[Fail2Ban] NginxBadRequests: banned 3.70.159.85 from dlrsp.org

The IP 3.70.159.85 has just been banned!!!


NginxBadRequests Abuse - Thu, 30 Sep 2021 05:24:02

ip: 3.70.159.85

Country: US

StateProv: WA

OrgAbuseEmail: abuse@amazonaws.com

OrgAbusePhone: +1-206-266-4064

Network

ip: 3.70.159.85

NetName: AMAZON-FRA

NetRange: 3.64.0.0 - 3.79.255.255

CIDR: 3.64.0.0/12

Comment: -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Comment:
Comment:
Comment:
Comment: -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.

Owner

Organization: A100 ROW GmbH (RG-123)

OrgTechName: Amazon EC2 Network Operations
OrgTechName: Amazon EC2 Network Operations

Contacts

City: Munchen

Address: Marcel-Breuer-Strasse 10

PostalCode: 80807

OrgTechPhone: +1-206-266-4064
OrgTechPhone: +1-206-266-4064

OrgAbusePhone: +1-206-266-4064

References

OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN

NMAP

censys.io

GreyNoise.io