Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Tokyo

Region: Tokyo

Country: Japan

Internet Service Provider: NTT docomo

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
3.115.48.1 attack
SSH bruteforce (Triggered fail2ban)
2020-02-12 21:38:37
3.115.49.134 attackbotsspam
Message ID	
Created at:	Sun, Dec 1, 2019 at 8:37 AM (Delivered after -2424 seconds)
From:	Alert 
Subject:	(36) Your account will be closed in 10 Hours
SPF:	PASS with IP 3.115.49.134
ARC-Authentication-Results: i=1; mx.google.com;
       spf=pass (google.com: best guess record for domain of bighpbiw@3veqv---3veqv----us-west-2.compute.amazonaws.com designates 3.115.49.134 as permitted sender) smtp.mailfrom=BiGHPbIw@3veqv---3veqv----us-west-2.compute.amazonaws.com
Return-Path: 
Received: from cyborganic.com (ec2-3-115-49-134.ap-northeast-1.compute.amazonaws.com. [3.115.49.134])
        by mx.google.com with ESMTP id x15si15785153pgk.593.2019.12.01.05.56.36
2019-12-02 06:01:21
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



# start

NetRange:       3.0.0.0 - 3.127.255.255
CIDR:           3.0.0.0/9
NetName:        AT-88-Z
NetHandle:      NET-3-0-0-0-1
Parent:         NET3 (NET-3-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Amazon Technologies Inc. (AT-88-Z)
RegDate:        2017-12-20
Updated:        2022-05-18
Ref:            https://rdap.arin.net/registry/ip/3.0.0.0



OrgName:        Amazon Technologies Inc.
OrgId:          AT-88-Z
Address:        410 Terry Ave N.
City:           Seattle
StateProv:      WA
PostalCode:     98109
Country:        US
RegDate:        2011-12-08
Updated:        2024-01-24
Comment:        All abuse reports MUST include:
Comment:        * src IP
Comment:        * dest IP (your IP)
Comment:        * dest port
Comment:        * Accurate date/timestamp and timezone of activity
Comment:        * Intensity/frequency (short log extracts)
Comment:        * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref:            https://rdap.arin.net/registry/entity/AT-88-Z


OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName:   IP Routing
OrgRoutingPhone:  +1-206-555-0000 
OrgRoutingEmail:  aws-routing-poc@amazon.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/IPROU3-ARIN

OrgRoutingHandle: ARMP-ARIN
OrgRoutingName:   AWS RPKI Management POC
OrgRoutingPhone:  +1-206-555-0000 
OrgRoutingEmail:  aws-rpki-routing-poc@amazon.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/ARMP-ARIN

OrgNOCHandle: AANO1-ARIN
OrgNOCName:   Amazon AWS Network Operations
OrgNOCPhone:  +1-206-555-0000 
OrgNOCEmail:  amzn-noc-contact@amazon.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/AANO1-ARIN

OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-555-0000 
OrgAbuseEmail:  trustandsafety@support.aws.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AEA8-ARIN

OrgTechHandle: ANO24-ARIN
OrgTechName:   Amazon EC2 Network Operations
OrgTechPhone:  +1-206-555-0000 
OrgTechEmail:  amzn-noc-contact@amazon.com
OrgTechRef:    https://rdap.arin.net/registry/entity/ANO24-ARIN

# end


# start

NetRange:       3.112.0.0 - 3.115.255.255
CIDR:           3.112.0.0/14
NetName:        AMAZON-NRT
NetHandle:      NET-3-112-0-0-1
Parent:         AT-88-Z (NET-3-0-0-0-1)
NetType:        Reallocated
OriginAS:       
Organization:   Amazon Data Services Japan (AMAZO-49)
RegDate:        2018-07-11
Updated:        2018-07-11
Ref:            https://rdap.arin.net/registry/ip/3.112.0.0


OrgName:        Amazon Data Services Japan
OrgId:          AMAZO-49
Address:        Meguro Central Square
Address:        3-1-1 Kamiosaki,Shinagawa-ku
City:           Tokyo
StateProv:      
PostalCode:     141-0021
Country:        JP
RegDate:        2012-08-01
Updated:        2023-03-14
Comment:        The activity you have detected originates from a dynamic hosting environment. 
Comment:        For fastest response, please submit abuse reports at http://aws-portal.amazon.com/gp/aws/html-forms-controller/contactus/AWSAbuse 
Comment:        For more information regarding EC2 see: 
Comment:        http://ec2.amazonaws.com/ 
Comment:        All reports MUST include: 
Comment:        * src IP 
Comment:        * dest IP (your IP) 
Comment:        * dest port 
Comment:        * Accurate date/timestamp and timezone of activity 
Comment:        * Intensity/frequency (short log extracts) 
Comment:        * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref:            https://rdap.arin.net/registry/entity/AMAZO-49


OrgTechHandle: ANO24-ARIN
OrgTechName:   Amazon EC2 Network Operations
OrgTechPhone:  +1-206-555-0000 
OrgTechEmail:  amzn-noc-contact@amazon.com
OrgTechRef:    https://rdap.arin.net/registry/entity/ANO24-ARIN

OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-555-0000 
OrgAbuseEmail:  trustandsafety@support.aws.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AEA8-ARIN

OrgNOCHandle: AANO1-ARIN
OrgNOCName:   Amazon AWS Network Operations
OrgNOCPhone:  +1-206-555-0000 
OrgNOCEmail:  amzn-noc-contact@amazon.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/AANO1-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.115.4.165
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36707
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;3.115.4.165.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026040400 1800 900 604800 86400

;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 04 20:30:02 CST 2026
;; MSG SIZE  rcvd: 104
Host info
165.4.115.3.in-addr.arpa domain name pointer ec2-3-115-4-165.ap-northeast-1.compute.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
165.4.115.3.in-addr.arpa	name = ec2-3-115-4-165.ap-northeast-1.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
45.232.73.83 attackbotsspam
Invalid user semenov from 45.232.73.83 port 49686
2020-06-19 14:01:55
185.220.101.20 attack
20 attempts against mh_ha-misbehave-ban on seed
2020-06-19 14:12:09
140.143.199.169 attack
ssh brute force
2020-06-19 13:53:08
5.196.241.233 attack
Invalid user ysp from 5.196.241.233 port 2893
2020-06-19 13:54:22
45.179.188.198 attack
(BR/Brazil/-) SMTP Bruteforcing attempts
2020-06-19 14:27:05
180.76.238.69 attack
Invalid user minecraft from 180.76.238.69 port 10118
2020-06-19 13:48:41
106.12.88.165 attack
SSH login attempts.
2020-06-19 13:58:21
51.83.66.171 attack
TCP port 8088: Scan and connection
2020-06-19 14:26:44
106.52.42.153 attackspambots
Jun 19 08:03:06 minden010 sshd[10268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.42.153
Jun 19 08:03:08 minden010 sshd[10268]: Failed password for invalid user admin from 106.52.42.153 port 48384 ssh2
Jun 19 08:04:52 minden010 sshd[10510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.42.153
...
2020-06-19 14:23:17
58.87.75.178 attackspambots
SSH Brute-Force reported by Fail2Ban
2020-06-19 13:55:24
58.221.204.114 attack
Jun 19 05:04:49 jumpserver sshd[137829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.221.204.114 
Jun 19 05:04:49 jumpserver sshd[137829]: Invalid user dave from 58.221.204.114 port 43799
Jun 19 05:04:51 jumpserver sshd[137829]: Failed password for invalid user dave from 58.221.204.114 port 43799 ssh2
...
2020-06-19 14:07:39
192.227.223.181 attack
Invalid user admin from 192.227.223.181 port 42671
2020-06-19 14:06:40
102.39.151.220 attackspambots
SSH login attempts.
2020-06-19 14:23:37
132.232.31.157 attackspambots
Jun 19 07:38:34 buvik sshd[24033]: Failed password for invalid user ntc from 132.232.31.157 port 34006 ssh2
Jun 19 07:42:54 buvik sshd[24748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.31.157  user=root
Jun 19 07:42:56 buvik sshd[24748]: Failed password for root from 132.232.31.157 port 60888 ssh2
...
2020-06-19 13:56:34
158.140.230.153 attackbots
Invalid user teamspeak3 from 158.140.230.153 port 43926
2020-06-19 14:21:46

Recently Reported IPs

92.200.96.82 66.132.186.164 223.73.11.110 2606:4700:10::6816:1725
2606:4700:10::6816:3455 2606:4700:10::6814:5840 2606:4700:10::6816:1437 2606:4700:10::6814:4352
2606:4700:10::6814:6087 2606:4700:10::ac43:2173 2606:4700:10::ac43:1601 2606:4700:10::ac43:87e
2606:4700:10::6816:955 2606:4700:10::6816:4189 14.207.194.48 2606:4700:10::ac43:982
2606:4700:10::6816:4110 2606:4700:10::6814:5484 2606:4700:10::6816:1410 2606:4700:10::6816:1327