Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
Sep 9 22:26:04 mail fail2ban.actions [602]: NOTICE [sshd] Ban 171.244.5.213
Sep 9 23:29:05 mail fail2ban.actions [602]: NOTICE [sshd] Ban 171.244.5.213
Sep 10 00:38:00 mail fail2ban.actions [602]: NOTICE [sshd] Ban 171.244.5 ...
show moreSep 9 22:26:04 mail fail2ban.actions [602]: NOTICE [sshd] Ban 171.244.5.213
Sep 9 23:29:05 mail fail2ban.actions [602]: NOTICE [sshd] Ban 171.244.5.213
Sep 10 00:38:00 mail fail2ban.actions [602]: NOTICE [sshd] Ban 171.244.5.213
show less
2026-10-06T22:52:46.548047+03:00 mail.consulting-ua.eu sshd-session[2227077]: Connection from 171.244.5.213 port 33622 on 192.168.0.110 port 22 rdomain ""
2026-10-06T22:52:49.099226+03:00 mail.consulting-ua.eu sshd-session[2227077]: User root from 17 ...
show more2026-10-06T22:52:46.548047+03:00 mail.consulting-ua.eu sshd-session[2227077]: Connection from 171.244.5.213 port 33622 on 192.168.0.110 port 22 rdomain ""
2026-10-06T22:52:49.099226+03:00 mail.consulting-ua.eu sshd-session[2227077]: User root from 171.244.5.213 not allowed because not listed in AllowUsers
...
show less
2026-10-06T19:32:49.077272 server8.ohost.net sshd[1280990]: Invalid user travisci from 171.244.5.213 port 59478
2026-10-06T19:35:23.481399 server8.ohost.net sshd[1283152]: Invalid user travisci from 171.244.5.213 port 39578
2026-10-06T19:35:24.100804 ...
show more2026-10-06T19:32:49.077272 server8.ohost.net sshd[1280990]: Invalid user travisci from 171.244.5.213 port 59478
2026-10-06T19:35:23.481399 server8.ohost.net sshd[1283152]: Invalid user travisci from 171.244.5.213 port 39578
2026-10-06T19:35:24.100804 server8.ohost.net sshd[1283152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.5.213
2026-10-06T19:35:25.999739 server8.ohost.net sshd[1283152]: Failed password for invalid user travisci from 171.244.5.213 port 39578 ssh2
2026-10-06T19:35:47.059768 server8.ohost.net sshd[1283310]: Invalid user travisci from 171.244.5.213 port 58008
...
show less
2026-10-06T21:21:52.802760+02:00 web02.agentur-b-2.de sshd-session[3108952]: Connection closed by authenticating user root 171.244.5.213 port 47184 [preauth]
2026-10-06T21:23:13.442996+02:00 web02.agentur-b-2.de sshd-session[3110925]: Connection clos ...
show more2026-10-06T21:21:52.802760+02:00 web02.agentur-b-2.de sshd-session[3108952]: Connection closed by authenticating user root 171.244.5.213 port 47184 [preauth]
2026-10-06T21:23:13.442996+02:00 web02.agentur-b-2.de sshd-session[3110925]: Connection closed by authenticating user root 171.244.5.213 port 51356 [preauth]
2026-10-06T21:31:11.262919+02:00 web02.agentur-b-2.de sshd-session[3122114]: Invalid user travisci from 171.244.5.213 port 55372
2026-10-06T21:31:11.621534+02:00 web02.agentur-b-2.de sshd-session[3122114]: Connection closed by invalid user travisci 171.244.5.213 port 55372 [preauth]
2026-10-06T21:31:12.946641+02:00 web02.agentur-b-2.de sshd-session[3122129]: Invalid user travisci from 171.244.5.213 port 56486
show less
Oct 6 21:22:19 srv3 sshd\[30214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.5.213 user=root
Oct 6 21:22:20 srv3 sshd\[30214\]: Failed password for root from 171.244.5.213 port 51258 ssh2
Oc ...
show moreOct 6 21:22:19 srv3 sshd\[30214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.5.213 user=root
Oct 6 21:22:20 srv3 sshd\[30214\]: Failed password for root from 171.244.5.213 port 51258 ssh2
Oct 6 21:29:33 srv3 sshd\[30543\]: Invalid user travisci from 171.244.5.213 port 52022
Oct 6 21:29:34 srv3 sshd\[30543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.5.213
Oct 6 21:29:36 srv3 sshd\[30543\]: Failed password for invalid user travisci from 171.244.5.213 port 52022 ssh2
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown