34.80.239.138 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Google LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Dec 24 06:22:46 plesk sshd[21394]: Invalid user bn from 34.80.239.138 Dec 24 06:22:49 plesk sshd[21394]: Failed password for invalid user bn from 34.80.239.138 port 27086 ssh2 Dec 24 06:22:49 plesk sshd[21394]: Received disconnect from 34.80.239.138: 11: Bye Bye [preauth] Dec 24 06:40:49 plesk sshd[26834]: Invalid user webadmin from 34.80.239.138 Dec 24 06:40:51 plesk sshd[26834]: Failed password for invalid user webadmin from 34.80.239.138 port 20396 ssh2 Dec 24 06:40:51 plesk sshd[26834]: Received disconnect from 34.80.239.138: 11: Bye Bye [preauth] Dec 24 06:43:35 plesk sshd[26977]: Invalid user tashima from 34.80.239.138 Dec 24 06:43:37 plesk sshd[26977]: Failed password for invalid user tashima from 34.80.239.138 port 47882 ssh2 Dec 24 06:43:38 plesk sshd[26977]: Received disconnect from 34.80.239.138: 11: Bye Bye [preauth] Dec 24 06:46:27 plesk sshd[27119]: Invalid user memorabilia from 34.80.239.138 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=34.8	2019-12-25 16:23:06
attack	"SSH brute force auth login attempt."	2019-12-25 06:48:00

Type

Details

Datetime

attackspam

Dec 24 06:22:46 plesk sshd[21394]: Invalid user bn from 34.80.239.138
Dec 24 06:22:49 plesk sshd[21394]: Failed password for invalid user bn from 34.80.239.138 port 27086 ssh2
Dec 24 06:22:49 plesk sshd[21394]: Received disconnect from 34.80.239.138: 11: Bye Bye [preauth]
Dec 24 06:40:49 plesk sshd[26834]: Invalid user webadmin from 34.80.239.138
Dec 24 06:40:51 plesk sshd[26834]: Failed password for invalid user webadmin from 34.80.239.138 port 20396 ssh2
Dec 24 06:40:51 plesk sshd[26834]: Received disconnect from 34.80.239.138: 11: Bye Bye [preauth]
Dec 24 06:43:35 plesk sshd[26977]: Invalid user tashima from 34.80.239.138
Dec 24 06:43:37 plesk sshd[26977]: Failed password for invalid user tashima from 34.80.239.138 port 47882 ssh2
Dec 24 06:43:38 plesk sshd[26977]: Received disconnect from 34.80.239.138: 11: Bye Bye [preauth]
Dec 24 06:46:27 plesk sshd[27119]: Invalid user memorabilia from 34.80.239.138


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=34.8

2019-12-25 16:23:06

attack

"SSH brute force auth login attempt."

2019-12-25 06:48:00

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.80.239.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31942
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;34.80.239.138.			IN	A

;; AUTHORITY SECTION:
.			550	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122402 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 25 06:47:56 CST 2019
;; MSG SIZE  rcvd: 117

Host info

138.239.80.34.in-addr.arpa domain name pointer 138.239.80.34.bc.googleusercontent.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.239.80.34.in-addr.arpa	name = 138.239.80.34.bc.googleusercontent.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
85.122.7.17	attackspam	Unauthorized connection attempt from IP address 85.122.7.17 on Port 445(SMB)	2020-05-24 04:47:49
186.138.196.50	attack	SSH Login Bruteforce	2020-05-24 04:36:14
176.107.133.228	attackspambots	(sshd) Failed SSH login from 176.107.133.228 (PL/Poland/host228-133-107-176.static.arubacloud.pl): 5 in the last 3600 secs	2020-05-24 04:43:59
103.129.223.98	attack	2020-05-23T15:13:40.226109server.mjenks.net sshd[1226324]: Invalid user laq from 103.129.223.98 port 36460 2020-05-23T15:13:40.230550server.mjenks.net sshd[1226324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.129.223.98 2020-05-23T15:13:40.226109server.mjenks.net sshd[1226324]: Invalid user laq from 103.129.223.98 port 36460 2020-05-23T15:13:41.899583server.mjenks.net sshd[1226324]: Failed password for invalid user laq from 103.129.223.98 port 36460 ssh2 2020-05-23T15:15:49.397925server.mjenks.net sshd[1226567]: Invalid user uki from 103.129.223.98 port 44338 ...	2020-05-24 04:31:15
77.159.249.91	attack	May 23 22:12:05 home sshd[18227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.159.249.91 May 23 22:12:08 home sshd[18227]: Failed password for invalid user aex from 77.159.249.91 port 56528 ssh2 May 23 22:15:53 home sshd[18620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.159.249.91 ...	2020-05-24 04:25:47
218.92.0.200	attack	May 23 22:15:37 vpn01 sshd[8528]: Failed password for root from 218.92.0.200 port 17051 ssh2 May 23 22:15:39 vpn01 sshd[8528]: Failed password for root from 218.92.0.200 port 17051 ssh2 ...	2020-05-24 04:39:40
64.225.67.229	attack	[MK-VM5] Blocked by UFW	2020-05-24 04:36:57
49.231.251.172	attack	Unauthorized connection attempt from IP address 49.231.251.172 on Port 445(SMB)	2020-05-24 04:35:55
177.42.106.148	attack	Unauthorized connection attempt from IP address 177.42.106.148 on Port 445(SMB)	2020-05-24 04:39:12
183.89.214.157	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-05-24 04:30:29
198.108.67.17	attack	May 23 22:15:47 debian-2gb-nbg1-2 kernel: \[12523758.223699\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.17 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=34 ID=23398 PROTO=TCP SPT=35882 DPT=5901 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-24 04:31:45
96.227.253.19	attackspambots	Zyxel Multiple Products Command Injection Vulnerability	2020-05-24 05:01:26
157.230.244.147	attackspam	May 23 23:07:03 lukav-desktop sshd\[355\]: Invalid user tz from 157.230.244.147 May 23 23:07:03 lukav-desktop sshd\[355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.244.147 May 23 23:07:04 lukav-desktop sshd\[355\]: Failed password for invalid user tz from 157.230.244.147 port 47628 ssh2 May 23 23:15:32 lukav-desktop sshd\[16324\]: Invalid user qvm from 157.230.244.147 May 23 23:15:32 lukav-desktop sshd\[16324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.244.147	2020-05-24 04:47:20
192.0.73.2	attackspambots	From: "Congratulations" - UBE - (EHLO mailspamprotection.com) (212.237.17.126) Aruba S.p.a. – repeat IP - Header mailspamprotection.com = 35.223.122.181 - Spam link softengins.com = repeat IP 212.237.13.213 a) go.burtsma.com = 205.236.17.22 b) www.orbity1.com = 34.107.192.170 c) Effective URL: zuercherallgemeine.com = 198.54.126.145 d) click.trclnk.com = 18.195.123.247, 18.195.128.171 e) secure.gravatar.com = 192.0.73.2 - Spam link i.imgur.com = 151.101.120.193 - Sender domain bestdealsus.club = 80.211.179.118	2020-05-24 04:35:38
220.250.0.252	attack	May 23 22:36:54 lnxded63 sshd[22738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.250.0.252 May 23 22:36:54 lnxded63 sshd[22738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.250.0.252	2020-05-24 05:00:51

Recently Reported IPs

166.251.30.141	113.181.120.54	122.173.41.245	196.219.144.102
182.232.117.134	208.110.64.150	119.76.190.126	192.137.158.21
171.33.248.174	140.206.184.170	82.211.131.102	82.54.80.44
80.64.29.9	80.144.237.28	122.154.251.22	148.245.68.13
39.98.59.149	13.234.11.10	198.50.180.175	106.54.114.143