Monday, April 30, 2018

[Fail2Ban] sshd: banned 138.117.6.153 from ams

Hi,

The IP 138.117.6.153 has just been banned by Fail2Ban after
5 attempts against sshd.


Here is more information about 138.117.6.153 :


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=138.117.6.153?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 138.117.0.0 - 138.117.255.255
CIDR: 138.117.0.0/16
NetName: LACNIC-ERX-138-117-0-0
NetHandle: NET-138-117-0-0-1
Parent: NET138 (NET-138-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2010-11-19
Updated: 2010-11-19
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Comment: or check the WHOIS server located at http://whois.lacnic.net
Ref: https://whois.arin.net/rest/net/NET-138-117-0-0-1

ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink: whois.lacnic.net

OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-26
Updated: 2018-03-15
Ref: https://whois.arin.net/rest/org/LACNIC

ReferralServer: whois://whois.lacnic.net
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois

OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://whois.arin.net/rest/poc/LWI100-ARIN

OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechEmail: whois-contact@lacnic.net
OrgTechRef: https://whois.arin.net/rest/poc/LACNIC-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#



Found a referral to whois.lacnic.net.


% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2018-05-01 00:00:28 (BRT -03:00)

inetnum: 138.117.6.152/29
status: reallocated
owner: Magaly Arana
ownerid: NI-MAAR-LACNIC
responsible: Ing.Luis Navarro
address: Edificio Invercasa,Torre III modulo 2c, ,
address: - Managua -
country: NI
phone: +505 57073040 []
owner-c: JPR12
tech-c: JPR12
abuse-c: JPR12
created: 20160518
changed: 20160518
inetnum-up: 138.117.4/22

nic-hdl: JPR12
person: Roger Agustin Rueda Matamoros
e-mail: roger.rueda.m@GMAIL.COM
address: Edificio INVERCASA, Torre III, Módulo 2C, 311, Semáforos Villa Fontana, 1C al Este, 1/2 al lago.
address: - - Managua -
country: NI
phone: +505 87629704 [505]
created: 20140904
changed: 20180405

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

Regards,

Fail2Ban

No comments:

Post a Comment