sorry I cannot reproduce
[root@prometheus ~]# rpm -qa |grep whois
whois-5.1.1-2.el7.x86_64
[root@prometheus ~]# rpm -qa | grep fail2ban
fail2ban-server-0.9.7-1.el7.noarch
fail2ban-firewalld-0.9.7-1.el7.noarch
fail2ban-shorewall-0.9.7-1.el7.noarch
fail2ban-sendmail-0.9.7-1.el7.noarch
fail2ban-0.9.7-1.el7.noarch
nethserver-fail2ban-1.0.4-1.ns7.noarch
this is what I have…Since how many time did you install the rpm whois…is it possible to need to wait sometime before to sync the whole database :-?
Hi,
The IP 67.164.207.205 has just been banned by Fail2Ban after
3 attempts against sshd.
Here is more information about 67.164.207.205 :
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#
# start
NetRange: 67.164.192.0 - 67.164.207.255
CIDR: 67.164.192.0/20
NetName: UTAH-3
NetHandle: NET-67-164-192-0-1
Parent: COMCAST (NET-67-160-0-0-1)
NetType: Reassigned
OriginAS:
Customer: Comcast Cable Communications, Inc. (C00500168)
RegDate: 2003-04-02
Updated: 2004-07-02
Ref: https://whois.arin.net/rest/net/NET-67-164-192-0-1
CustName: Comcast Cable Communications, Inc.
Address: 3 Executive Campus
Address: 5th Floor
City: Cherry Hill
StateProv: NJ
PostalCode: 08002
Country: US
RegDate: 2003-04-02
Updated: 2016-08-31
Ref: https://whois.arin.net/rest/customer/C00500168
OrgTechHandle: IC161-ARIN
OrgTechName: Comcast Cable Communications Inc
OrgTechPhone: +1-856-317-7200
OrgTechEmail: CNIPEO-Ip-registration@cable.comcast.com
OrgTechRef: https://whois.arin.net/rest/poc/IC161-ARIN
OrgAbuseHandle: NAPO-ARIN
OrgAbuseName: Network Abuse and Policy Observance
OrgAbusePhone: +1-888-565-4329
OrgAbuseEmail: abuse@comcast.net
OrgAbuseRef: https://whois.arin.net/rest/poc/NAPO-ARIN
# end
# start
NetRange: 67.160.0.0 - 67.191.255.255
CIDR: 67.160.0.0/11
NetName: COMCAST
NetHandle: NET-67-160-0-0-1
Parent: NET67 (NET-67-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS7922
Organization: Comcast Cable Communications, LLC (CCCS)
RegDate: 2002-12-16
Updated: 2016-08-31
Ref: https://whois.arin.net/rest/net/NET-67-160-0-0-1
OrgName: Comcast Cable Communications, LLC
OrgId: CCCS
Address: 1800 Bishops Gate Blvd
City: Mt Laurel
StateProv: NJ
PostalCode: 08054
Country: US
RegDate: 2001-09-17
Updated: 2017-01-28
Ref: https://whois.arin.net/rest/org/CCCS
OrgTechHandle: IC161-ARIN
OrgTechName: Comcast Cable Communications Inc
OrgTechPhone: +1-856-317-7200
OrgTechEmail: CNIPEO-Ip-registration@cable.comcast.com
OrgTechRef: https://whois.arin.net/rest/poc/IC161-ARIN
OrgAbuseHandle: NAPO-ARIN
OrgAbuseName: Network Abuse and Policy Observance
OrgAbusePhone: +1-888-565-4329
OrgAbuseEmail: abuse@comcast.net
OrgAbuseRef: https://whois.arin.net/rest/poc/NAPO-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#
Regards,
Fail2Ban