Saturday, June 30, 2018

[Fail2Ban] sshd: banned 138.201.2.8 from ams

Hi,

The IP 138.201.2.8 has just been banned by Fail2Ban after
5 attempts against sshd.


Here is more information about 138.201.2.8 :


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#


NetRange: 138.198.0.0 - 138.201.255.255
CIDR: 138.198.0.0/15, 138.200.0.0/15
NetName: RIPE-ERX-138-198-0-0
NetHandle: NET-138-198-0-0-1
Parent: NET138 (NET-138-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2003-12-11
Updated: 2003-12-11
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
Ref: https://whois.arin.net/rest/net/NET-138-198-0-0-1

ResourceLink: https://apps.db.ripe.net/search/query.html
ResourceLink: whois.ripe.net

OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://whois.arin.net/rest/org/RIPE

ReferralServer: whois://whois.ripe.net
ResourceLink: https://apps.db.ripe.net/search/query.html

OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://whois.arin.net/rest/poc/RNO29-ARIN

OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE3850-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#



Found a referral to whois.ripe.net.

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '138.201.2.0 - 138.201.2.15'

% Abuse contact for '138.201.2.0 - 138.201.2.15' is 'abuse@hetzner.de'

inetnum: 138.201.2.0 - 138.201.2.15
netname: KONSTANTINOS-SPILIAKOS-TOU-PANAGIOTI
descr: Xtreme Infinity
country: DE
admin-c: KS6808-RIPE
tech-c: KS6808-RIPE
status: LEGACY
mnt-by: HOS-GUN
created: 2016-03-04T02:12:31Z
last-modified: 2016-04-01T12:10:54Z
source: RIPE # Filtered

person: Konstantinos Spiliakos
address: Xtreme Infinity
address: N. Kasomoulis 7
address: 54655 Thessaloniki
address: GREECE
phone: +302311110164
nic-hdl: KS6808-RIPE
mnt-by: HOS-GUN
created: 2014-03-13T10:48:01Z
last-modified: 2017-10-20T02:28:06Z
source: RIPE # Filtered

% Information related to '138.201.0.0/16AS24940'

route: 138.201.0.0/16
descr: HETZNER-RZ-BLK-ERX4
origin: AS24940
org: ORG-HOA1-RIPE
mnt-by: HOS-GUN
created: 2012-12-24T09:10:23Z
last-modified: 2012-12-24T09:10:23Z
source: RIPE

organisation: ORG-HOA1-RIPE
org-name: Hetzner Online GmbH
org-type: LIR
address: Industriestrasse 25
address: D-91710
address: Gunzenhausen
address: GERMANY
phone: +49 9831 5050
fax-no: +49 9831 5053
admin-c: TF2013-RIPE
admin-c: MF1400-RIPE
admin-c: GM834-RIPE
admin-c: HOAC1-RIPE
admin-c: MH375-RIPE
admin-c: SK2374-RIPE
admin-c: SK8441-RIPE
abuse-c: HOAC1-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: HOS-GUN
mnt-by: RIPE-NCC-HM-MNT
mnt-by: HOS-GUN
created: 2004-04-17T11:07:58Z
last-modified: 2016-08-25T13:26:09Z
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.91.2 (BLAARKOP)

Regards,

Fail2Ban

No comments:

Post a Comment