3.6.9.12 - IPInfo

Basic Info

City: Mumbai

Region: Maharashtra

Country: India

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
3.6.92.83	attackbotsspam	Sep 21 01:55:06 hidden sshd[47271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.6.92.83 user=root Sep 21 01:55:08 hidden sshd[47271]: Failed password for hidden from 3.6.92.83 port 49540 ssh2 Sep 21 02:00:04 hidden sshd[47974]: Invalid user oracle2 from 3.6.92.83 port 33144	2020-09-22 01:20:35
3.6.92.83	attackspam	Sep 21 01:55:06 hidden sshd[47271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.6.92.83 user=root Sep 21 01:55:08 hidden sshd[47271]: Failed password for hidden from 3.6.92.83 port 49540 ssh2 Sep 21 02:00:04 hidden sshd[47974]: Invalid user oracle2 from 3.6.92.83 port 33144	2020-09-21 17:03:37
3.6.93.32	attackspam	2020-01-23T01:34:21.177003shield sshd\[14179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-6-93-32.ap-south-1.compute.amazonaws.com user=root 2020-01-23T01:34:22.718652shield sshd\[14179\]: Failed password for root from 3.6.93.32 port 39586 ssh2 2020-01-23T01:40:46.170652shield sshd\[16495\]: Invalid user anto from 3.6.93.32 port 60036 2020-01-23T01:40:46.174308shield sshd\[16495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-6-93-32.ap-south-1.compute.amazonaws.com 2020-01-23T01:40:48.562932shield sshd\[16495\]: Failed password for invalid user anto from 3.6.93.32 port 60036 ssh2	2020-01-23 10:34:57

Type

Details

Datetime

3.6.92.83

attackbotsspam

Sep 21 01:55:06 *hidden* sshd[47271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.6.92.83 user=root Sep 21 01:55:08 *hidden* sshd[47271]: Failed password for *hidden* from 3.6.92.83 port 49540 ssh2 Sep 21 02:00:04 *hidden* sshd[47974]: Invalid user oracle2 from 3.6.92.83 port 33144

2020-09-22 01:20:35

3.6.92.83

attackspam

Sep 21 01:55:06 *hidden* sshd[47271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.6.92.83 user=root Sep 21 01:55:08 *hidden* sshd[47271]: Failed password for *hidden* from 3.6.92.83 port 49540 ssh2 Sep 21 02:00:04 *hidden* sshd[47974]: Invalid user oracle2 from 3.6.92.83 port 33144

2020-09-21 17:03:37

3.6.93.32

attackspam

2020-01-23T01:34:21.177003shield sshd\[14179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-6-93-32.ap-south-1.compute.amazonaws.com  user=root
2020-01-23T01:34:22.718652shield sshd\[14179\]: Failed password for root from 3.6.93.32 port 39586 ssh2
2020-01-23T01:40:46.170652shield sshd\[16495\]: Invalid user anto from 3.6.93.32 port 60036
2020-01-23T01:40:46.174308shield sshd\[16495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-6-93-32.ap-south-1.compute.amazonaws.com
2020-01-23T01:40:48.562932shield sshd\[16495\]: Failed password for invalid user anto from 3.6.93.32 port 60036 ssh2

2020-01-23 10:34:57

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.6.9.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59148
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;3.6.9.12.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025032801 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 29 03:40:29 CST 2025
;; MSG SIZE  rcvd: 101

Host info

12.9.6.3.in-addr.arpa domain name pointer ec2-3-6-9-12.ap-south-1.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.9.6.3.in-addr.arpa	name = ec2-3-6-9-12.ap-south-1.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
175.111.129.159	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-02 12:42:10
107.175.33.19	attack	Invalid user fake from 107.175.33.19 port 35873	2020-09-02 13:16:05
185.176.27.18	attackspambots	Fail2Ban Ban Triggered	2020-09-02 13:06:16
218.78.213.143	attackbots	$f2bV_matches	2020-09-02 12:34:32
13.68.137.194	attackspambots	Aug 30 10:42:59 server sshd[24139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.137.194 user=root Aug 30 10:43:01 server sshd[24139]: Failed password for invalid user root from 13.68.137.194 port 38142 ssh2 Aug 30 10:50:46 server sshd[24472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.137.194 user=root Aug 30 10:50:48 server sshd[24472]: Failed password for invalid user root from 13.68.137.194 port 58590 ssh2	2020-09-02 12:51:49
113.141.70.227	attack	Port Scan ...	2020-09-02 12:57:25
200.46.4.237	attack	2020-09-01 11:43:07.921575-0500 localhost smtpd[1384]: NOQUEUE: reject: RCPT from unknown[200.46.4.237]: 554 5.7.1 Service unavailable; Client host [200.46.4.237] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/200.46.4.237 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[200.46.4.237]>	2020-09-02 13:00:18
190.15.203.50	attack	Invalid user scj from 190.15.203.50 port 43682	2020-09-02 12:44:51
116.109.164.175	attackbots	Telnetd brute force attack detected by fail2ban	2020-09-02 12:45:49
78.128.113.118	attack	Aug 29 21:52:53 mail postfix/smtpd\[10335\]: warning: unknown\[78.128.113.118\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Aug 29 21:57:08 mail postfix/smtpd\[12025\]: warning: unknown\[78.128.113.118\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Aug 29 21:57:25 mail postfix/smtpd\[12020\]: warning: unknown\[78.128.113.118\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Aug 29 22:27:24 mail postfix/smtpd\[12452\]: warning: unknown\[78.128.113.118\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2020-09-02 12:46:21
34.93.41.18	attack	2020-09-01T20:40:59.2000481495-001 sshd[28059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.41.93.34.bc.googleusercontent.com 2020-09-01T20:40:59.1962221495-001 sshd[28059]: Invalid user oracle from 34.93.41.18 port 33718 2020-09-01T20:41:01.4951671495-001 sshd[28059]: Failed password for invalid user oracle from 34.93.41.18 port 33718 ssh2 2020-09-01T20:44:32.0250521495-001 sshd[28219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.41.93.34.bc.googleusercontent.com user=root 2020-09-01T20:44:33.9039521495-001 sshd[28219]: Failed password for root from 34.93.41.18 port 53328 ssh2 2020-09-01T20:48:04.7031921495-001 sshd[28392]: Invalid user kali from 34.93.41.18 port 44694 ...	2020-09-02 13:03:20
150.158.110.27	attack	Sep 2 05:17:17 rocket sshd[23341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.158.110.27 Sep 2 05:17:19 rocket sshd[23341]: Failed password for invalid user mh from 150.158.110.27 port 45432 ssh2 ...	2020-09-02 12:52:27
118.36.139.75	attackbotsspam	118.36.139.75 (KR/South Korea/-), 12 distributed sshd attacks on account [root] in the last 3600 secs	2020-09-02 12:56:58
149.200.186.60	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-02 13:05:35
202.131.69.18	attackspambots	Invalid user game from 202.131.69.18 port 40640	2020-09-02 12:59:49

Recently Reported IPs

75.152.110.206	213.51.166.179	209.58.107.73	48.163.206.248
98.89.206.106	30.187.118.247	243.208.18.187	42.133.246.5
130.104.211.247	174.92.102.165	229.46.16.129	100.227.175.130
200.232.169.199	218.92.162.234	170.119.179.6	2406:d500:12:beef:1bb0:1a58:e5f6:3bc1
46.138.1.221	221.240.8.13	103.246.11.178	55.47.190.92