13.71.2.244 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Brute force SMTP login attempted. ...	2019-08-10 08:34:03
attackbots	Jul 22 01:51:51 server01 sshd\[27833\]: Invalid user avis from 13.71.2.244 Jul 22 01:51:51 server01 sshd\[27833\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.2.244 Jul 22 01:51:52 server01 sshd\[27833\]: Failed password for invalid user avis from 13.71.2.244 port 37522 ssh2 ...	2019-07-22 06:56:31
attackspambots	2019-07-13 UTC: 1x - root	2019-07-14 10:42:46
attackbotsspam	Jul 13 07:56:58 dev sshd\[1836\]: Invalid user tim from 13.71.2.244 port 60576 Jul 13 07:56:58 dev sshd\[1836\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.2.244 Jul 13 07:57:01 dev sshd\[1836\]: Failed password for invalid user tim from 13.71.2.244 port 60576 ssh2	2019-07-13 14:35:16
attackbotsspam	FTP Brute-Force reported by Fail2Ban	2019-07-03 14:38:21
attack	SSH invalid-user multiple login try	2019-07-03 06:08:47

Comments on same subnet:

IP	Type	Details	Datetime
13.71.21.123	attack	Sep 18 13:13:51 rush sshd[684]: Failed password for root from 13.71.21.123 port 1024 ssh2 Sep 18 13:18:41 rush sshd[896]: Failed password for root from 13.71.21.123 port 1024 ssh2 ...	2020-09-18 21:24:44
13.71.21.123	attackspam	$f2bV_matches	2020-09-18 13:43:54
13.71.21.123	attackbotsspam	2020-09-17T18:53:45.595512ns386461 sshd\[21503\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root 2020-09-17T18:53:47.070463ns386461 sshd\[21503\]: Failed password for root from 13.71.21.123 port 1024 ssh2 2020-09-17T19:00:36.491119ns386461 sshd\[27799\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root 2020-09-17T19:00:39.054437ns386461 sshd\[27799\]: Failed password for root from 13.71.21.123 port 1024 ssh2 2020-09-17T19:05:47.306943ns386461 sshd\[32552\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root ...	2020-09-18 03:59:48
13.71.21.123	attack	Fail2Ban Ban Triggered (2)	2020-09-15 20:06:18
13.71.21.123	attackbots	Sep 14 15:09:09 Ubuntu-1404-trusty-64-minimal sshd\[4594\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root Sep 14 15:09:11 Ubuntu-1404-trusty-64-minimal sshd\[4594\]: Failed password for root from 13.71.21.123 port 1024 ssh2 Sep 14 21:47:21 Ubuntu-1404-trusty-64-minimal sshd\[5438\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root Sep 14 21:47:23 Ubuntu-1404-trusty-64-minimal sshd\[5438\]: Failed password for root from 13.71.21.123 port 1024 ssh2 Sep 14 22:00:16 Ubuntu-1404-trusty-64-minimal sshd\[15033\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root	2020-09-15 12:11:00
13.71.21.123	attackspam	Sep 14 15:09:09 Ubuntu-1404-trusty-64-minimal sshd\[4594\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root Sep 14 15:09:11 Ubuntu-1404-trusty-64-minimal sshd\[4594\]: Failed password for root from 13.71.21.123 port 1024 ssh2 Sep 14 21:47:21 Ubuntu-1404-trusty-64-minimal sshd\[5438\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root Sep 14 21:47:23 Ubuntu-1404-trusty-64-minimal sshd\[5438\]: Failed password for root from 13.71.21.123 port 1024 ssh2 Sep 14 22:00:16 Ubuntu-1404-trusty-64-minimal sshd\[15033\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root	2020-09-15 04:18:00
13.71.21.123	attackspambots	2020-09-01T17:01:30.265177paragon sshd[1087335]: Invalid user postgres from 13.71.21.123 port 1024 2020-09-01T17:01:30.267700paragon sshd[1087335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 2020-09-01T17:01:30.265177paragon sshd[1087335]: Invalid user postgres from 13.71.21.123 port 1024 2020-09-01T17:01:32.602571paragon sshd[1087335]: Failed password for invalid user postgres from 13.71.21.123 port 1024 ssh2 2020-09-01T17:06:02.235851paragon sshd[1087661]: Invalid user postgres from 13.71.21.123 port 1024 ...	2020-09-02 02:49:50
13.71.21.123	attackbotsspam	Sep 1 06:10:48 instance-2 sshd[18773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 Sep 1 06:10:50 instance-2 sshd[18773]: Failed password for invalid user terry from 13.71.21.123 port 1024 ssh2 Sep 1 06:15:25 instance-2 sshd[18865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123	2020-09-01 15:38:35
13.71.21.123	attack	2020-08-30T00:32:50.922186+02:00 sshd[30702]: Failed password for invalid user ftpuser from 13.71.21.123 port 1024 ssh2	2020-08-30 07:12:43
13.71.21.123	attackspambots	Aug 29 19:33:09 home sshd[2649737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 Aug 29 19:33:09 home sshd[2649737]: Invalid user quentin from 13.71.21.123 port 1024 Aug 29 19:33:12 home sshd[2649737]: Failed password for invalid user quentin from 13.71.21.123 port 1024 ssh2 Aug 29 19:37:53 home sshd[2651093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root Aug 29 19:37:55 home sshd[2651093]: Failed password for root from 13.71.21.123 port 1024 ssh2 ...	2020-08-30 02:07:17
13.71.21.123	attackbotsspam	Aug 22 07:43:36 jane sshd[11764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 Aug 22 07:43:38 jane sshd[11764]: Failed password for invalid user administrator from 13.71.21.123 port 1024 ssh2 ...	2020-08-22 13:52:27
13.71.21.123	attackbotsspam	Fail2Ban Ban Triggered (2)	2020-08-17 22:48:08
13.71.21.123	attack	Bruteforce detected by fail2ban	2020-08-16 08:05:01
13.71.21.123	attackbots	"fail2ban match"	2020-08-09 23:26:26
13.71.21.123	attackbotsspam	[ssh] SSH attack	2020-08-05 00:56:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.71.2.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24696
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.71.2.244.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070201 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 03 06:08:42 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 244.2.71.13.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 244.2.71.13.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
154.221.16.246	attackbots	Jan 25 16:47:34 [host] sshd[13508]: Invalid user cuan from 154.221.16.246 Jan 25 16:47:34 [host] sshd[13508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.16.246 Jan 25 16:47:35 [host] sshd[13508]: Failed password for invalid user cuan from 154.221.16.246 port 56967 ssh2	2020-01-25 23:50:43
187.72.90.169	attack	DATE:2020-01-25 16:23:55, IP:187.72.90.169, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)	2020-01-25 23:44:44
129.204.241.31	attack	Jan 25 14:13:35 lnxmail61 sshd[4296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.241.31	2020-01-26 00:06:48
183.129.160.229	attackspam	Unauthorized connection attempt detected from IP address 183.129.160.229 to port 2435 [J]	2020-01-25 23:42:23
189.41.242.228	attackspam	Honeypot attack, port: 445, PTR: 189-041-242-228.xd-dynamic.algarnetsuper.com.br.	2020-01-25 23:54:07
219.85.201.154	attackbotsspam	Unauthorized connection attempt detected from IP address 219.85.201.154 to port 81 [J]	2020-01-26 00:06:26
222.186.52.139	attack	Jan 25 16:40:54 vpn01 sshd[28986]: Failed password for root from 222.186.52.139 port 51821 ssh2 ...	2020-01-25 23:56:16
49.88.160.151	attackbotsspam	Jan 25 14:13:39 grey postfix/smtpd\[30322\]: NOQUEUE: reject: RCPT from unknown\[49.88.160.151\]: 554 5.7.1 Service unavailable\; Client host \[49.88.160.151\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.88.160.151\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-26 00:02:16
185.151.85.228	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-26 00:08:30
106.12.13.247	attackbotsspam	Jan 25 14:35:21 vps691689 sshd[32278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.13.247 Jan 25 14:35:23 vps691689 sshd[32278]: Failed password for invalid user xue from 106.12.13.247 port 32904 ssh2 ...	2020-01-26 00:09:47
194.105.218.9	attackbotsspam	Honeypot attack, port: 445, PTR: of.leivo.ru.	2020-01-25 23:47:27
216.10.242.28	attackbotsspam	Jan 25 21:10:23 gw1 sshd[24172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.10.242.28 Jan 25 21:10:25 gw1 sshd[24172]: Failed password for invalid user support from 216.10.242.28 port 45384 ssh2 ...	2020-01-26 00:14:42
198.211.118.157	attackspam	2020-01-25T15:18:59.934760shield sshd\[23887\]: Invalid user admin from 198.211.118.157 port 40758 2020-01-25T15:18:59.939734shield sshd\[23887\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.118.157 2020-01-25T15:19:01.370102shield sshd\[23887\]: Failed password for invalid user admin from 198.211.118.157 port 40758 ssh2 2020-01-25T15:22:18.464302shield sshd\[24788\]: Invalid user mock from 198.211.118.157 port 42752 2020-01-25T15:22:18.470472shield sshd\[24788\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.118.157	2020-01-25 23:25:13
14.47.193.32	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-01-26 00:05:53
222.186.175.216	attack	$f2bV_matches	2020-01-25 23:24:13

Recently Reported IPs

188.235.133.144	200.71.107.65	102.141.60.143	95.240.131.160
12.200.206.92	112.84.61.152	91.206.110.135	37.49.224.143
95.110.167.67	185.53.88.23	77.40.62.41	222.161.232.119
113.172.235.240	181.48.99.90	171.13.201.195	176.88.227.76
124.112.49.232	82.194.70.22	88.219.126.15	150.167.234.51