fail2ban bad ip database: ip 85.238.104.197

| ip database | live view | stats | report | help | api key:

ip: 85.238.104.197
hostname: 85-238-104-197.client-ip.tenet.odessa.ua
country: [UA] Ukraine
first reported: 18.09.2018 00:35.21 GMT+0100
last reported: 21.12.2018 17:49.05 GMT+0100
time period: 94d 18h 13m 44s
total reports: 11
reported by: 2 host(s)
filter(s): sshd (7)
ssh (4)
tor exit node no
badips.com db
Lookup
  

port scan of '85.238.104.197':

[-hide]
# Nmap 6.40 scan initiated Tue Sep 18 00:36:01 2018 as: /usr/bin/nmap -sU -sS -O 85.238.104.197
Nmap scan report for 85-238-104-197.client-ip.tenet.odessa.ua (85.238.104.197)
Host is up (0.048s latency).
Not shown: 1000 open|filtered ports, 990 filtered ports
PORT     STATE  SERVICE
22/tcp   open   ssh
25/tcp   open   smtp
80/tcp   open   http
110/tcp  open   pop3
443/tcp  open   https
993/tcp  open   imaps
995/tcp  open   pop3s
5901/tcp closed vnc-1
8090/tcp open   unknown
8181/tcp open   unknown
No exact OS matches for host (If you know what OS is running on it, see http://nmap.org/submit/ ).
TCP/IP fingerprint:
OS:SCAN(V=6.40%E=4%D=9/18%OT=22%CT=5901%CU=%PV=N%G=Y%TM=5BA02C7D%P=x86_64-p
OS:c-linux-gnu)SEQ(SP=105%GCD=1%ISR=105%TI=Z%CI=I%TS=A)OPS(O1=M5ACST11NW7%O
OS:2=M5ACST11NW7%O3=M5ACNNT11NW7%O4=M5ACST11NW7%O5=M5ACST11NW7%O6=M5ACST11)
OS:WIN(W1=7120%W2=7120%W3=7120%W4=7120%W5=7120%W6=7120)ECN(R=Y%DF=Y%TG=40%W
OS:=7210%O=M5ACNNSNW7%CC=Y%Q=)T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=
OS:N)T3(R=N)T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)T5(R=Y%DF=Y%TG=40%
OS:W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q
OS:=)T7(R=N)U1(R=N)IE(R=N)


OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
# Nmap done at Tue Sep 18 00:36:45 2018 -- 1 IP address (1 host up) scanned in 44.00 seconds
Σ = 36 | Δt = 0.0067667961120605s