Saturday, 3 June 2017

[Fail2Ban] SSH: banned 138.199.65.201 from vps297345.ovh.net

Hi,

The IP 138.199.65.201 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 138.199.65.201 :

[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '138.199.64.0 - 138.199.79.255'

% No abuse contact registered for 138.199.64.0 - 138.199.79.255

inetnum: 138.199.64.0 - 138.199.79.255
netname: CP-NET-SUPERNEWS-1
descr: CP-NET-SUPERNEWS-1
country: NL
admin-c: SH2579-RIPE
tech-c: SH2579-RIPE
status: LEGACY
remarks: For information on "status:" attribute read https://www.ripe.net/data-tools/db/faq/faq-status-values-legacy-resources
remarks: rev-srv: ns1.supernews.com
remarks: rev-srv: ns2.supernews.com
mnt-by: MNT-SUPERNEWS
mnt-lower: MNT-SUPERNEWS
mnt-routes: MNT-SUPERNEWS
created: 2005-07-13T20:59:12Z
last-modified: 2014-05-27T12:53:43Z
source: RIPE # Filtered
remarks: rev-srv attribute deprecated by RIPE NCC on 02/09/2009

role: Supernews Hostmaster
address: US
phone: +1.415.541.2500
fax-no: +1.415.541.2300
admin-c: AL3784-RIPE
tech-c: AL3784-RIPE
nic-hdl: SH2579-RIPE
mnt-by: MNT-SUPERNEWS
created: 2005-07-13T08:43:05Z
last-modified: 2011-09-09T10:53:22Z
source: RIPE # Filtered

% Information related to '138.199.64.0/20AS24841'

route: 138.199.64.0/20
descr: CP-NET-SUPERNEWS-1
origin: AS24841
mnt-by: MNT-SUPERNEWS
created: 2005-12-21T06:54:29Z
last-modified: 2005-12-21T06:54:29Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.89.2 (WAGYU)

Regards,

Fail2Ban