The IP 218.87.111.108 has just been banned by Fail2Ban after
6 attempts against ssh.


Here are more information about 218.87.111.108:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '218.87.0.0 - 218.87.255.255'

inetnum:        218.87.0.0 - 218.87.255.255
netname:        CHINANET-JX
country:        CN
descr:          CHINANET jiangxi province network
descr:          China Telecom
descr:          No.31,jingrong street
descr:          Beijing 100032
admin-c:        CH93-AP
tech-c:         JN113-AP
status:         ALLOCATED NON-PORTABLE
changed:        hostmaster@cn.net 20020829
mnt-by:         MAINT-CHINANET
mnt-lower:      MAINT-IP-WWF
source:         APNIC

role:           JXDCB NET
address:        Jiangxi telecom network operation support department
address:        No.2009, Beijing East Road , nanchang，jiangxi province
country:        CN
phone:          +86 79186600000
e-mail:         wzzx_2013@189.cn
remarks:        send spam reports to wzzx_2013@189.cn
remarks:        and abuse reports to wzzx_2013@189.cn
remarks:        http://www.online.jx.cn
admin-c:        XY1-AP
tech-c:         WZ1-CN
tech-c:         WW49-AP
nic-hdl:        JN113-AP
notify:         wzzx_2013@189.cn
mnt-by:         MAINT-IP-WWF
changed:        hm-changed@apnic.net 20020812
changed:        chenyiq@gsta.com 20130221
source:         APNIC

person:         Chinanet Hostmaster
nic-hdl:        CH93-AP
e-mail:         anti-spam@ns.chinanet.cn.net
address:        No.31 ,jingrong street,beijing
address:        100032
phone:          +86-10-58501724
fax-no:         +86-10-58501724
country:        CN
changed:        dingsy@cndata.com 20070416
changed:        zhengzm@gsta.com 20140227
mnt-by:         MAINT-CHINANET
source:         APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)


Lines containing IP:218.87.111.108 in /var/log/auth.log

Aug 23 09:37:22 ns507067 sshd[13463]: Received disconnect from 218.87.111.108: 11:  [preauth]
Aug 23 14:34:22 ns507067 sshd[30060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:34:24 ns507067 sshd[30060]: Failed password for root from 218.87.111.108 port 54541 ssh2
Aug 23 14:34:29 ns507067 sshd[30060]: message repeated 2 times: [ Failed password for root from 218.87.111.108 port 54541 ssh2]
Aug 23 14:34:30 ns507067 sshd[30060]: Received disconnect from 218.87.111.108: 11:  [preauth]
Aug 23 14:34:30 ns507067 sshd[30060]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:34:52 ns507067 sshd[30062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:34:54 ns507067 sshd[30062]: Failed password for root from 218.87.111.108 port 56352 ssh2
Aug 23 14:34:59 ns507067 sshd[30062]: message repeated 2 times: [ Failed password for root from 218.87.111.108 port 56352 ssh2]
Aug 23 14:34:59 ns507067 sshd[30062]: Received disconnect from 218.87.111.108: 11:  [preauth]
Aug 23 14:34:59 ns507067 sshd[30062]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:35:23 ns507067 sshd[30134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:35:26 ns507067 sshd[30134]: Failed password for root from 218.87.111.108 port 50878 ssh2
Aug 23 14:35:30 ns507067 sshd[30134]: message repeated 2 times: [ Failed password for root from 218.87.111.108 port 50878 ssh2]
Aug 23 14:35:30 ns507067 sshd[30134]: Received disconnect from 218.87.111.108: 11:  [preauth]
Aug 23 14:35:30 ns507067 sshd[30134]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:35:45 ns507067 sshd[30256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:35:47 ns507067 sshd[30256]: Failed password for root from 218.87.111.108 port 58592 ssh2
Aug 23 14:35:55 ns507067 sshd[30256]: message repeated 2 times: [ Failed password for root from 218.87.111.108 port 58592 ssh2]
Aug 23 14:36:01 ns507067 sshd[30256]: Received disconnect from 218.87.111.108: 11:  [preauth]
Aug 23 14:36:01 ns507067 sshd[30256]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:36:08 ns507067 sshd[30301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:36:10 ns507067 sshd[30301]: Failed password for root from 218.87.111.108 port 43702 ssh2
Aug 23 14:36:14 ns507067 sshd[30301]: message repeated 2 times: [ Failed password for root from 218.87.111.108 port 43702 ssh2]
Aug 23 14:36:15 ns507067 sshd[30301]: Received disconnect from 218.87.111.108: 11:  [preauth]
Aug 23 14:36:15 ns507067 sshd[30301]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:36:18 ns507067 sshd[30303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.87.111.108  user=root
Aug 23 14:36:19 ns507067 sshd[30303]: Failed password for root from 218.87.111.108 port 59769 ssh2