City: Frankfurt am Main
Region: Hessen
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 34.128.0.0 - 34.191.255.255
CIDR: 34.128.0.0/10
NetName: GOOGL-2
NetHandle: NET-34-128-0-0-1
Parent: NET34 (NET-34-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Google LLC (GOOGL-2)
RegDate: 2021-01-08
Updated: 2021-01-08
Ref: https://rdap.arin.net/registry/ip/34.128.0.0
OrgName: Google LLC
OrgId: GOOGL-2
Address: 1600 Amphitheatre Parkway
City: Mountain View
StateProv: CA
PostalCode: 94043
Country: US
RegDate: 2006-09-29
Updated: 2019-11-01
Comment: *** The IP addresses under this Org-ID are in use by Google Cloud customers ***
Comment:
Comment: Direct all copyright and legal complaints to
Comment: https://support.google.com/legal/go/report
Comment:
Comment: Direct all spam and abuse complaints to
Comment: https://support.google.com/code/go/gce_abuse_report
Comment:
Comment: For fastest response, use the relevant forms above.
Comment:
Comment: Complaints can also be sent to the GC Abuse desk
Comment: (google-cloud-compliance@google.com)
Comment: but may have longer turnaround times.
Comment:
Comment: Complaints sent to any other POC will be ignored.
Ref: https://rdap.arin.net/registry/entity/GOOGL-2
OrgTechHandle: ZG39-ARIN
OrgTechName: Google LLC
OrgTechPhone: +1-650-253-0000
OrgTechEmail: arin-contact@google.com
OrgTechRef: https://rdap.arin.net/registry/entity/ZG39-ARIN
OrgAbuseHandle: GCABU-ARIN
OrgAbuseName: GC Abuse
OrgAbusePhone: +1-650-253-0000
OrgAbuseEmail: google-cloud-compliance@google.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/GCABU-ARIN
OrgNOCHandle: GCABU-ARIN
OrgNOCName: GC Abuse
OrgNOCPhone: +1-650-253-0000
OrgNOCEmail: google-cloud-compliance@google.com
OrgNOCRef: https://rdap.arin.net/registry/entity/GCABU-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.159.131.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56817
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;34.159.131.66. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026061500 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 15 22:30:03 CST 2026
;; MSG SIZE rcvd: 106
66.131.159.34.in-addr.arpa domain name pointer 66.131.159.34.bc.googleusercontent.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
66.131.159.34.in-addr.arpa name = 66.131.159.34.bc.googleusercontent.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.6.172.38 | attackspam | Bruteforce detected by fail2ban |
2020-09-12 21:06:16 |
| 205.177.181.25 | attackspambots | Amazon.job's - Recruitment |
2020-09-12 21:05:52 |
| 112.230.81.221 | attackspam | Sep 12 09:51:03 fhem-rasp sshd[7210]: Connection closed by 112.230.81.221 port 54904 [preauth] Sep 12 09:51:03 fhem-rasp sshd[7216]: Connection closed by 112.230.81.221 port 54910 [preauth] ... |
2020-09-12 20:58:24 |
| 34.82.27.159 | attack | Invalid user admin from 34.82.27.159 port 38012 |
2020-09-12 20:45:01 |
| 104.211.213.191 | attackspambots | Port 22 Scan, PTR: None |
2020-09-12 21:08:13 |
| 116.108.187.49 | attackspambots | Automatic report - Port Scan Attack |
2020-09-12 20:53:31 |
| 83.52.108.134 | attack | Automatic report - Port Scan Attack |
2020-09-12 21:01:35 |
| 13.85.152.27 | attackbotsspam | Sep 12 11:42:30 XXXXXX sshd[37506]: Invalid user ec2-user from 13.85.152.27 port 38212 |
2020-09-12 20:57:25 |
| 182.61.18.154 | attackbotsspam | Sep 12 06:48:51 root sshd[13830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.18.154 Sep 12 06:54:13 root sshd[18324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.18.154 ... |
2020-09-12 20:38:56 |
| 62.33.211.129 | attackbotsspam | Distributed brute force attack |
2020-09-12 20:49:53 |
| 191.53.58.186 | attack | Sep 11 19:33:39 mail.srvfarm.net postfix/smtps/smtpd[3915805]: warning: unknown[191.53.58.186]: SASL PLAIN authentication failed: Sep 11 19:33:40 mail.srvfarm.net postfix/smtps/smtpd[3915805]: lost connection after AUTH from unknown[191.53.58.186] Sep 11 19:33:57 mail.srvfarm.net postfix/smtpd[3916041]: warning: unknown[191.53.58.186]: SASL PLAIN authentication failed: Sep 11 19:33:57 mail.srvfarm.net postfix/smtpd[3916041]: lost connection after AUTH from unknown[191.53.58.186] Sep 11 19:41:43 mail.srvfarm.net postfix/smtps/smtpd[3915174]: warning: unknown[191.53.58.186]: SASL PLAIN authentication failed: |
2020-09-12 20:59:39 |
| 201.236.182.92 | attackbots | (sshd) Failed SSH login from 201.236.182.92 (CL/Chile/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 12 03:43:24 jbs1 sshd[19148]: Invalid user misha from 201.236.182.92 Sep 12 03:43:24 jbs1 sshd[19148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.236.182.92 Sep 12 03:43:26 jbs1 sshd[19148]: Failed password for invalid user misha from 201.236.182.92 port 43908 ssh2 Sep 12 03:58:04 jbs1 sshd[24709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.236.182.92 user=root Sep 12 03:58:05 jbs1 sshd[24709]: Failed password for root from 201.236.182.92 port 43846 ssh2 |
2020-09-12 21:03:22 |
| 112.78.11.31 | attackbotsspam | Sep 12 10:08:34 root sshd[27304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.78.11.31 ... |
2020-09-12 20:52:12 |
| 27.223.89.238 | attackbotsspam | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-12T12:26:15Z and 2020-09-12T12:29:15Z |
2020-09-12 20:50:15 |
| 103.145.13.212 | attack | NL NL/Netherlands/- Hits: 11 |
2020-09-12 21:10:47 |