3.13.222.137 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	May 4 06:25:23 eventyay sshd[26962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.13.222.137 May 4 06:25:25 eventyay sshd[26962]: Failed password for invalid user admin from 3.13.222.137 port 42684 ssh2 May 4 06:28:10 eventyay sshd[27089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.13.222.137 ...	2020-05-04 12:45:53

Type

Details

Datetime

attackspambots

May  4 06:25:23 eventyay sshd[26962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.13.222.137
May  4 06:25:25 eventyay sshd[26962]: Failed password for invalid user admin from 3.13.222.137 port 42684 ssh2
May  4 06:28:10 eventyay sshd[27089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.13.222.137
...

2020-05-04 12:45:53

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.3 <<>> 3.13.222.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;3.13.222.137.			IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050301 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 100.100.2.138#53(100.100.2.138)
;; WHEN: Mon May  4 12:46:12 2020
;; MSG SIZE  rcvd: 105

Host info

137.222.13.3.in-addr.arpa domain name pointer ec2-3-13-222-137.us-east-2.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
137.222.13.3.in-addr.arpa	name = ec2-3-13-222-137.us-east-2.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
172.81.241.92	attackspam	(sshd) Failed SSH login from 172.81.241.92 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 2 22:31:04 server sshd[21384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.241.92 user=root Sep 2 22:31:06 server sshd[21384]: Failed password for root from 172.81.241.92 port 58246 ssh2 Sep 2 22:39:11 server sshd[23923]: Invalid user postgres from 172.81.241.92 port 55070 Sep 2 22:39:13 server sshd[23923]: Failed password for invalid user postgres from 172.81.241.92 port 55070 ssh2 Sep 2 22:41:40 server sshd[24617]: Invalid user mary from 172.81.241.92 port 56360	2020-09-03 17:52:47
188.136.143.185	attack	port scan and connect, tcp 80 (http)	2020-09-03 18:03:55
122.51.10.222	attackspam	$f2bV_matches	2020-09-03 17:58:22
49.88.112.117	attackbots	Sep 3 10:18:10 db sshd[24676]: User root from 49.88.112.117 not allowed because none of user's groups are listed in AllowGroups ...	2020-09-03 17:34:22
91.227.0.208	attack	TCP (SYN) 91.227.0.208:47913 -> port 8080, len 44	2020-09-03 18:06:29
185.220.101.207	attackspam	2020-09-03 04:32:16.849049-0500 localhost sshd[81859]: Failed password for root from 185.220.101.207 port 10322 ssh2	2020-09-03 18:01:30
109.132.116.56	attackbots	Sep 3 08:09:04 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session= Sep 3 08:09:10 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session= Sep 3 08:09:10 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session= Sep 3 08:09:21 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session= Sep 3 08:09:23 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.14 ...	2020-09-03 17:47:59
14.248.83.163	attack	$f2bV_matches	2020-09-03 18:02:56
23.129.64.195	attack	Sep 3 10:51:58 lnxded64 sshd[4637]: Failed password for root from 23.129.64.195 port 51131 ssh2 Sep 3 10:52:00 lnxded64 sshd[4637]: Failed password for root from 23.129.64.195 port 51131 ssh2 Sep 3 10:52:03 lnxded64 sshd[4637]: Failed password for root from 23.129.64.195 port 51131 ssh2 Sep 3 10:52:03 lnxded64 sshd[4637]: Failed password for root from 23.129.64.195 port 51131 ssh2	2020-09-03 17:26:05
37.49.230.122	attackbotsspam	Joomla! administrator brute-force	2020-09-03 17:43:43
193.181.246.208	attackbots	SSH bruteforce	2020-09-03 17:58:07
185.132.53.126	attack	Time: Thu Sep 3 09:16:28 2020 +0000 IP: 185.132.53.126 (DE/Germany/classifiedadsfree.net) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 3 09:15:15 ca-37-ams1 sshd[6588]: Did not receive identification string from 185.132.53.126 port 53798 Sep 3 09:15:49 ca-37-ams1 sshd[6653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.132.53.126 user=root Sep 3 09:15:51 ca-37-ams1 sshd[6653]: Failed password for root from 185.132.53.126 port 36480 ssh2 Sep 3 09:16:20 ca-37-ams1 sshd[6660]: Invalid user oracle from 185.132.53.126 port 59938 Sep 3 09:16:22 ca-37-ams1 sshd[6660]: Failed password for invalid user oracle from 185.132.53.126 port 59938 ssh2	2020-09-03 17:28:31
177.44.16.134	attackspam	Sep 2 11:42:57 mailman postfix/smtpd[2397]: warning: unknown[177.44.16.134]: SASL PLAIN authentication failed: authentication failure	2020-09-03 17:45:03
139.59.12.65	attack	$f2bV_matches	2020-09-03 17:58:37
163.172.24.40	attackspam	prod11 ...	2020-09-03 18:00:45

Recently Reported IPs

37.97.221.77	206.189.108.32	178.254.204.84	188.49.229.207
187.205.247.155	117.246.88.248	167.114.12.244	195.79.103.211
198.151.57.252	146.176.239.84	115.18.14.46	185.116.112.83
0.245.42.244	197.132.39.87	27.72.56.152	83.184.107.43
42.198.29.139	213.4.87.147	183.242.61.234	165.84.219.70