80.94.29.40 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Poland

Internet Service Provider: Zachodniopomorski Uniwersytet Technologiczny W Szczecinie Akademickie Centrum Informatyki

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Forbidden directory scan :: 2019/09/23 13:50:50 [error] 1103#1103: *72951 access forbidden by rule, client: 80.94.29.40, server: [censored_4], request: "GET //1/dump.sql HTTP/1.1", host: "[censored_4]", referrer: "http://[censored_4]:80//1/dump.sql"	2019-09-23 18:02:45

Type

Details

Datetime

attackbots

Forbidden directory scan :: 2019/09/23 13:50:50 [error] 1103#1103: *72951 access forbidden by rule, client: 80.94.29.40, server: [censored_4], request: "GET //1/dump.sql HTTP/1.1", host: "[censored_4]", referrer: "http://[censored_4]:80//1/dump.sql"

2019-09-23 18:02:45

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.94.29.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46677
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.94.29.40.			IN	A

;; AUTHORITY SECTION:
.			438	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092300 1800 900 604800 86400

;; Query time: 407 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 23 18:02:41 CST 2019
;; MSG SIZE  rcvd: 115

Host info

40.29.94.80.in-addr.arpa domain name pointer IP-80-94-29-40.internet.lantech.com.pl.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
40.29.94.80.in-addr.arpa	name = IP-80-94-29-40.internet.lantech.com.pl.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.101.112.205	attack	46.101.112.205 - - [06/Jul/2020:23:00:28 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.112.205 - - [06/Jul/2020:23:00:31 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.112.205 - - [06/Jul/2020:23:00:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-07 08:38:46
192.35.168.234	attack	Jul 7 00:25:01 debian-2gb-nbg1-2 kernel: \[16332908.229547\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=192.35.168.234 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=34 ID=33626 PROTO=TCP SPT=26634 DPT=9698 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-07 08:36:17
222.186.175.216	attackbots	Scanned 69 times in the last 24 hours on port 22	2020-07-07 08:10:25
185.220.100.252	attackspam	Failed password for invalid user from 185.220.100.252 port 11892 ssh2	2020-07-07 08:45:43
85.209.0.103	attack	Jul 7 08:22:12 itachi1706steam sshd[86055]: Did not receive identification string from 85.209.0.103 port 56316 Jul 7 08:22:19 itachi1706steam sshd[86057]: Connection reset by authenticating user root 85.209.0.103 port 13282 [preauth] ...	2020-07-07 08:32:24
209.141.41.4	attackbotsspam	377. On Jul 6 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 209.141.41.4.	2020-07-07 08:14:19
45.67.14.20	attackspam	TCP (SYN) 45.67.14.20:60205 -> port 22, len 44	2020-07-07 08:34:48
218.92.0.212	attack	2020-07-07T00:11:39.080713dmca.cloudsearch.cf sshd[26617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root 2020-07-07T00:11:41.476413dmca.cloudsearch.cf sshd[26617]: Failed password for root from 218.92.0.212 port 34038 ssh2 2020-07-07T00:11:44.858754dmca.cloudsearch.cf sshd[26617]: Failed password for root from 218.92.0.212 port 34038 ssh2 2020-07-07T00:11:39.080713dmca.cloudsearch.cf sshd[26617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root 2020-07-07T00:11:41.476413dmca.cloudsearch.cf sshd[26617]: Failed password for root from 218.92.0.212 port 34038 ssh2 2020-07-07T00:11:44.858754dmca.cloudsearch.cf sshd[26617]: Failed password for root from 218.92.0.212 port 34038 ssh2 2020-07-07T00:11:39.080713dmca.cloudsearch.cf sshd[26617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root 2020-07-07T00:1 ...	2020-07-07 08:12:41
222.186.42.137	attack	Jul 7 02:25:20 * sshd[337]: Failed password for root from 222.186.42.137 port 35625 ssh2	2020-07-07 08:27:15
222.186.31.166	attackbots	Too many connections or unauthorized access detected from Arctic banned ip	2020-07-07 08:27:39
218.92.0.219	attackspambots	Jul 7 02:22:12 dev0-dcde-rnet sshd[25550]: Failed password for root from 218.92.0.219 port 27597 ssh2 Jul 7 02:22:22 dev0-dcde-rnet sshd[25552]: Failed password for root from 218.92.0.219 port 60884 ssh2	2020-07-07 08:29:03
192.236.195.21	attackbotsspam	Failed password for invalid user from 192.236.195.21 port 34244 ssh2	2020-07-07 08:15:10
51.178.51.152	attack	Tried sshing with brute force.	2020-07-07 08:34:27
61.177.172.61	attackspambots	Jul 6 20:12:47 NPSTNNYC01T sshd[21877]: Failed password for root from 61.177.172.61 port 2240 ssh2 Jul 6 20:12:59 NPSTNNYC01T sshd[21877]: error: maximum authentication attempts exceeded for root from 61.177.172.61 port 2240 ssh2 [preauth] Jul 6 20:13:04 NPSTNNYC01T sshd[21889]: Failed password for root from 61.177.172.61 port 32210 ssh2 ...	2020-07-07 08:21:52
116.110.123.228	attackbots	59. On Jul 6 2020 experienced a Brute Force SSH login attempt -> 4 unique times by 116.110.123.228.	2020-07-07 08:17:42

Recently Reported IPs

254.131.159.204	240.96.245.129	82.64.144.222	74.99.172.32
221.227.0.125	213.174.130.44	89.39.107.204	150.95.199.179
40.77.221.58	34.76.233.68	234.21.193.238	181.40.219.110
156.28.170.195	73.61.69.220	158.176.156.125	145.107.9.33
30.98.38.194	185.222.211.62	153.198.80.190	164.217.105.180