Tuesday, January 2, 2018

[Fail2Ban] sshd: banned 143.137.65.221 from ams

Hi,

The IP 143.137.65.221 has just been banned by Fail2Ban after
5 attempts against sshd.


Here is more information about 143.137.65.221 :


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=143.137.65.221?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 143.137.0.0 - 143.137.255.255
CIDR: 143.137.0.0/16
NetName: LACNIC-ERX-143-137-0-0
NetHandle: NET-143-137-0-0-1
Parent: NET143 (NET-143-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Comment: or check the WHOIS server located at http://whois.lacnic.net
Ref: https://whois.arin.net/rest/net/NET-143-137-0-0-1

ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink: whois.lacnic.net

OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-26
Updated: 2011-09-24
Ref: https://whois.arin.net/rest/org/LACNIC

ReferralServer: whois://whois.lacnic.net
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois

OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: 999-999-9999
OrgTechEmail: whois-contact@lacnic.net
OrgTechRef: https://whois.arin.net/rest/poc/LACNIC-ARIN

OrgAbuseHandle: LACNIC-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: 999-999-9999
OrgAbuseEmail: whois-contact@lacnic.net
OrgAbuseRef: https://whois.arin.net/rest/poc/LACNIC-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#



Found a referral to whois.lacnic.net.


% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% Brazilian resource: whois.registro.br


% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use at https://registro.br/termo/en.html ,
% being prohibited its distribution, commercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2018-01-02 12:16:24 (-02 -02:00)

inetnum: 143.137.64.0/22
aut-num
: AS263530
abuse-c: NMILM
owner: MICROSOL INFORMATICA LTDA - ME
ownerid: 05.948.077/0001-01
responsible: KARINA GODINHO ALVES
country: BR
owner-c: KAGAL16
tech-c: NMILM
inetrev: 143.137.64.0/22
nserver: nsa1.msolinternet.com.br
nsstat: 20180101 AA
nslastaa: 20180101
nserver: nsa2.msolinternet.com.br
nsstat: 20180101 AA
nslastaa: 20180101
created: 20150917
changed: 20170921

nic-hdl-br: KAGAL16
person: Karina Godinho Alves
e-mail: karina@microsolinformatica.com
country: BR
created: 20120214
changed: 20150805

nic-hdl-br: NMILM
person: N.O.C MICROSOL INFORMATICA LTDA - ME
e-mail: noc@microsolinformatica.com
country: BR
created: 20170921
changed: 20170921

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), registrant (tax ID), ticket,
% provider, contact handle (ID), CIDR block, IP and ASN.

Regards,

Fail2Ban

No comments:

Post a Comment