J'ai décris là ( http://links.simonlefort.be/?2IWyCw ) l'installation de Tiny Honeypot et son couplage avec Fail2Ban.

J'ai déjà une "prise" qui me renvoie vers Easynet SAS à Nanterre... Avec une adresse à contacter en cas d'abus. Est-ce que vous pensez que ça vaut la peine ?

Les logs Fail2Ban :

# cat /var/log/fail2ban.log 
2016-03-02 15:23:22,329 fail2ban.actions[4934]: WARNING [thp-ssh] Ban 84.37.137.216

Quand je fais un "whois" :

$ whois 84.37.137.216
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-    conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '84.37.0.0 - 84.37.255.255'

% Abuse contact for '84.37.0.0 - 84.37.255.255' is    'sysop@easynet.fr'

inetnum:        84.37.0.0 - 84.37.255.255
netname:        FR-EASYNET-20040917
descr:          EASYNET SAS
country:        FR
org:            ORG-EA23-RIPE
admin-c:        RD5513-RIPE
tech-c:         SC14728-RIPE
tech-c:         SC14729-RIPE
status:         ALLOCATED PA
mnt-by:         RIPE-NCC-HM-MNT
mnt-lower:      FR-EASYNET
mnt-routes:     FR-EASYNET
mnt-routes:     EASYNET-MNT
created:        2004-09-17T10:51:23Z
last-modified:  2013-02-15T15:41:37Z
source:         RIPE # Filtered

organisation:   ORG-EA23-RIPE
org-name:       EASYNET SAS
org-type:       LIR
address:        55 avenue des Champs Pierreux
address:        92000
address:        NANTERRE
address:        FRANCE
phone:          +33 1 77 49 70 00
fax-no:         +33 1 77 49 71 00
abuse-c:        AR15234-RIPE
admin-c:        ES630-RIPE
mnt-ref:        FR-EASYNET
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
created:        2004-04-17T11:21:43Z
last-modified:  2015-06-17T10:14:12Z
source:         RIPE # Filtered

person:         Richard Dumoulin
address:        Easynet SAS
address:        55, Avenue des Champs Pierreux
address:        92000 Nanterre
address:        France
phone:          +33(0)1.77.49.70.00
fax-no:         +33(0)1.77.49.70.01
nic-hdl:        RD5513-RIPE
mnt-by:         FR-EASYNET
created:        2013-02-15T14:23:44Z
last-modified:  2013-02-15T14:23:44Z
source:         RIPE # Filtered

person:         Sebastien Collignon
address:        Easynet SAS
address:        55, Avenue des Champs Pierreux
address:        92000 Nanterre
address:        France
phone:          +33(0)1.77.49.70.00
fax-no:         +33(0)1.77.49.70.01
nic-hdl:        SC14728-RIPE
mnt-by:         FR-EASYNET
created:        2013-02-15T14:26:36Z
last-modified:  2013-02-15T14:26:36Z
source:         RIPE # Filtered

person:         Sebastien Crinier
address:        Easynet SAS
address:        55, Avenue des Champs Pierreux
address:        92000 Nanterre
address:        France
phone:          +33(0)1.77.49.70.00
fax-no:         +33(0)1.77.49.70.01
nic-hdl:        SC14729-RIPE
mnt-by:         FR-EASYNET
created:        2013-02-15T14:26:36Z
last-modified:  2013-02-15T14:26:36Z
source:         RIPE # Filtered

% Information related to '84.37.0.0/16AS4589'

route:          84.37.0.0/16
descr:          Easynet FR
origin:         AS4589
mnt-by:         EASYNET-MNT
created:        2005-01-25T14:53:11Z
last-modified:  2005-01-25T14:53:11Z
source:         RIPE

% This query was served by the RIPE Database Query Service     version 1.85.1 (DB-3)