Opened 11 months ago

Closed 11 months ago

Last modified 7 months ago

#1136 closed defect (fixed)

Abuse from 31.130.230.71

Reported by: (none) Owned by: con@…
Priority: tbd Milestone: ietf-099
Component: other Keywords:
Cc: My Current Location:
My MAC Address: My OS:

Description

Dear Sir/Madam,

We have detected abuse from the IP address ( 31.130.230.71 ), which according to a whois lookup is on your network. We would appreciate if you would investigate and take action as appropriate. Any feedback is welcome but not mandatory.

Log lines are given below, but please ask if you require any further information.

(If you are not the correct person to contact about this please accept our apologies - your e-mail address was extracted from the whois record by an automated process. This mail was generated by Fail2Ban.)

IP of the attacker:  31.130.230.71 

You can contact us by using: abuse-reply@keyweb.de

Addresses to send to:
tickets@meeting.ietf.org

==================== Excerpt from log for 31.130.230.71 ====================
Note: Local timezone is +0200 (CEST)
Jul 19 11:56:33 shared05 sshd[28288]: Invalid user pi from 31.130.230.71
Jul 19 11:56:33 shared05 sshd[28289]: Invalid user pi from 31.130.230.71
Jul 19 11:56:33 shared05 sshd[28289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.130.230.71 
Jul 19 11:56:33 shared05 sshd[28288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.130.230.71 
Jul 19 11:56:35 shared05 sshd[28289]: Failed password for invalid user pi from 31.130.230.71 port 34144 ssh2
Jul 19 11:56:35 shared05 sshd[28289]: Connection closed by 31.130.230.71 [preauth]
Jul 19 11:56:35 shared05 sshd[28288]: Failed password for invalid user pi from 31.130.230.71 port 34142 ssh2
Jul 19 11:56:35 shared05 sshd[28288]: Connection closed by 31.130.230.71 [preauth]

Change history (3)

comment:1 Changed 11 months ago by llynch@…

Component: incomingother
Owner: changed from < default > to con@…
Reporter: fail2ban-no-reply@… deleted
Status: newassigned
Type: requestdefect

comment:2 Changed 11 months ago by Hans Kuhn

Resolution: fixed
Status: assignedclosed

same resolution as this ticket:

https://tickets.meeting.ietf.org/ticket/1135

comment:3 Changed 7 months ago by Rick Alfvin

Milestone: ietf-99ietf-099

Milestone renamed

Note: See TracTickets for help on using tickets.