This IP address has been reported a total of
21
times from
20 distinct
sources.
34.80.6.229 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
United Kingdom of Great Britain and Northern Ireland
with 4
reports;
Canada
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
18
times;
Brute-Force
7
times;
Hacking
5
times;
Bad Web Bot
5
times;
DDoS Attack
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: Clou ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: Cloud secrets probing, Directory traversal
show less
{"level":"info","ts":1792625290.5532413,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792625290.5532413,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.80.6.229","remote_port":"54690","client_ip":"34.80.6.229","proto":"HTTP/2.0","method":"GET","host":"monitor.dva.digital","uri":"/","headers":{"Sec-Ch-Ua-Mobile":["?0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Brave\";v=\"152\""],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-User":["?1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Ch-Ua-Platform":["\"Windows\""],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Sec-Fetch-Dest":["document"],"Priority":["u=0, i"],"Upgrade-Insecure-Requests":["1"],"Accept":["text/html,a
...
show less
DDoS Attack
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: Clou ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: Cloud secrets probing, Directory traversal
show less
(mod_security) mod_security (id:243320) triggered by 34.80.6.229 (229.6.80.34.bc.googleusercontent.c ...
show more(mod_security) mod_security (id:243320) triggered by 34.80.6.229 (229.6.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:29:27.931210 2026] [security2:error] [pid 14322:tid 14322] [client 34.80.6.229:0] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||tellusafe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tellusafe.com"] [uri "/.profile"] [unique_id "atj2d4NSZ6fqsVbHWEMvVQAAACk"]
show less
Wordlist path sweep | method: GET | path: /lib/terminal-xhr.php, /manifest.json, /static/manifest.js ...
show moreWordlist path sweep | method: GET | path: /lib/terminal-xhr.php, /manifest.json, /static/manifest.json (+3 more) | ua: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36
show less
Port Scan
Web App Attack
Anonymous
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
Anonymous
Web application attack: http path traversal probing; Web application attack: http sensitive files; P ...
show moreWeb application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
show less
