[Fail2Ban] NginxBadRequests: banned 34.68.97.70 from dlrsp.org

The IP has just been banned!!!


NginxBadRequests Abuse - Sat, 28 Nov 2020 04:53:48

ip:

Country: US

StateProv: CA

OrgAbuseEmail: google-cloud-compliance@google.com

OrgAbusePhone: +1-650-253-0000

Network

ip:

NetName: GOOGL-2

NetRange: 34.64.0.0 - 34.127.255.255

CIDR: 34.64.0.0/10

Comment: *** The IP addresses under this Org-ID are in use by Google Cloud customers ***
Comment:
Comment: Direct all copyright and legal complaints to
Comment: https://support.google.com/legal/go/report
Comment:
Comment: Direct all spam and abuse complaints to
Comment: https://support.google.com/code/go/gce_abuse_report
Comment:
Comment: For fastest response, use the relevant forms above.
Comment:
Comment: Complaints can also be sent to the GC Abuse desk
Comment: (google-cloud-compliance@google.com)
Comment: but may have longer turnaround times.
Comment:
Comment: Complaints sent to any other POC will be ignored.

Owner

Organization: Google LLC (GOOGL-2)

OrgTechName: Google LLC

Contacts

City: Mountain View

Address: 1600 Amphitheatre Parkway

PostalCode: 94043

OrgTechPhone: +1-650-253-0000

OrgAbusePhone: +1-650-253-0000

References

OrgNOCRef: https://rdap.arin.net/registry/entity/GCABU-ARIN

Logs

66.249.66.73 - - [28/Nov/2020:04:58:13 +0000] "GET /ingredienti/dallorto/funghi-e-tuberi/funghi-secchi/ HTTP/1.1" 200 12687 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
66.249.66.85 - - [28/Nov/2020:04:51:02 +0000] "GET /en/blog/2016/06/28/20160723115509-fail2ban-dlrsp-103-207-37-61/ HTTP/1.1" 200 3014 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
17.58.97.185 - - [28/Nov/2020:04:51:49 +0000] "GET /en/blog/2020/05/27/20200527164116-fail2ban-dlrsp-94-23-0-64/ HTTP/1.1" 200 3143 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.1 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "-"
54.36.149.212 - - [28/Nov/2020:04:52:03 +0000] "GET /en/blog/2020/11/27/20201127180110-fail2ban-dlrsp-31-13-127-6/ HTTP/2.0" 404 132 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; News; +http://ahrefs.com/robot/)" "-"
207.46.13.41 - - [28/Nov/2020:04:53:00 +0000] "GET /en/blog/section/fail2ban/?page=1136 HTTP/1.1" 200 13982 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "-"
207.46.13.41 - - [28/Nov/2020:04:53:12 +0000] "GET /en/blog/2020/04/21/20200429215002-fail2ban-dlrsp-116-105-215-232/ HTTP/1.1" 200 2986 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "-"
66.249.66.84 - - [28/Nov/2020:04:54:14 +0000] "GET /en/blog/2016/06/28/20160723115432-fail2ban-dlrsp-163-172-192-9/ HTTP/1.1" 200 3133 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
207.46.13.195 - - [28/Nov/2020:04:54:21 +0000] "GET /it/blog/?page=1171 HTTP/1.1" 200 13745 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "-"
54.36.148.71 - - [28/Nov/2020:04:54:43 +0000] "GET /it/blog/section/fail2ban/?page=144 HTTP/2.0" 200 13838 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "-"
207.46.13.106 - - [28/Nov/2020:04:55:34 +0000] "GET /it/blog/?page=1710 HTTP/1.1" 200 13947 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "-"
157.55.39.73 - - [28/Nov/2020:04:59:06 +0000] "GET /blog/section/fail2ban/?q=60.173.26.187 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "-"
157.55.39.73 - - [28/Nov/2020:04:59:06 +0000] "GET /it/blog/section/fail2ban/?q=60.173.26.187 HTTP/1.1" 200 2403 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "-"
54.36.148.117 - - [28/Nov/2020:04:59:22 +0000] "GET /it/blog/section/fail2ban/?page=431 HTTP/2.0" 200 13911 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "-"
128.199.10.90 - - [28/Nov/2020:04:58:41 +0000] "GET /wp-login.php HTTP/1.1" 404 116 "http://chowchowugo.org/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"
34.68.97.70 - - [28/Nov/2020:04:53:37 +0000] "GET /wp-login.php HTTP/1.1" 302 0 "http://dlrsp.org/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"
34.68.97.70 - - [28/Nov/2020:04:53:38 +0000] "GET /it/wp-login.php HTTP/1.1" 200 9164 "https://dlrsp.org/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"
34.68.97.70 - - [28/Nov/2020:04:53:37 +0000] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"
128.199.10.90 - - [28/Nov/2020:04:58:40 +0000] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"

NMAP

censys.io

GreyNoise.io