLK-TDSNET-BAJA
NetHandle: NET-64-17-68-0-1
Parent: NET64 (NET-64-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS20357
Organization: TDS TELECOM (TDST)
RegDate: 2004-08-19
Updated: 2014-12-11
Ref: https://whois.arin.net/rest/net/NET-64-17-68-0-1


OrgName: TDS TELECOM
OrgId: TDST
Address: 525 Junction Rd.
City: Madison
StateProv: WI
PostalCode: 53717
Country: US
RegDate: 1994-12-16
Updated: 2017-01-28
Comment: http://www.tdstelecom.com
Ref: https://whois.arin.net/rest/org/TDST


OrgTechHandle: INO44-ARIN
OrgTechName: IP Network Operations
OrgTechPhone: +1-800-358-3648
OrgTechEmail: [email protected]
OrgTechRef: https://whois.arin.net/rest/poc/INO44-ARIN

OrgTechHandle: SERVI6-ARIN
OrgTechName: Service Activation
OrgTechPhone: +1-800-358-3648
OrgTechEmail: [email protected]
OrgTechRef: https://whois.arin.net/rest/poc/SERVI6-ARIN

OrgTechHandle: INE14-ARIN
OrgTechName: IP Network Engineering
OrgTechPhone: +1-800-358-3648
OrgTechEmail: [email protected]
OrgTechRef: https://whois.arin.net/rest/poc/INE14-ARIN

OrgAbuseHandle: ABUSE163-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-358-3648
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE163-ARIN

RAbuseHandle: IBBSA-ARIN
RAbuseName: IBBS Abuse
RAbusePhone: +1-877-649-5723
RAbuseEmail: [email protected]
RAbuseRef: https://whois.arin.net/rest/poc/IBBSA-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 168.0.114.130 from vps297345.ovh.net

Hi,

The IP 168.0.114.130 has just been banned by Fail2Ban after
7 attempts against SSH.


Here is more information about 168.0.114.130 :

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2017-10-24 01:43:19 (BRST -02:00)

inetnum: 168.0.112.0/22
aut-num
: AS265249
abuse-c: JOVIC57
owner: NETMAIS TELECOMUNICACOES
ownerid: 11.367.701/0001-80
responsible: GIZELY ARAUJO DE OLIVEIRA
owner-c: JOVIC57
tech-c: JOVIC57
created: 20160105
changed: 20160105

nic-hdl-br: JOVIC57
person: JOSE VICTOR
created: 20120503
changed: 20171013

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to [email protected]
% and [email protected]
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 203.195.160.105 from vps297345.ovh.net

Hi,

The IP 203.195.160.105 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 203.195.160.105 :

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '203.195.128.0 - 203.195.255.255'

% Abuse contact for '203.195.128.0 - 203.195.255.255' is '[email protected]'

inetnum: 203.195.128.0 - 203.195.255.255
netname: TencentCloud
descr: Tencent cloud computing (Beijing) Co., Ltd.
descr: Floor 6, Yinke Building,38 Haidian St,
descr: Haidian District Beijing
country: CN
admin-c: JT1125-AP
tech-c: JX1747-AP
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
last-modified: 2014-11-18T08:04:03Z
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-10-23T07:01:45Z
source: APNIC

person: James Tian
address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
address: District of Hi-tech Park, Shenzhen
country: CN
phone: +86-755-86013388-84952
e-mail: [email protected]
nic-hdl: JT1125-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2016-10-31T07:10:47Z
source: APNIC

person: Jimmy Xiao
address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
address: District of Hi-tech Park, Shenzhen
country: CN
phone: +86-755-86013388-80224
e-mail: [email protected]
nic-hdl: JX1747-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2016-11-04T05:51:38Z
source: APNIC

% Information related to '203.195.128.0/18AS45090'

route: 203.195.128.0/18
descr: Shenzhen Tencent Computer Systems Company Limited
country: CN
origin: AS45090
notify: [email protected]
mnt-by: MAINT-CNNIC-AP
last-modified: 2013-08-07T03:28:02Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 190.205.54.150 from vps297345.ovh.net

Hi,

The IP 190.205.54.150 has just been banned by Fail2Ban after
7 attempts against SSH.


Here is more information about 190.205.54.150 :

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2017-10-24 01:16:54 (BRST -02:00)

inetnum: 190.200/13
status: allocated
aut-num: N/A
owner: CANTV Servicios, Venezuela
ownerid: VE-CSVE-LACNIC
responsible: Christian Delgado
address: Segunda Avenida de los Palos Grandes, 000, Entre Av. Fr
address: 1060 - Caracas - MI
country: VE
phone: +58 212 2095680 []
owner-c: LUM
tech-c: LUM
abuse-c: LUM
inetrev: 190.204/14
nserver: DNS1.CANTV.NET
nsstat: 20171023 AA
nslastaa: 20171023
nserver: DNS2.CANTV.NET
nsstat: 20171023 AA
nslastaa: 20171023
created: 20070613
changed: 20070613

nic-hdl: LUM
person: Alexander Martinez
e-mail: [email protected]
address: CANTV COR Los Palos Grandes- Chacao, Caracas Venezuela, 000, -
address: 1060 - Caracas - MI
country: VE
phone: +58 2122095685 [0]
created: 20020911
changed: 20170308

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 41.213.14.114 from vps297345.ovh.net

Hi,

The IP 41.213.14.114 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 41.213.14.114 :

[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '41.213.8.0 - 41.213.15.255'

% No abuse contact registered for 41.213.8.0 - 41.213.15.255

inetnum: 41.213.8.0 - 41.213.15.255
netname: iBurst-PDSN3-Dynamic
descr: Wireless Business Solutions (Pty) Ltd, iBurst
descr: iBurst-PDSN3-Dynamic
country: ZA
admin-c: JD4-AFRINIC
tech-c: JD4-AFRINIC
status: ASSIGNED PA
remarks: WBS South African Wireless Broadband
mnt-by: TF-196-46-64-0-196-46-71-255-MNT
source: AFRINIC # Filtered
parent: 41.213.0.0 - 41.213.127.255

person: James Devine
address: iBurst
address: 3012A William Nicol
address: Bryanston
address: Johannesburg 2021
address: South Africa
phone: +27 87 727 6000
nic-hdl: JD4-AFRINIC
remarks: *******************************
remarks: This is I-burst
remarks: *******************************
mnt-by: GENERATED-JB11ILAEHU7PSXUO1HLCH9ERRFQNVQ1A-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 112.54.96.90 from vps297345.ovh.net

Hi,

The IP 112.54.96.90 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 112.54.96.90 :

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '112.0.0.0 - 112.63.255.255'

% Abuse contact for '112.0.0.0 - 112.63.255.255' is '[email protected]'

inetnum: 112.0.0.0 - 112.63.255.255
netname: CMNET
descr: China Mobile Communications Corporation
descr: Mobile Communications Network Operator in China
descr: Internet Service Provider in China
country: CN
admin-c: lcj-AP
tech-c: HL1318-AP
remarks: service provider
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CN-CMCC
mnt-routes: MAINT-CN-CMCC
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
last-modified: 2016-05-04T00:15:52Z
source: APNIC
mnt-irt: IRT-CHINAMOBILE2-CN

irt: IRT-CHINAMOBILE2-CN
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: JS686-AP
tech-c: CT74-AP
auth: # Filtered
mnt-by: MAINT-CN-CMCC
last-modified: 2010-11-23T08:01:28Z
source: APNIC

person: haijun li
nic-hdl: HL1318-AP
e-mail: [email protected]
address: 29,Jinrong Ave, Xicheng district,beijing,100032
phone: +86 1052686688
fax-no: +86 10 52616187
country: CN
mnt-by: MAINT-CN-CMCC
abuse-mailbox: [email protected]
last-modified: 2016-11-29T09:38:38Z
source: APNIC

person: li changjun
address: 29 jinrong ave. xicheng district, beijing China
country: CN
phone: +86 52686688
e-mail: [email protected]
nic-hdl: lcj-ap
mnt-by: MAINT-CN-CMCC
last-modified: 2013-04-10T08:02:16Z
source: APNIC

% Information related to '112.48.0.0/13AS9808'

route: 112.48.0.0/13
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
last-modified: 2009-10-20T07:02:16Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 58.250.250.144 from vps297345.ovh.net

Hi,

The IP 58.250.250.144 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 58.250.250.144 :

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '58.248.0.0 - 58.255.255.255'

% Abuse contact for '58.248.0.0 - 58.255.255.255' is '[email protected]'

inetnum: 58.248.0.0 - 58.255.255.255
netname: UNICOM-GD
descr: China Unicom Guangdong province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: RP181-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-GD
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
mnt-irt: IRT-CU-CN
last-modified: 2013-08-08T23:06:06Z
source: APNIC

irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
last-modified: 2017-10-23T05:59:13Z
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: [email protected]
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC

person: runkeng pan
nic-hdl: RP181-AP
e-mail: [email protected]
address: XinShiKong Plaza,No 666 Huangpu Rd. Guangzhou 510627,China
phone: +86-20-22214174
fax-no: +86-20-22212266-4174
country: CN
mnt-by: MAINT-CNCGROUP-GD
last-modified: 2015-12-16T03:32:02Z
source: APNIC

% Information related to '58.250.0.0/15AS17623'

route: 58.250.0.0/15
descr: CNC Group CHINA169 Guangdong Province Network
country: CN
origin: AS17623
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-09-04T07:54:55Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 36.255.3.83 from vps297345.ovh.net

Hi,

The IP 36.255.3.83 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 36.255.3.83 :

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '36.255.0.0 - 36.255.3.255'

% Abuse contact for '36.255.0.0 - 36.255.3.255' is '[email protected]'

inetnum: 36.255.0.0 - 36.255.3.255
netname: MIRA_IN
descr: Mira Consulting
admin-c: IA160-AP
tech-c: HK1074-AP
country: IN
mnt-by: MAINT-IN-IRINN
mnt-irt: IRT-MIRA-IN
mnt-routes: MAINT-IN-MIRA
status: ASSIGNED PORTABLE
last-modified: 2016-02-10T05:59:01Z
source: APNIC

irt: IRT-MIRA-IN
address: Plot No.338, Road No.23/A, Jubilee Hills, Hyderabad
phone: +91 04040058771
fax-no: +91 04023116055
e-mail: [email protected]lting.in
abuse-mailbox: [email protected]
admin-c: IA160-AP
tech-c: IA160-AP
auth: # Filtered
remarks: send spam and abuse report to [email protected]
mnt-by: MAINT-IN-MIRA
last-modified: 2014-05-07T12:09:32Z
source: APNIC

role: IT Admin
address: Plot No.338, Road No.23/A, Jubilee Hills, Hyderabad
country: IN
phone: +91 04040058771
fax-no: +91 04023116055
e-mail: [email protected]
admin-c: HK1074-AP
tech-c: HK1074-AP
nic-hdl: IA160-AP
remarks: send spam and abuse report to [email protected]
abuse-mailbox: [email protected]
mnt-by: MAINT-IN-MIRA
last-modified: 2014-05-07T12:01:50Z
source: APNIC

person: Hari Krishna
address: Plot No.338, Road No.23/A, Jubilee Hills, Hyderabad
country: IN
phone: +91 04040058771
fax-no: +91 04023116055
e-mail: [email protected]
nic-hdl: HK1074-AP
remarks: send spam and abuse report to [email protected]
abuse-mailbox: [email protected]
mnt-by: MAINT-IN-MIRA
last-modified: 2014-05-07T12:02:11Z
source: APNIC

% Information related to '36.255.3.0/24AS46071'

route: 36.255.3.0/24
descr: CtrlS Route Object
origin: AS46071
country: IN
mnt-by: MAINT-IN-IRINN
mnt-routes: MAINT-IN-NIRMAL
last-modified: 2016-04-06T04:59:06Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 181.143.23.42 from vps297345.ovh.net

Hi,

The IP 181.143.23.42 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 181.143.23.42 :

[Querying whois.arin.net]
[Redirected to whois.lacnic.net]
[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2017-10-24 00:00:59 (BRST -02:00)

inetnum: 181.136/13
status: allocated
aut-num: N/A
owner: EPM Telecomunicaciones S.A. E.S.P.
ownerid: CO-EPME1-LACNIC
responsible: Administrador EPMNET
address: Carrera 77 39b-16, -, -
address: 940 - Medellin - CO
country: CO
phone: +57 4 4152280 []
owner-c: YGO2
tech-c: YGO2
abuse-c: YGO2
inetrev: 181.136/13
nserver: LAUTA.UNE.NET.CO
nsstat: 20171023 AA
nslastaa: 20171023
nserver: BIRLOCHA.UNE.NET.CO
nsstat: 20171023 AA
nslastaa: 20171023
nserver: NSBOG01.UNE.NET.CO
nsstat: 20171023 AA
nslastaa: 20171023
created: 20130726
changed: 20130726

nic-hdl: YGO2
person: Juan Molina
e-mail: [email protected]
address: Cra. 16 Nro. 11A Sur 100, 100, --
address: NA - Medellin - An
country: CO
phone: +57 4 5150505 [0]
created: 20030120
changed: 20110928

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 1.246.219.166 from vps297345.ovh.net

Hi,

The IP 1.246.219.166 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 1.246.219.166 :

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query : 1.246.219.166


# KOREAN(UTF8)

조회하ì&lsqauo;  IPv4주소ëŠ" 한국인터넷진흥원으로부터 아래의 관리대행자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.

[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 1.234.0.0 - 1.255.255.255 (/12+/14+/15)
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
서비스명 : broadNnet
주소 : 서울특별ì&lsqauo;œ ì¤'구 퇴계로 24
우편번호 : 04637
í• ë&lsqauo;¹ì¼ìž : 20100726

이름 : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-106-2
전자우편 : [email protected]

조회하ì&lsqauo;  IPv4주소ëŠ" 위의 관리대행자로부터 아래의 사용자에게 í• ë&lsqauo;¹ë˜ì—ˆìœ¼ë©°, í• ë&lsqauo;¹ ì •ë³´ëŠ" ë&lsqauo;¤ìŒê³¼ 같습ë&lsqauo;ˆë&lsqauo;¤.
--------------------------------------------------------------------------------


[ 네트워크 í• ë&lsqauo;¹ ì •ë³´ ]
IPv4주소 : 1.246.219.0 - 1.246.219.255 (/24)
기관명 : 에스케이브로ë"œë°´ë"œì£¼ì&lsqauo;íšŒì‚¬
네트워크 구분 : CUSTOMER
주소 : 서울특별ì&lsqauo;œ ì¤'구 퇴계로
우편번호 : 04637
í• ë&lsqauo;¹ë‚´ì—­ ë"±ë¡ì¼ : 20130122

이름 : IP주소 ë&lsqauo;´ë&lsqauo;¹ìž
ì „í™"번호 : +82-2-106-2
전자우편 : [email protected]


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 1.234.0.0 - 1.255.255.255 (/12+/14+/15)
Organization Name : SK Broadband Co Ltd
Service Name : broadNnet
Address : Seoul Jung-gu Toegye-ro 24
Zip Code : 04637
Registration Date : 20100726

Name : IP Manager
Phone : +82-2-106-2
E-Mail : [email protected]

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 1.246.219.0 - 1.246.219.255 (/24)
Organization Name : SK Broadband Co Ltd
Network Type : CUSTOMER
Address : Seoul Jung-gu Toegye-ro
Zip Code : 04637
Registration Date : 20130122

Name : IP Manager
Phone : +82-2-106-2
E-Mail : [email protected]



- KISA/KRNIC WHOIS Service -

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 60.173.242.141 from vps297345.ovh.net

Hi,

The IP 60.173.242.141 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 60.173.242.141 :

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '60.166.0.0 - 60.175.255.255'

% Abuse contact for '60.166.0.0 - 60.175.255.255' is '[email protected]'

inetnum: 60.166.0.0 - 60.175.255.255
netname: CHINANET-AH
descr: CHINANET anhui province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: JW89-AP
mnt-by: APNIC-HM
mnt-routes: MAINT-CHINANET-AH
mnt-lower: MAINT-CHINANET-AH
status: ALLOCATED PORTABLE
last-modified: 2015-08-26T01:28:01Z
source: APNIC
mnt-irt: IRT-CHINANET-CN

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: [email protected]
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC

person: Jinneng Wang
address: 17/F, Postal Building No.120 Changjiang
address: Middle Road, Hefei, Anhui, China
country: CN
phone: +86-551-2659073
fax-no: +86-551-2659287
e-mail: [email protected]
nic-hdl: JW89-AP
mnt-by: MAINT-CHINANET-AH
last-modified: 2014-02-21T01:19:43Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 221.176.245.170 from vps297345.ovh.net

Hi,

The IP 221.176.245.170 has just been banned by Fail2Ban after
7 attempts against SSH.


Here is more information about 221.176.245.170 :

[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '221.176.0.0 - 221.183.255.255'

% Abuse contact for '221.176.0.0 - 221.183.255.255' is '[email protected]'

inetnum: 221.176.0.0 - 221.183.255.255
netname: CMNET
descr: China Mobile Communications Corporation
descr: Mobile Communications Network Operator in China
descr: Internet Service Provider in China
country: CN
org: ORG-CM1-AP
admin-c: JS686-AP
tech-c: CT74-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CN-CMCC
mnt-routes: MAINT-CN-CMCC
remarks: ------------------------------
remarks: Please send abuse e-mail to
remarks: [email protected]
remarks: Please send probe e-mail to
remarks: [email protected]
remarks: -------------------------------
status: ALLOCATED PORTABLE
last-modified: 2017-08-30T07:22:05Z
source: APNIC
mnt-irt: IRT-CHINAMOBILE-CN

irt: IRT-CHINAMOBILE-CN
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: CT74-AP
tech-c: CT74-AP
auth: # Filtered
mnt-by: MAINT-CN-CMCC
last-modified: 2014-11-18T02:41:02Z
source: APNIC

organisation: ORG-CM1-AP
org-name: China Mobile
country: CN
address: 29, Jinrong Ave.
phone: +86-10-5260-6688
fax-no: +86-10-5261-6187
e-mail: [email protected]
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2017-08-23T12:56:36Z
source: APNIC

role: chinamobile tech
address: 29, Jinrong Ave.,Xicheng district
address: Beijing
country: CN
phone: +86 5268 6688
fax-no: +86 5261 6187
e-mail: [email protected]
admin-c: HL1318-AP
tech-c: HL1318-AP
nic-hdl: ct74-AP
notify: [email protected]
mnt-by: MAINT-cn-cmcc
abuse-mailbox: [email protected]
last-modified: 2016-11-29T09:37:27Z
source: APNIC

person: Jinxia Sun
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
country: CN
phone: +86-10-52686688
fax-no: +86-10-66006012
e-mail: [email protected]
nic-hdl: JS686-AP
remarks: ------------------------------
remarks: Please send abuse e-mail to
remarks: [email protected]
remarks: Please send probe e-mail to
remarks: [email protected]
remarks: -------------------------------
mnt-by: MAINT-CN-CMCC
last-modified: 2014-11-18T02:47:03Z
source: APNIC

% Information related to '221.176.0.0/13AS9808'

route: 221.176.0.0/13
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
last-modified: 2012-02-15T02:37:24Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 80.172.244.226 from vps297345.ovh.net

Hi,

The IP 80.172.244.226 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 80.172.244.226 :

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '80.172.244.0 - 80.172.247.255'

% Abuse contact for '80.172.244.0 - 80.172.247.255' is '[email protected]'

inetnum: 80.172.244.0 - 80.172.247.255
netname: PT-LUNACLOUD
descr: Lunacloud, Lda
country: PT
admin-c: ESO6-RIPE
tech-c: ESO6-RIPE
status: ASSIGNED PA
mnt-by: ESOTERICA-MNT
created: 2013-11-04T19:04:11Z
last-modified: 2013-11-04T19:04:11Z
source: RIPE

role: Esoterica's Hostmaster
address: Claranet
address: Edificio ParqueExpo
address: Av. D. João II, 1.07-2.1, R/C
address: 1998-014 Lisboa
address: Portugal
phone: +351 21 3199200
phone: +351 22 6080760
fax-no: +351 21 3199201
abuse-mailbox: [email protected]
remarks: trouble: Work days 0900-2000 GMT
remarks: trouble: To leave a message off-hours and eventually page someone
remarks: trouble: +351-21-3199292
remarks: trouble: +351-93-6984536
admin-c: MC8492-RIPE
tech-c: MC8492-RIPE
nic-hdl: ESO6-RIPE
mnt-by: ESOTERICA-MNT
created: 2002-01-15T10:35:48Z
last-modified: 2008-08-07T11:32:01Z
source: RIPE # Filtered

% Information related to '80.172.0.0/16AS8426'

route: 80.172.0.0/16
descr: Claranet Portugal
descr: Lisboa, Portugal
origin: AS8426
mnt-by: CLARANET-MNT
created: 2008-07-09T16:19:33Z
last-modified: 2013-07-04T17:36:57Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (BLAARKOP)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 93.174.93.207 from vps297345.ovh.net

Hi,

The IP 93.174.93.207 has just been banned by Fail2Ban after
7 attempts against SSH.


Here is more information about 93.174.93.207 :

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '93.174.93.0 - 93.174.93.255'

% Abuse contact for '93.174.93.0 - 93.174.93.255' is '[email protected]'

inetnum: 93.174.93.0 - 93.174.93.255
netname: SC-QUASI55
descr: QUASI
country: SC
org: ORG-QNL3-RIPE
admin-c: QNL1-RIPE
tech-c: QNL1-RIPE
status: ASSIGNED PA
mnt-by: QUASINETWORKS-MNT
mnt-lower: QUASINETWORKS-MNT
mnt-routes: QUASINETWORKS-MNT
created: 2008-06-29T21:36:16Z
last-modified: 2016-01-23T22:23:14Z
source: RIPE

organisation: ORG-QNL3-RIPE
org-name: Quasi Networks LTD.
org-type: OTHER
address: Suite 1, Second Floor
address: Sound & Vision House, Francis Rachel Street
address: Victoria, Mahe, SEYCHELLES
remarks: *****************************************************************************
remarks: IMPORTANT INFORMATION
remarks: *****************************************************************************
remarks: We are a high bandwidth network provider offering bandwidth solutions.
remarks: Government agencies can sent their requests to [email protected]
remarks: Please only use [email protected] for abuse reports.
remarks: For all other requests, please see the details on our website.
remarks: *****************************************************************************
abuse-mailbox: [email protected]
abuse-c: AR34302-RIPE
mnt-ref: QUASINETWORKS-MNT
mnt-by: QUASINETWORKS-MNT
created: 2015-11-08T22:25:26Z
last-modified: 2015-11-27T09:37:50Z
source: RIPE # Filtered

role: Quasi Networks LTD
address: Suite 1, Second Floor
address: Sound & Vision House, Francis Rachel Street
address: Victoria, Mahe, SEYCHELLES
remarks: *****************************************************************************
remarks: IMPORTANT INFORMATION
remarks: *****************************************************************************
remarks: We are a high bandwidth network provider offering bandwidth solutions.
remarks: Government agencies can sent their requests to [email protected]
remarks: Please only use [email protected] for abuse reports.
remarks: For all other requests, please see the details on our website.
remarks: *****************************************************************************
abuse-mailbox: [email protected]
nic-hdl: QNL1-RIPE
mnt-by: QUASINETWORKS-MNT
created: 2015-11-07T22:43:04Z
last-modified: 2015-11-07T23:04:49Z
source: RIPE # Filtered

% Information related to '93.174.88.0/21as29073'

route: 93.174.88.0/21
descr: Quasi Networks LTD (IBC)
origin: as29073
mnt-by: QUASINETWORKS-MNT
created: 2008-06-20T15:33:47Z
last-modified: 2016-01-23T22:26:12Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (BLAARKOP)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 115.47.52.109 from vps297345.ovh.net

Hi,

The IP 115.47.52.109 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 115.47.52.109 :

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '115.47.0.0 - 115.47.255.255'

% Abuse contact for '115.47.0.0 - 115.47.255.255' is '[email protected]'

inetnum: 115.47.0.0 - 115.47.255.255
netname: DXTNET
descr: Beijing Teletron Telecom Engineering Co., Ltd.
descr: Jian Guo Road, Chaoyang District, Beijing, PR.China
admin-c: PH628-AP
tech-c: ML1879-AP
country: CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
last-modified: 2017-10-12T09:20:03Z
source: APNIC

irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-10-23T07:01:45Z
source: APNIC

person: Fred Xu
address: No.11 Hepingli east Dongcheng District, Beijing,China
country: CN
phone: +86-010-52206210
e-mail: [email protected]
nic-hdl: ML1879-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2016-01-29T10:58:01Z
source: APNIC

person: Pu Haijing
address: No.11 Hepingli East Dongcheng District, Beijing,China
country: CN
phone: +86-010-52239495
e-mail: [email protected]
nic-hdl: PH628-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2016-03-07T03:18:01Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 195.151.214.77 from vps297345.ovh.net

Hi,

The IP 195.151.214.77 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 195.151.214.77 :

[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '195.151.213.0 - 195.151.214.255'

% Abuse contact for '195.151.213.0 - 195.151.214.255' is '[email protected]'

inetnum: 195.151.213.0 - 195.151.214.255
netname: ORANGE-FTGROUP-ISAT-NET
descr: ISAT links
country: RU
admin-c: ERNO3-RIPE
tech-c: ERNO3-RIPE
status: ASSIGNED PA
mnt-by: ROSPRINT-NCC
created: 2007-08-10T06:27:49Z
last-modified: 2010-06-23T08:03:43Z
source: RIPE

role: EQUANT RUSSIA Network Operation Center
address: LLC Equant/Russia
address: 1-st Krasnogvardeyskiy proezd, build. 15
address: Moscow, 123100, Russia
phone: +7 495 777 0999
phone: +7 495 777 0800
fax-no: +7 495 777 0890
admin-c: YVM-RIPE
tech-c: YVM-RIPE
tech-c: DRP23-RIPE
tech-c: YA589-RIPE
tech-c: OA2285-RIPE
tech-c: VP12948-RIPE
nic-hdl: ERNO3-RIPE
tech-c: PD7507-RIPE
remarks: trouble: ==============================
remarks: trouble: General questions: [email protected]
remarks: trouble: Spam and abuse: [email protected]
remarks: trouble: Routing: [email protected]
remarks: trouble: ==============================
remarks: trouble: *** A T T E N T I O N !!! ***
remarks: trouble:
remarks: trouble: Please use [email protected] e-mail address for
remarks: trouble: spam and abuse complaints.
remarks: trouble: ==============================
mnt-by: ROSPRINT-NCC
created: 2003-11-05T10:46:23Z
last-modified: 2017-10-11T10:54:35Z
source: RIPE # Filtered
abuse-mailbox: [email protected]

% Information related to '195.151.0.0/16AS2854'

route: 195.151.0.0/16
descr: RU-ROSPRINT BLOCK
origin: AS2854
mnt-by: ROSPRINT-NCC
created: 1970-01-01T00:00:00Z
last-modified: 2001-09-22T09:32:21Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.90 (ANGUS)

Regards,

Fail2Ban

[Fail2Ban] SSH: banned 190.85.144.10 from vps297345.ovh.net

Hi,

The IP 190.85.144.10 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 190.85.144.10 :

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2017-10-23 21:11:12 (BRST -02:00)

inetnum: 190.85/16
status: allocated
aut-num: N/A
owner: Telmex Colombia S.A.
ownerid: CO-ACSA-LACNIC
responsible: Operaciones Core IP
address: CLARO FIJO COLOMBIA - Cra 7 No. 63-44, 11111,
address: 11111 - Bogota - DC
country: CO
phone: +57 01 7480000 []
owner-c: ATI
tech-c: ATI
abuse-c: ATI
inetrev: 190.85/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20171023 AA
nslastaa: 20171023
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20171023 AA
nslastaa: 20171023
created: 20100311
changed: 20100311

nic-hdl: ATI
person: Network Security Team
e-mail: [email protected]
address: Cra 7 # 63-44 Piso 6, 00, 00
address: 10 - Bogota - DC
country: CO
phone: +57 01 7480456 [81966]
created: 20020909
changed: 20151008

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 200.35.37.50 from vps297345.ovh.net

Hi,

The IP 200.35.37.50 has just been banned by Fail2Ban after
7 attempts against SSH.


Here is more information about 200.35.37.50 :

[Querying whois.lacnic.net]
[whois.lacnic.net]

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2017-10-23 20:54:03 (BRST -02:00)

inetnum: 200.35.32/20
status: allocated
aut-num: N/A
owner: EDATEL S.A. E.S.P
ownerid: CO-ESES2-LACNIC
responsible: NOC Internet Edatel
address: CL 41 CR 52 -28 (PISO 15 ), 0, 0
address: 0 - MEDELLIN - 4
country: CO
phone: +57 4 3846562 []
owner-c: EDP4
tech-c: EDP4
abuse-c: EDP4
inetrev: 200.35.32/20
nserver: LAUTA.UNE.NET.CO
nsstat: 20171021 AA
nslastaa: 20171021
nserver: BIRLOCHA.UNE.NET.CO
nsstat: 20171021 AA
nslastaa: 20171021
nserver: NSBOG01.UNE.NET.CO
nsstat: 20171021 AA
nslastaa: 20171021
created: 20041129
changed: 20041129

nic-hdl: EDP4
person: Operación IP y TX
e-mail: [email protected]
address: Calle 41 Nro. 52 28, P 2, Ed. Edatel
address: 574 - Medellin - An
country: CO
phone: +57 4 3846562 []
created: 20041004
changed: 20161027

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.


Regards,

Fail2Ban

[Fail2Ban] SSH: banned 110.80.42.26 from vps297345.ovh.net

Hi,

The IP 110.80.42.26 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 110.80.42.26 :

[Querying whois.arin.net]
[Redirected to whois.apnic.net]
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '110.80.0.0 - 110.87.255.255'

% Abuse contact for '110.80.0.0 - 110.87.255.255' is '[email protected]'

inetnum: 110.80.0.0 - 110.87.255.255
netname: CHINANET-FJ
descr: CHINANET FUJIAN PROVINCE NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: CA67-AP
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-FJ
status: ALLOCATED PORTABLE
last-modified: 2016-05-04T00:17:16Z
source: APNIC
mnt-irt: IRT-CHINANET-CN

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC

role: CHINANETFJ IP ADMIN
address: 7,East Street,Fuzhou,Fujian,PRC
country: CN
phone: +86-591-83309761
fax-no: +86-591-83371954
e-mail: [email protected]
remarks: send spam reports and abuse reports
remarks: to [email protected]
remarks: Please include detailed information and
remarks: times in UTC
admin-c: FH71-AP
tech-c: FH71-AP
nic-hdl: CA67-AP
remarks: www.fjtelecom.com
notify: [email protected]
mnt-by: MAINT-CHINANET-FJ
last-modified: 2011-12-06T00:10:50Z
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: [email protected]
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-UK3)

Regards,

Fail2Ban