3.106.14.83 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
3.106.140.214	attackbots	Apr 9 10:20:50 datentool sshd[26043]: Invalid user api from 3.106.140.214 Apr 9 10:20:50 datentool sshd[26043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.106.140.214 Apr 9 10:20:52 datentool sshd[26043]: Failed password for invalid user api from 3.106.140.214 port 56740 ssh2 Apr 9 10:23:15 datentool sshd[26084]: Invalid user fms from 3.106.140.214 Apr 9 10:23:15 datentool sshd[26084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.106.140.214 Apr 9 10:23:17 datentool sshd[26084]: Failed password for invalid user fms from 3.106.140.214 port 59918 ssh2 Apr 9 10:25:09 datentool sshd[26096]: Invalid user user from 3.106.140.214 Apr 9 10:25:09 datentool sshd[26096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.106.140.214 Apr 9 10:25:11 datentool sshd[26096]: Failed password for invalid user user from 3.106.140.214 port 58956 ssh........ -------------------------------	2020-04-09 21:23:49

Type

Details

Datetime

3.106.140.214

attackbots

Apr  9 10:20:50 datentool sshd[26043]: Invalid user api from 3.106.140.214
Apr  9 10:20:50 datentool sshd[26043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.106.140.214 
Apr  9 10:20:52 datentool sshd[26043]: Failed password for invalid user api from 3.106.140.214 port 56740 ssh2
Apr  9 10:23:15 datentool sshd[26084]: Invalid user fms from 3.106.140.214
Apr  9 10:23:15 datentool sshd[26084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.106.140.214 
Apr  9 10:23:17 datentool sshd[26084]: Failed password for invalid user fms from 3.106.140.214 port 59918 ssh2
Apr  9 10:25:09 datentool sshd[26096]: Invalid user user from 3.106.140.214
Apr  9 10:25:09 datentool sshd[26096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.106.140.214 
Apr  9 10:25:11 datentool sshd[26096]: Failed password for invalid user user from 3.106.140.214 port 58956 ssh........
-------------------------------

2020-04-09 21:23:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.106.14.83
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51006
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;3.106.14.83.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110200 1800 900 604800 86400

;; Query time: 530 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 02 22:49:18 CST 2019
;; MSG SIZE  rcvd: 115

Host info

83.14.106.3.in-addr.arpa domain name pointer ec2-3-106-14-83.ap-southeast-2.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
83.14.106.3.in-addr.arpa	name = ec2-3-106-14-83.ap-southeast-2.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
189.86.227.10	attackbotsspam	Unauthorized connection attempt from IP address 189.86.227.10 on Port 445(SMB)	2020-09-06 02:42:14
114.143.115.98	attackspam	Unauthorized connection attempt from IP address 114.143.115.98 on Port 445(SMB)	2020-09-06 03:12:23
20.41.86.104	attack	Port Scan: TCP/443	2020-09-06 02:54:21
139.59.128.123	attackspam	Lines containing failures of 139.59.128.123 Sep 4 09:41:07 v2hgb sshd[7002]: Did not receive identification string from 139.59.128.123 port 39562 Sep 4 09:41:14 v2hgb sshd[7004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.128.123 user=r.r Sep 4 09:41:16 v2hgb sshd[7004]: Failed password for r.r from 139.59.128.123 port 47650 ssh2 Sep 4 09:41:17 v2hgb sshd[7004]: Received disconnect from 139.59.128.123 port 47650:11: Normal Shutdown, Thank you for playing [preauth] Sep 4 09:41:17 v2hgb sshd[7004]: Disconnected from authenticating user r.r 139.59.128.123 port 47650 [preauth] Sep 4 09:41:34 v2hgb sshd[7014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.128.123 user=r.r Sep 4 09:41:36 v2hgb sshd[7014]: Failed password for r.r from 139.59.128.123 port 47606 ssh2 Sep 4 09:41:36 v2hgb sshd[7014]: Received disconnect from 139.59.128.123 port 47606:11: Normal Shutdown, ........ ------------------------------	2020-09-06 02:57:54
64.202.135.205	attack	Unauthorized connection attempt from IP address 64.202.135.205 on Port 445(SMB)	2020-09-06 02:51:10
190.206.164.64	attackbotsspam	Attempted connection to port 445.	2020-09-06 02:56:46
172.81.204.249	attackspambots	SSH-BruteForce	2020-09-06 02:34:03
167.114.251.164	attackspam	Invalid user ts2 from 167.114.251.164 port 58854	2020-09-06 02:32:31
187.192.1.9	attack	DATE:2020-09-04 18:45:05, IP:187.192.1.9, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-09-06 03:05:07
201.236.79.18	attackspambots	Unauthorized connection attempt from IP address 201.236.79.18 on Port 445(SMB)	2020-09-06 02:57:03
200.6.203.85	attackbotsspam	Postfix attempt blocked due to public blacklist entry	2020-09-06 02:32:13
177.37.239.147	attackbotsspam	Sep 4 18:46:32 mellenthin postfix/smtpd[32306]: NOQUEUE: reject: RCPT from unknown[177.37.239.147]: 554 5.7.1 Service unavailable; Client host [177.37.239.147] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/177.37.239.147; from= to= proto=ESMTP helo=<[177.37.239.147]>	2020-09-06 02:35:27
107.189.11.163	attackbotsspam	2020-09-05 12:35:45.984165-0500 localhost sshd[46383]: Failed password for root from 107.189.11.163 port 53346 ssh2	2020-09-06 02:50:54
85.98.92.157	attackbots	Attempted connection to port 80.	2020-09-06 02:52:48
180.164.58.165	attackspam	180.164.58.165 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 5 14:28:06 server4 sshd[18004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.164.58.165 user=root Sep 5 14:28:08 server4 sshd[18004]: Failed password for root from 180.164.58.165 port 56586 ssh2 Sep 5 14:27:40 server4 sshd[17788]: Failed password for root from 91.240.193.56 port 46362 ssh2 Sep 5 14:25:55 server4 sshd[16823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.213.108.189 user=root Sep 5 14:25:57 server4 sshd[16823]: Failed password for root from 81.213.108.189 port 48810 ssh2 Sep 5 14:29:02 server4 sshd[18467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.3.80 user=root IP Addresses Blocked:	2020-09-06 02:46:29

Recently Reported IPs

69.109.165.42	247.134.128.224	180.248.11.93	223.129.63.76
223.1.163.85	106.146.206.54	246.85.212.6	111.186.17.202
115.164.248.205	63.220.33.10	10.233.34.12	241.243.163.123
74.198.48.51	196.28.25.20	2.102.228.62	21.237.133.30
203.93.11.242	228.170.95.85	32.142.239.184	144.247.159.155