[Fail2Ban] ssh: banned 193.107.16.206

The IP 193.107.16.206 has just been banned by Fail2Ban after
6 attempts against ssh.

Here are more information about 193.107.16.206:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the “-B” flag.

% Information related to ‘193.107.16.0 – 193.107.19.255’

% Abuse contact for ‘193.107.16.0 – 193.107.19.255’ is ‘ideal.solutions.org@gmail.com’

inetnum: 193.107.16.0 – 193.107.19.255
netname: IDEALSOLUTION
descr: Ideal Solution Ltd
country: SC
org: ORG-IS106-RIPE
admin-c: IS300-RIPE
tech-c: IS300-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: IDEAL-MNT
mnt-routes: IDEAL-MNT
mnt-domains: IDEAL-MNT
mnt-routes: RU-WEBALTA-MNT
mnt-routes: OCOM-MNT
source: RIPE # Filtered

organisation: ORG-IS106-RIPE
org-name: Ideal Solution Ltd
org-type: OTHER
address: Sound & Vision House, Francis Rachel Str.
address: Victoria, Mahe, Seychelles
address: PO box 355
address: IP networks can be routed to different countries
remarks: emergency or sales contact in different language available
remarks:
remarks: Egypt contact (tel): (010) 428-71-91
remarks: Russia contact (tel/fax): (495) 540-43-24
remarks:
abuse-mailbox: ideal.solutions.org@gmail.com
abuse-c: IS300-RIPE
phone: +248 225521
mnt-ref: IDEAL-MNT
mnt-by: IDEAL-MNT
source: RIPE # Filtered

role: Ideal Solution NOC
address: Sound & Vision House, Francis Rachel Str.
address: Victoria, Mahe, Seychelles
remarks: ***************************************
remarks: This is Ideal-Solution.org and 2×4.RU Hosting IP network
remarks: – Shared and virtual hosting services
remarks: – Virtual and Dedicated Servers
remarks: – Adminstraion and programming
remarks: – Telecomunications
remarks: ***************************************
remarks: other information:
remarks: – nothing
remarks: ***************************************
remarks: in case of ABUSE or active issues please contact us
remarks: abuse/administrative email: ideal.solutions.org@gmail.com
remarks: ***************************************
phone: +248 225521
abuse-mailbox: ideal.solutions.org@gmail.com
admin-c: UDF669-RIPE
tech-c: UDF669-RIPE
mnt-by: IDEAL-MNT
nic-hdl: IS300-RIPE
source: RIPE # Filtered

% Information related to ‘193.107.16.0/24AS58001’

route: 193.107.16.0/24
descr: Ideal Solution
origin: AS58001
mnt-by: IDEAL-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS2)

Lines containing IP:193.107.16.206 in /var/log/auth.log

May 5 23:52:01 vps3 sshd[31103]: Did not receive identification string from 193.107.16.206
May 6 00:01:09 vps3 sshd[31146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.107.16.206 user=root
May 6 00:01:09 vps3 sshd[31147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.107.16.206 user=root
May 6 00:01:09 vps3 sshd[31149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.107.16.206 user=root
May 6 00:01:09 vps3 sshd[31148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.107.16.206 user=root
May 6 00:01:09 vps3 sshd[31150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.107.16.206 user=root
May 6 00:01:10 vps3 sshd[31156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.107.16.206 user=root
May 6 00:01:11 vps3 sshd[31147]: Failed password for root from 193.107.16.206 port 42967 ssh2
May 6 00:01:11 vps3 sshd[31149]: Failed password for root from 193.107.16.206 port 43106 ssh2
May 6 00:01:11 vps3 sshd[31148]: Failed password for root from 193.107.16.206 port 43034 ssh2
May 6 00:01:11 vps3 sshd[31150]: Failed password for root from 193.107.16.206 port 43161 ssh2
May 6 00:01:11 vps3 sshd[31146]: Failed password for root from 193.107.16.206 port 42903 ssh2
May 6 00:01:12 vps3 sshd[31156]: Failed password for root from 193.107.16.206 port 43251 ssh2
May 6 00:01:13 vps3 sshd[31147]: Failed password for root from 193.107.16.206 port 42967 ssh2
May 6 00:01:13 vps3 sshd[31149]: Failed password for root from 193.107.16.206 port 43106 ssh2
May 6 00:01:13 vps3 sshd[31148]: Failed password for root from 193.107.16.206 port 43034 ssh2
May 6 00:01:13 vps3 sshd[31150]: Failed password for root from 193.107.16.206 port 43161 ssh2
May 6 00:01:13 vps3 sshd[31146]: Failed password for root from 193.107.16.206 port 42903 ssh2

Leave a Reply

Your email address will not be published. Required fields are marked *