Tuesday, November 29, 2016

[Fail2Ban] ssh: banned 172.98.67.107 from vps29304091.vm.ramnoc.net

Hi,

The IP 172.98.67.107 has just been banned by Fail2Ban after
6 attempts against ssh.


Here are more information about 172.98.67.107:


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=172.98.67.107?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#


# start

NetRange: 172.98.64.0 - 172.98.95.255
CIDR: 172.98.64.0/19
NetName: TSSL
NetHandle: NET-172-98-64-0-1
Parent: NET172 (NET-172-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS46562
Organization: Total Server Solutions L.L.C. (TSSL-2)
RegDate: 2015-06-15
Updated: 2015-06-15
Ref: https://whois.arin.net/rest/net/NET-172-98-64-0-1


OrgName: Total Server Solutions L.L.C.
OrgId: TSSL-2
Address: 34 Peachtree ST
Address: Suite 400
City: Atlanta
StateProv: GA
PostalCode: 30303
Country: US
RegDate: 2007-02-13
Updated: 2011-04-02
Ref: https://whois.arin.net/rest/org/TSSL-2

ReferralServer: rwhois://208.78.43.3:4321

OrgAbuseHandle: TSSNO-ARIN
OrgAbuseName: TSS NOC
OrgAbusePhone: +1-877-391-9909
OrgAbuseEmail: noc@totalserversolutions.com
OrgAbuseRef: https://whois.arin.net/rest/poc/TSSNO-ARIN

OrgNOCHandle: TSSNO-ARIN
OrgNOCName: TSS NOC
OrgNOCPhone: +1-877-391-9909
OrgNOCEmail: noc@totalserversolutions.com
OrgNOCRef: https://whois.arin.net/rest/poc/TSSNO-ARIN

OrgTechHandle: TSSNO-ARIN
OrgTechName: TSS NOC
OrgTechPhone: +1-877-391-9909
OrgTechEmail: noc@totalserversolutions.com
OrgTechRef: https://whois.arin.net/rest/poc/TSSNO-ARIN

# end


# start

NetRange: 172.98.67.0 - 172.98.67.255
CIDR: 172.98.67.0/24
NetName: HOSTINGSERVICES
NetHandle: NET-172-98-67-0-1
Parent: TSSL (NET-172-98-64-0-1)
NetType: Reallocated
OriginAS: AS46562
Organization: Hosting Services, Inc. (HS-372)
RegDate: 2015-08-01
Updated: 2015-08-01
Ref: https://whois.arin.net/rest/net/NET-172-98-67-0-1


OrgName: Hosting Services, Inc.
OrgId: HS-372
Address: 151 Front Street
City: Toronto
StateProv: ON
PostalCode: M5J 2Z1
Country: CA
RegDate: 2015-08-01
Updated: 2016-01-25
Ref: https://whois.arin.net/rest/org/HS-372


OrgTechHandle: NOC12189-ARIN
OrgTechName: NOC
OrgTechPhone: +1-435-755-3433
OrgTechEmail: noc@uk2group.com
OrgTechRef: https://whois.arin.net/rest/poc/NOC12189-ARIN

OrgAbuseHandle: HSIAB-ARIN
OrgAbuseName: HSI Abuse
OrgAbusePhone: +1-435-755-3433
OrgAbuseEmail: abuse@uk2group.com
OrgAbuseRef: https://whois.arin.net/rest/poc/HSIAB-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#



Found a referral to 208.78.43.3:4321.

%rwhois V-1.0,V-1.5:00090h:00 manage.my-tss.com (Ubersmith RWhois Server V-2.3.0)
autharea=172.98.66.0/23
xautharea=172.98.66.0/23
network:Class-Name:network
network:Auth-Area:172.98.66.0/23
network:ID:NET-14802.172.98.67.107
network:Network-Name:172.98.67.107
network:IP-Network:172.98.67.107
network:IP-Network-Block:172.98.67.107
network:Org-Name:Hosting
Services, Inc.
network:Street-Address:1 Yonge St
network:City:Toronto
network:State:BC
network:Postal-Code:
network:Country-Code:CA
network:Tech-Contact:MAINT-14802.172.98.67.107
network:Created:20151107012049000
network:Updated:20151202210328000
network:Updated-By:ip-admin@manage.my-tss.com
contact:POC-Name:Abuse
contact:POC-Email:abuse@uk2group.com
contact:POC-Phone:
contact:Tech-Name:Abuse
contact:Tech-Email:abuse@uk2group.com
contact:Tech-Phone:
contact:Abuse-Name:Abuse
contact:Abuse-Email:abuse@uk2group.com
contact:Abuse-Phone:
%ok

Regards,

Fail2Ban

No comments:

Post a Comment