[Fail2Ban] ssh: banned 60.173.11.113

Hi,

The IP 60.173.11.113 has just been banned by Fail2Ban after
6 attempts against ssh.

Here are more information about 60.173.11.113:

% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to ‘60.166.0.0 – 60.175.255.255’

inetnum: 60.166.0.0 – 60.175.255.255
netname: CHINANET-AH
descr: CHINANET anhui province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: JW89-AP
mnt-by: APNIC-HM
mnt-routes: MAINT-CHINANET-AH
mnt-lower: MAINT-CHINANET-AH
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20040721
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
changed: zhengzm@gsta.com 20140227
mnt-by: MAINT-CHINANET
source: APNIC

person: Jinneng Wang
address: 17/F, Postal Building No.120 Changjiang
address: Middle Road, Hefei, Anhui, China
country: CN
phone: +86-551-2659073
fax-no: +86-551-2659287
e-mail: ahdata@189.cn
nic-hdl: JW89-AP
mnt-by: MAINT-CHINANET-AH
changed: wang@mail.hf.ah.cninfo.net 19990818
changed: hm-changed@apnic.net 20140221
source: APNIC

% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS1)

Lines containing IP:60.173.11.113 in /var/log/auth.log

May 1 02:30:55 vps3 sshd[5700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.11.113 user=root
May 1 02:30:57 vps3 sshd[5700]: Failed password for root from 60.173.11.113 port 15319 ssh2
May 1 02:30:58 vps3 sshd[5700]: Received disconnect from 60.173.11.113: 11: Normal Shutdown, Thank you for playing [preauth]
May 1 02:31:01 vps3 sshd[5702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.11.113 user=root
May 1 02:31:03 vps3 sshd[5702]: Failed password for root from 60.173.11.113 port 16785 ssh2
May 1 02:31:04 vps3 sshd[5702]: Received disconnect from 60.173.11.113: 11: Normal Shutdown, Thank you for playing [preauth]
May 1 02:31:06 vps3 sshd[5704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.11.113 user=root
May 1 02:31:08 vps3 sshd[5704]: Failed password for root from 60.173.11.113 port 18149 ssh2
May 1 02:31:08 vps3 sshd[5704]: Received disconnect from 60.173.11.113: 11: Normal Shutdown, Thank you for playing [preauth]
May 1 02:31:11 vps3 sshd[5706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.11.113 user=root
May 1 02:31:13 vps3 sshd[5706]: Failed password for root from 60.173.11.113 port 19275 ssh2
May 1 02:31:13 vps3 sshd[5706]: Received disconnect from 60.173.11.113: 11: Normal Shutdown, Thank you for playing [preauth]
May 1 02:31:16 vps3 sshd[5708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.11.113 user=root
May 1 02:31:18 vps3 sshd[5708]: Failed password for root from 60.173.11.113 port 20408 ssh2
May 1 02:31:18 vps3 sshd[5708]: Received disconnect from 60.173.11.113: 11: Normal Shutdown, Thank you for playing [preauth]
May 1 02:31:20 vps3 sshd[5710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.11.113 user=root
May 1 02:31:22 vps3 sshd[5710]: Failed password for root from 60.173.11.113 port 21573 ssh2
May 1 02:31:22 vps3 sshd[5710]: Received disconnect from 60.173.11.113: 11: Normal Shutdown, Thank you for playing [preauth]

Leave a Reply

Your email address will not be published. Required fields are marked *