Untitled

IronPort-PHdr: 9a23:dcUW2hMFWmIV9EjSqyQl6mtUPXoX/o7sNwtQ0KIMzox0K/n8rarrMEGX3/hxlliBBdydsKIZzbqI+PuwESxYuNDa7yBEKMQNHzY+yuwo3CUYSPafDkP6KPO4JwcbJ+9lEGFfwnegLEJOE9z/bVCB6le77DoVBwmtfVEtfre9ScbuiJG+3f2p9rXJeUNDgz/uT6l1KUCYpATV7OMfh8M2I6ws0RbhqXpCf+lNg21ycwHA1y3g79u9qcYwux9bvOgsopZN
From: Fail2Ban <abuse@cibles.fr>
To: <abuse@rr.com>
Subject: [Fail2Ban] Unauthorized access using IP 71.43.31.50
Content-Type: text/html; charset="UTF-8"
Message-ID: <20151129121728.D60EB7081600@nouvelles-techno.fr>
Date: Sun, 29 Nov 2015 13:17:28 +0100
X-MS-Exchange-Organization-Network-Message-Id: 1e2537b4-3b41-44e3-2944-08d2f8b70ebc
X-MS-Exchange-Organization-AVStamp-Enterprise: 1.0
X-TM-AS-Product-Ver: SMEX-11.0.0.1191-8.000.1202-21970.005
X-TM-AS-Result: No--8.838700-8.000000-31
X-TM-AS-User-Approved-Sender: No
X-TM-AS-User-Blocked-Sender: No
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXw]nP;1217900;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 0
X-MS-Exchange-Organization-AuthSource: exchpapp11.corp.twcable.com
X-MS-Exchange-Organization-AuthAs: Anonymous
MIME-Version: 1.0

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>[Fail2Ban] Unauthorized access using IP 71.43.31.50</title>

<style>
body { font-family:sans-serif; font-size:12px; }
div.cadre { margin:5px 0; padding:0 5px; border:1px solid #999999; }
p { margin:5px 0; }
p.small { font-size:10px; color:#444; }
pre { font-size:10px; font-family:monospace; color: #666666; }
</style>
</head>
<body>
<p>Hello,</p>
<p>Using the ip mentioned above (71.43.31.50), which is according to Whois/abusix.org allocated to you, it was tried to access the system nouvelles-techno.fr (46.105.44.189) without authorization. At the very end of the message you can find the related parts from the logfile (all times are French local times, UTC&#43;1/MET or UTC&#43;2/MEST). For the time being, the offending system has been blocked from further access.</p>
<p>Please check the offending system or contact your customer/user. I really would appreciate a quick reaction and a feedback on actions taken.</p>
<p>In case of questions, you can contact me under <a href="mailto:abuse@cibles.fr">abuse@cibles.fr</a>.</p>
<p>Best regards.</p>
<p>Nicolas</p>
<hr>
<p>The IP 71.43.31.50 has just been banned by Fail2Ban after 1 attempts.</p>
<p>abusix.org Information - where your email address has been taken from : abuse@rr.com</p>
<p>Few lines containing IP 71.43.31.50, reason for abuse complaint :</p>
<pre>Nov 29 13:17:25 nouvelles-techno postfix/smtpd[28788]: warning: rrcs-71-43-31-50.se.biz.rr.com[71.43.31.50]: SASL login authentication failed: UGFzc3dvcmQ6</pre>
</body>
</html>