Custom query (828 matches)

Dear Sir/Madam,

We have detected abuse from the IP address ( 31.130.230.71 ), which according to a whois lookup is on your network. We would appreciate if you would investigate and take action as appropriate. Any feedback is welcome but not mandatory.

Log lines are given below, but please ask if you require any further information.

(If you are not the correct person to contact about this please accept our apologies - your e-mail address was extracted from the whois record by an automated process. This mail was generated by Fail2Ban.)

IP of the attacker:  31.130.230.71 

You can contact us by using: abuse-reply@keyweb.de

Addresses to send to:
tickets@meeting.ietf.org

==================== Excerpt from log for 31.130.230.71 ====================
Note: Local timezone is +0200 (CEST)
Jul 19 11:56:33 shared05 sshd[28288]: Invalid user pi from 31.130.230.71
Jul 19 11:56:33 shared05 sshd[28289]: Invalid user pi from 31.130.230.71
Jul 19 11:56:33 shared05 sshd[28289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.130.230.71 
Jul 19 11:56:33 shared05 sshd[28288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.130.230.71 
Jul 19 11:56:35 shared05 sshd[28289]: Failed password for invalid user pi from 31.130.230.71 port 34144 ssh2
Jul 19 11:56:35 shared05 sshd[28289]: Connection closed by 31.130.230.71 [preauth]
Jul 19 11:56:35 shared05 sshd[28288]: Failed password for invalid user pi from 31.130.230.71 port 34142 ssh2
Jul 19 11:56:35 shared05 sshd[28288]: Connection closed by 31.130.230.71 [preauth]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

I tried to connect my bridge to the IETF network, but I have some issues:
- -To configure the bridge, I need to know it's IP
- -The device does not support WPA enterprice
- -The device does not have a webbrowser

Could you please add the mac-address of the device to the network, and if you have seen it on the network already (since I tried) could you please tell me it's IP address ?

The MAC address of the device is: 00195B44E21E

Antoin Verschuren

Technical Policy Advisor SIDN
Utrechtseweg 310, PO Box 5022, 6802 EA Arnhem, The Netherlands

P: +31 26 3525500  F: +31 26 3525505  M: +31 6 23368970
mailto:antoin.verschuren@sidn.nl  xmpp:antoin@jabber.sidn.nl  http://www.sidn.nl/


-----BEGIN PGP SIGNATURE-----
Version: 9.6.3 (Build 3017)

wsBVAwUBTEsEQDqHrM883AgnAQjloAgAgZamyS+OGwDDQX9QrZXcA3gbycgIFpRN
C3cSpQkK9dCXrfCMmSQlGPFVooBSaiPOmIgQhQUciy20vto1uYLaAtklbtWFCidd
rrG10Wr9blMCMKW5IQBJL9WygLCk8pcCzEDuC2D+6Jkj3Dj8iJYGAE/7hw2h4CzP
GuRd7NnCPKxHQ2xhguqHzAwDna38h8fWjnTEfJf5Eoc1NNy9PhjMIkgl5dNp1Ssv
+43QIY3fGC+De0oQKMJ9V9xQlxFNTRMSqtTMxX9ANSM46QbUeG8ImoXi83xMgu0Y
d77t/POQmf/hKB3ytGX3mcue+tnPll6gMco2MLAkCJ+UE1HoxAKhnw==
=Yhev
-----END PGP SIGNATURE-----

It happened early in the session and it just happens again.