Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Sydney

Region: New South Wales

Country: Australia

Internet Service Provider: Amazon Corporate Services Pty Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Lines containing failures of 3.105.1.3
Oct 12 03:48:51 neweola sshd[26300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.105.1.3  user=r.r
Oct 12 03:48:52 neweola sshd[26300]: Failed password for r.r from 3.105.1.3 port 39838 ssh2
Oct 12 03:48:53 neweola sshd[26300]: Received disconnect from 3.105.1.3 port 39838:11: Bye Bye [preauth]
Oct 12 03:48:53 neweola sshd[26300]: Disconnected from authenticating user r.r 3.105.1.3 port 39838 [preauth]
Oct 12 04:06:32 neweola sshd[26856]: Invalid user cristiana from 3.105.1.3 port 60870
Oct 12 04:06:32 neweola sshd[26856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.105.1.3 
Oct 12 04:06:34 neweola sshd[26856]: Failed password for invalid user cristiana from 3.105.1.3 port 60870 ssh2
Oct 12 04:06:36 neweola sshd[26856]: Received disconnect from 3.105.1.3 port 60870:11: Bye Bye [preauth]
Oct 12 04:06:36 neweola sshd[26856]: Disconnected from i........
------------------------------
2020-10-14 07:43:54
Comments on same subnet:
IP Type Details Datetime
3.105.198.132 attackspam
RDP Bruteforce
2019-07-16 15:26:21
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.105.1.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30363
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;3.105.1.3.			IN	A

;; AUTHORITY SECTION:
.			293	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101302 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 14 07:43:50 CST 2020
;; MSG SIZE  rcvd: 113
Host info
3.1.105.3.in-addr.arpa domain name pointer ec2-3-105-1-3.ap-southeast-2.compute.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
3.1.105.3.in-addr.arpa	name = ec2-3-105-1-3.ap-southeast-2.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
37.139.24.204 attack
2019-07-04T11:40:59.015157abusebot-4.cloudsearch.cf sshd\[8675\]: Invalid user git from 37.139.24.204 port 34586
2019-07-04 19:51:25
195.210.172.42 attack
Absender hat Spam-Falle ausgel?st
2019-07-04 20:17:58
54.38.238.92 attackspam
fail2ban honeypot
2019-07-04 19:58:36
37.150.0.172 attackbots
2019-07-04 07:34:43 H=(37.150.0.172.megaline.telecom.kz) [37.150.0.172]:50198 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=37.150.0.172)
2019-07-04 07:34:44 unexpected disconnection while reading SMTP command from (37.150.0.172.megaline.telecom.kz) [37.150.0.172]:50198 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-07-04 07:48:45 H=(37.150.0.172.megaline.telecom.kz) [37.150.0.172]:50267 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=37.150.0.172)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=37.150.0.172
2019-07-04 20:08:09
103.71.171.164 attackspam
2019-07-04 07:34:19 H=([103.71.171.164]) [103.71.171.164]:24160 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=103.71.171.164)
2019-07-04 07:34:19 unexpected disconnection while reading SMTP command from ([103.71.171.164]) [103.71.171.164]:24160 I=[10.100.18.20]:25 (error: Connection reset by peer)
2019-07-04 07:45:34 H=([103.71.171.164]) [103.71.171.164]:54683 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=103.71.171.164)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.71.171.164
2019-07-04 19:49:01
125.212.254.144 attackspambots
Jul  4 12:57:33 bouncer sshd\[7756\]: Invalid user shell from 125.212.254.144 port 40304
Jul  4 12:57:33 bouncer sshd\[7756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.212.254.144 
Jul  4 12:57:35 bouncer sshd\[7756\]: Failed password for invalid user shell from 125.212.254.144 port 40304 ssh2
...
2019-07-04 19:31:50
35.232.85.84 attack
WordPress login Brute force / Web App Attack on client site.
2019-07-04 19:50:11
36.74.75.31 attackspambots
Tried sshing with brute force.
2019-07-04 19:34:21
220.164.2.77 attackbotsspam
'IP reached maximum auth failures for a one day block'
2019-07-04 19:26:13
118.24.92.216 attackspam
Jul  4 01:01:01 gcems sshd\[11823\]: Invalid user wo from 118.24.92.216 port 37998
Jul  4 01:01:02 gcems sshd\[11823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.92.216
Jul  4 01:01:03 gcems sshd\[11823\]: Failed password for invalid user wo from 118.24.92.216 port 37998 ssh2
Jul  4 01:07:36 gcems sshd\[20120\]: Invalid user teamspeak3 from 118.24.92.216 port 34918
Jul  4 01:07:38 gcems sshd\[20120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.92.216
...
2019-07-04 20:00:43
121.136.156.51 attack
Multiport scan : 9 ports scanned 31089 31090 31093 31094 31096 31098 31099 33194 33199
2019-07-04 19:48:39
109.230.128.211 attack
DATE:2019-07-04 08:07:27, IP:109.230.128.211, PORT:5900 - VNC brute force auth on a honeypot server (epe-dc)
2019-07-04 20:06:00
104.217.191.222 attackbotsspam
Jul  4 12:06:22 shared02 sshd[3110]: Invalid user aztecs from 104.217.191.222
Jul  4 12:06:22 shared02 sshd[3110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.217.191.222
Jul  4 12:06:23 shared02 sshd[3110]: Failed password for invalid user aztecs from 104.217.191.222 port 41348 ssh2
Jul  4 12:06:23 shared02 sshd[3110]: Received disconnect from 104.217.191.222 port 41348:11: Bye Bye [preauth]
Jul  4 12:06:23 shared02 sshd[3110]: Disconnected from 104.217.191.222 port 41348 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.217.191.222
2019-07-04 20:00:18
158.69.23.53 attack
Jul  4 14:01:09 vps647732 sshd[28770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.23.53
Jul  4 14:01:12 vps647732 sshd[28770]: Failed password for invalid user teamspeak3 from 158.69.23.53 port 55586 ssh2
...
2019-07-04 20:12:15
62.28.34.125 attackbots
Jul  4 02:34:36 server sshd\[127440\]: Invalid user poissons from 62.28.34.125
Jul  4 02:34:36 server sshd\[127440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125
Jul  4 02:34:38 server sshd\[127440\]: Failed password for invalid user poissons from 62.28.34.125 port 2729 ssh2
...
2019-07-04 19:32:10

Recently Reported IPs

103.45.131.11 37.142.0.167 193.122.237.96 88.88.251.45
218.69.98.170 125.123.71.57 181.189.222.130 188.82.251.42
178.128.222.157 139.59.251.236 160.16.99.195 170.245.225.214
119.194.214.190 59.42.36.131 3.17.80.24 27.155.97.12
110.136.219.143 152.32.197.92 106.225.192.140 195.205.96.251