🇨🇭
Origon
2026-11-05 10:27:00
UTC ·
(6 days ago)
NOQUEUE - IP: 34.80.158.175 - Nov 5 11:27:00 plesk postfix/smtpd[3656498]: NOQUEUE: reject: RCPT from 175.158.80.34.bc.googleusercontent.com[34.80.158.175]: 554 5.7.1 Service unavailable; Client host [34.80.158.175] blocked using dnsbl-2.uceprotect. ...
show more
NOQUEUE - IP: 34.80.158.175 - Nov 5 11:27:00 plesk postfix/smtpd[3656498]: NOQUEUE: reject: RCPT from 175.158.80.34.bc.googleusercontent.com[34.80.158.175]: 554 5.7.1 Service unavailable; Client host [34.80.158.175] blocked using dnsbl-2.uceprotect.net; Net 34.80.0.0/14 is UCEPROTECT-Level2 listed because 264 impacts are seen from GOOGLE-CLOUD-PLATFORM, US/AS396982 there. See: https://[site]/rblcheck.php?ipr=34.80.158.175 / Net 34.80.0.0/12 is UCEPROTECT-Level2 listed because 559 impacts are seen from GOOGLE-CLOUD-PLATFORM, US/AS396982 there. See: https://[site]/rblcheck.php?ipr=34.80.158.175 / Net 34.64.0.0/11 is UCEPROTECT-Level2 listed because 1260 impacts are seen from GOOGLE-CLOUD-PLATFORM, US/AS396982 there. See: htt; from=<[email protected] > to=<[customer]> proto=SMTP helo=<c
show less
Email Spam
🇳🇱
Cloud86 B.V.
2026-11-05 10:23:09
UTC ·
(6 days ago)
categories: Email Spam
Email Spam
🇩🇰
powerhostingdk
2026-11-05 10:08:52
UTC ·
(6 days ago)
[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.
Email Spam
Brute-Force
🇧🇷
Peregrine
2026-09-06 09:29:53
UTC ·
(2 months ago)
Fail2Ban Jail s2: tomcat-404 | Evidence: - 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /var/www/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /htdocs/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/ ...
show more
Fail2Ban Jail s2: tomcat-404 | Evidence: - 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /var/www/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /htdocs/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /public/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /api/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /html/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /site/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /wordpress/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /www/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /backend/.git/config HTTP/1.1" 404 414
- 34.80.158.175 - - [06/Sep/2026:06:29:46 -0300] "GET /src/.git/config HTTP/1.1" 404 414
show less
Bad Web Bot
Web App Attack
🇩🇪
MBombeck
2026-09-06 05:32:14
UTC ·
(2 months ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
🇩🇪
FD-IX
2026-09-06 04:36:32
UTC ·
(2 months ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 04:27:15
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.80.158.175 (175.158.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 00:27:07.960164 2026] [security2:error] [pid 23121:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.158.175 (175.158.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 00:27:07.960164 2026] [security2:error] [pid 23121:tid 23121] [client 34.80.158.175:36836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.richardpetersbooks.com"] [uri "/htdocs/.git/config"] [unique_id "apzrm5me0vMQJRsMXbNotwAAAF8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
elcruzado.es
2026-09-06 02:00:50
UTC ·
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted] 34.80.158.175 (TW/Taiwan/175.158.80.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
LRob
2026-09-05 22:14:32
UTC ·
(2 months ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /src/.git/config (+11 more) | 2026-09-05 22:14 UTC
Hacking
Web App Attack
2026-09-05 22:13:50
UTC ·
(2 months ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇬🇧
consul.to
2026-09-05 22:02:17
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 21:25:07
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.80.158.175 (175.158.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 17:24:59.885543 2026] [security2:error] [pid 31648:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.158.175 (175.158.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 17:24:59.885543 2026] [security2:error] [pid 31648:tid 31648] [client 34.80.158.175:44062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jeffr.com"] [uri "/.git/config"] [unique_id "apyIq_ECu5wV4acuYcdXCwAAAF0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-05 02:36:13
UTC ·
(2 months ago)
262 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇳🇱
e.fierstra
2026-09-04 23:01:46
UTC ·
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 22:56:50
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.80.158.175 (175.158.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 18:56:44.313927 2026] [security2:error] [pid 5950:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.158.175 (175.158.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 18:56:44.313927 2026] [security2:error] [pid 5950:tid 5950] [client 34.80.158.175:50962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rollinchassis.com"] [uri "/public/.git/config"] [unique_id "aptMrJ05NYtlBd5EuZG4XQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
