Sunday, 17 September 2017

[Fail2Ban] SSH: banned 169.1.172.12 from vps297345.ovh.net

Hi,

The IP 169.1.172.12 has just been banned by Fail2Ban after
6 attempts against SSH.


Here is more information about 169.1.172.12 :

[Querying whois.arin.net]
[Redirected to whois.afrinic.net]
[Querying whois.afrinic.net]
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '169.1.128.0 - 169.1.255.255'

% No abuse contact registered for 169.1.128.0 - 169.1.255.255

inetnum: 169.1.128.0 - 169.1.255.255
netname: AFRIHOST-DYNAMIC
descr: AFRIHOST-DYNAMIC
country: ZA
admin-c: RL14-AFRINIC
admin-c: ADS6-AFRINIC
tech-c: RL14-AFRINIC
tech-c: ADS6-AFRINIC
tech-c: AN58-AFRINIC
status: ASSIGNED PA
remarks: abuse e-mail: <[email protected]>, phone: +27(11) 612 7300
mnt-by: AFRIHOST-MNT
source: AFRINIC # Filtered
parent: 169.0.0.0 - 169.1.255.255

person: Arthur Da Silva
address: Afrihost HQ
address: 376 Rivonia Boulevard
address: Sandton, Johannesburg
address: Gauteng
phone: +27116127300
fax-no: +27865528000
nic-hdl: ADS6-AFRINIC
mnt-by: GENERATED-HTSRJAIYEELKEAL06XLBKNXZFENMSXHT-MNT
source: AFRINIC # Filtered

person: AFRIHOST NOC
address: Afrihost HQ
address: 376 Rivonia Boulevard
address: Sandton, Johannesburg
address: Gauteng
phone: +27116127300
fax-no: +27865528000
nic-hdl: AN58-AFRINIC
mnt-by: GENERATED-AS5EIKPTIYIJISXHTVZFEFWKL7AXYTPP-MNT
source: AFRINIC # Filtered

person: Ryan Lumsden
address: Afrihost HQ
address: 376 Rivonia Boulevard
address: Sandton, Johannesburg
address: Gauteng
phone: +27116127300
fax-no: +27865528000
nic-hdl: RL14-AFRINIC
mnt-by: GENERATED-FFBFRV89GVZKPKSN1LEB0OQMSTWDUL2Z-MNT
source: AFRINIC # Filtered

% Information related to '169.0.0.0/15AS37611'

route: 169.0.0.0/15
descr: Afrihost
origin: AS37611
mnt-by: AFRIHOST-MNT
source: AFRINIC # Filtered

Regards,

Fail2Ban