Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Australia

Internet Service Provider: Amazon Corporate Services Pty Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Jul 25 14:44:07 vpxxxxxxx22308 sshd[1655]: Invalid user ts3server from 3.104.11.73
Jul 25 14:44:07 vpxxxxxxx22308 sshd[1655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.104.11.73
Jul 25 14:44:09 vpxxxxxxx22308 sshd[1655]: Failed password for invalid user ts3server from 3.104.11.73 port 52056 ssh2
Jul 25 14:50:01 vpxxxxxxx22308 sshd[2389]: Invalid user free from 3.104.11.73
Jul 25 14:50:01 vpxxxxxxx22308 sshd[2389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.104.11.73

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=3.104.11.73
2019-07-29 14:48:07
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.104.11.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60640
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;3.104.11.73.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072900 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 29 14:47:56 CST 2019
;; MSG SIZE  rcvd: 115
Host info
73.11.104.3.in-addr.arpa domain name pointer ec2-3-104-11-73.ap-southeast-2.compute.amazonaws.com.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
73.11.104.3.in-addr.arpa	name = ec2-3-104-11-73.ap-southeast-2.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
96.2.166.182 attackbotsspam
Mar  8 15:44:11 silence02 sshd[24576]: Failed password for root from 96.2.166.182 port 59908 ssh2
Mar  8 15:47:28 silence02 sshd[24740]: Failed password for root from 96.2.166.182 port 45470 ssh2
2020-03-08 23:43:57
79.116.88.151 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-03-08 23:11:40
213.92.192.144 attack
Feb  4 16:06:26 ms-srv sshd[59899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.92.192.144
Feb  4 16:06:28 ms-srv sshd[59899]: Failed password for invalid user kubuntu from 213.92.192.144 port 53709 ssh2
2020-03-08 23:04:31
222.186.180.142 attackspambots
03/08/2020-11:00:56.172471 222.186.180.142 Protocol: 6 ET SCAN Potential SSH Scan
2020-03-08 23:02:03
165.227.216.5 attackspam
Mar  8 16:18:44 santamaria sshd\[1879\]: Invalid user aero-stoked from 165.227.216.5
Mar  8 16:18:44 santamaria sshd\[1879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.216.5
Mar  8 16:18:46 santamaria sshd\[1879\]: Failed password for invalid user aero-stoked from 165.227.216.5 port 41640 ssh2
...
2020-03-08 23:38:54
114.232.1.166 attackbotsspam
Brute force attempt
2020-03-08 22:55:08
78.188.170.17 attackbotsspam
Honeypot attack, port: 5555, PTR: 78.188.170.17.static.ttnet.com.tr.
2020-03-08 23:08:06
46.170.234.243 attackspam
Port probing on unauthorized port 9530
2020-03-08 23:26:28
213.49.56.65 attackbotsspam
Jan 14 11:38:55 ms-srv sshd[46769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.49.56.65
Jan 14 11:38:56 ms-srv sshd[46767]: Failed password for invalid user pi from 213.49.56.65 port 54158 ssh2
Jan 14 11:38:57 ms-srv sshd[46769]: Failed password for invalid user pi from 213.49.56.65 port 54160 ssh2
2020-03-08 23:31:29
84.241.31.8 attackspambots
** MIRAI HOST **
Sun Mar  8 07:18:27 2020 - Child process 448024 handling connection
Sun Mar  8 07:18:27 2020 - New connection from: 84.241.31.8:38054
Sun Mar  8 07:18:27 2020 - Sending data to client: [Login: ]
Sun Mar  8 07:18:28 2020 - Got data: default
Sun Mar  8 07:18:29 2020 - Sending data to client: [Password: ]
Sun Mar  8 07:18:30 2020 - Got data: antslq
Sun Mar  8 07:18:32 2020 - Child 448033 granting shell
Sun Mar  8 07:18:32 2020 - Child 448024 exiting
Sun Mar  8 07:18:32 2020 - Sending data to client: [Logged in]
Sun Mar  8 07:18:32 2020 - Sending data to client: [Welcome to MX990 Embedded Linux]
Sun Mar  8 07:18:32 2020 - Sending data to client: [[root@dvrdvs /]# ]
Sun Mar  8 07:18:35 2020 - Got data: enable
system
shell
sh
Sun Mar  8 07:18:35 2020 - Sending data to client: [Command not found]
Sun Mar  8 07:18:35 2020 - Sending data to client: [[root@dvrdvs /]# ]
Sun Mar  8 07:18:36 2020 - Got data: cat /proc/mounts; /bin/busybox ZLTVF
Sun Mar  8 07:18:36 2020 - Sending data to clie
2020-03-08 22:54:39
157.230.153.75 attackbotsspam
$f2bV_matches
2020-03-08 23:01:17
213.6.16.226 attackbots
May 10 17:30:16 ms-srv sshd[45759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.16.226
May 10 17:30:18 ms-srv sshd[45759]: Failed password for invalid user pgsql from 213.6.16.226 port 40712 ssh2
2020-03-08 23:24:48
81.10.79.66 attack
Honeypot attack, port: 445, PTR: host-81.10.79.66-static.tedata.net.
2020-03-08 23:30:24
213.79.114.246 attackspambots
Aug 10 13:19:04 ms-srv sshd[53397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.79.114.246
Aug 10 13:19:06 ms-srv sshd[53397]: Failed password for invalid user admin from 213.79.114.246 port 35148 ssh2
2020-03-08 23:15:25
213.32.67.160 attack
Jan  3 18:56:24 ms-srv sshd[12440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.67.160
Jan  3 18:56:26 ms-srv sshd[12440]: Failed password for invalid user c from 213.32.67.160 port 58420 ssh2
2020-03-08 23:44:17

Recently Reported IPs

179.171.90.31 182.240.41.27 171.76.103.12 46.30.167.69
179.171.90.140 47.72.82.240 206.189.149.170 179.160.174.176
176.122.128.217 60.13.48.147 181.111.58.173 179.146.249.92
185.139.21.32 179.119.194.166 101.81.161.187 175.171.2.193
179.112.232.84 178.79.144.205 178.33.178.22 140.213.15.148