Hi,
The IP 159.8.110.168 has just been banned by Fail2Ban after
5 attempts against SSH.
Here is more information about 159.8.110.168:
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '159.8.110.160 - 159.8.110.175'
% Abuse contact for '159.8.110.160 - 159.8.110.175' is 'abuse@softlayer.com'
inetnum: 159.8.110.160 - 159.8.110.175
netname: NETBLK-SOFTLAYER-RIPE-CUST-KM6366-RIPE
descr: DISOCCUPIED
country: US
admin-c: KM6366-RIPE
tech-c: KM6366-RIPE
status: LEGACY
mnt-by: MAINT-SOFTLAYER-RIPE
created: 2016-02-27T13:50:41Z
last-modified: 2016-02-27T13:50:41Z
source: RIPE # Filtered
person: Kathy McClure
address: 222 N Rhodes
address: Pretty Praire, KS 67570 US
phone: +1.866.398.7638
nic-hdl: KM6366-RIPE
abuse-mailbox: kathy.mcclure86@gmail.com
mnt-by: MAINT-SOFTLAYER-RIPE
created: 2016-02-27T13:50:39Z
last-modified: 2016-02-27T13:50:39Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.85.1 (DB-2)
Regards,
Fail2Ban
2016-02-29 07:38:09,928 fail2ban.actions: WARNING [ssh] Ban 159.8.110.168
ReplyDeleteSame whois return. I get a lot of international attempts, but very few domestic.