Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
34.128.80.13 has been reported 32
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
SSH Brute force: 16 attempts were recorded from 34.128.80.13
2025-12-24T11:08:20+01:00 Invalid user admin from 34.128.80.13 port 39996
2025-12-24T11:08:54+01:00 Invalid user orangepi from 34.128.80.13 port 37072
2025-12-24T11:09:27+01:00 Connection c ...
show moreSSH Brute force: 16 attempts were recorded from 34.128.80.13
2025-12-24T11:08:20+01:00 Invalid user admin from 34.128.80.13 port 39996
2025-12-24T11:08:54+01:00 Invalid user orangepi from 34.128.80.13 port 37072
2025-12-24T11:09:27+01:00 Connection closed by authenticating user root 34.128.80.13 port 59452 [preauth]
2025-12-24T11:09:59+01:00 Connection closed by authenticating user root 34.128.80.13 port 32992 [preauth]
2025-12-24T11:10:33+01:00 Connection closed by authenticating user root 34.128.80.13 port 33608 [preauth]
2025-12-24T11:11:05+01:00 Connection closed by authenticating user root 34.128.80.13 port 53502 [preauth]
2025-12-24T11:11:37+01:00 Connection closed by authenticating user root 34.128.80.13 port 45102 [preauth]
2025-12-24T11:12:10+01:00 Connection closed by authenticating user root 34.128.80.13 port 55340 [preauth]
2025-12-24T11:12:42+01:00 Invalid user test from 34.
show less
(sshd) Failed SSH login from 34.128.80.13 (ID/Indonesia/13.80.128.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Dec 24 04:06:01 16772 sshd[29691]: Invalid user admin from 34.128.80.13 port 5289 ...
show more(sshd) Failed SSH login from 34.128.80.13 (ID/Indonesia/13.80.128.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Dec 24 04:06:01 16772 sshd[29691]: Invalid user admin from 34.128.80.13 port 52896
Dec 24 04:06:03 16772 sshd[29691]: Failed password for invalid user admin from 34.128.80.13 port 52896 ssh2
Dec 24 04:06:53 16772 sshd[29811]: Invalid user orangepi from 34.128.80.13 port 47404
Dec 24 04:06:54 16772 sshd[29811]: Failed password for invalid user orangepi from 34.128.80.13 port 47404 ssh2
Dec 24 04:07:31 16772 sshd[29912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.128.80.13 user=root
show less
2025-12-24T02:58:35.936897-07:00 onion sshd-session[658271]: Invalid user admin from 34.128.80.13 port 56614
2025-12-24T02:59:08.367656-07:00 onion sshd-session[658273]: Invalid user orangepi from 34.128.80.13 port 44256
2025-12-24T03:03:05.312277-07 ...
show more2025-12-24T02:58:35.936897-07:00 onion sshd-session[658271]: Invalid user admin from 34.128.80.13 port 56614
2025-12-24T02:59:08.367656-07:00 onion sshd-session[658273]: Invalid user orangepi from 34.128.80.13 port 44256
2025-12-24T03:03:05.312277-07:00 onion sshd-session[658291]: Invalid user test from 34.128.80.13 port 48440
2025-12-24T03:03:40.349131-07:00 onion sshd-session[658296]: Invalid user user from 34.128.80.13 port 32956
2025-12-24T03:04:49.003861-07:00 onion sshd-session[658305]: Invalid user admin from 34.128.80.13 port 37092
...
show less
Dec 24 10:51:30 mail010 sshd[862456]: Invalid user admin from 34.128.80.13 port 58018
Dec 24 10:52:02 mail010 sshd[862465]: Invalid user orangepi from 34.128.80.13 port 56892
Dec 24 10:55:52 mail010 sshd[862533]: Invalid user test from 34.128.80.13 p ...
show moreDec 24 10:51:30 mail010 sshd[862456]: Invalid user admin from 34.128.80.13 port 58018
Dec 24 10:52:02 mail010 sshd[862465]: Invalid user orangepi from 34.128.80.13 port 56892
Dec 24 10:55:52 mail010 sshd[862533]: Invalid user test from 34.128.80.13 port 50438
Dec 24 10:56:24 mail010 sshd[862541]: Invalid user user from 34.128.80.13 port 40616
...
show less
The IP attempted to exploit CVE-2017-9841 by requesting the `/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php` path, indicating a web application attack.