HideMyAss.com

Tuesday, 13 May 2014

[Fail2Ban] SSH: banned 128.243.44.23

Hi,

The IP 128.243.44.23 has just been banned by Fail2Ban after
5 attempts against SSH.


Here are more information about 128.243.44.23:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '128.243.0.0 - 128.243.255.255'

% No abuse contact registered for 128.243.0.0 - 128.243.255.255

inetnum: 128.243.0.0 - 128.243.255.255
descr: The University of Nottingham
netname: NOTT-AC-UK
admin-c: UON1-RIPE
tech-c: UON2-RIPE
country: GB
status: EARLY-REGISTRATION
mnt-by: JANET-HOSTMASTER
source: RIPE # Filtered

role: University of Nottingham Admin
address: Information Services, University of Nottingham
admin-c: PH1910-RIPE
tech-c: DAO8-RIPE
nic-hdl: UON1-RIPE
source: RIPE # Filtered

role: University of Nottingham Tech
address: Information Services, University of Nottingham
admin-c: PH1910-RIPE
tech-c: DAO8-RIPE
nic-hdl: UON2-RIPE
source: RIPE # Filtered

% Information related to '128.243.0.0/16AS786'

route: 128.243.0.0/16
descr: The University of Nottingham
descr: University Park
descr: Nottingham
descr: NG7 2RD
descr: UNITED KINGDOM
origin: AS786
mnt-by: JIPS-NOSC
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS2)

Regards,

Fail2Ban

1 comment:

  1. Yup have had multiple attempts from this IP as well. Some college student I'm sure.
    All attempts to gain root privilege via ssh.

    ReplyDelete