This IP address has been reported a total of
40
times from
30 distinct
sources.
183.80.248.120 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 14
reports;
Netherlands
with 6
reports;
United States of America
with 6
reports.
The most common categories in these recent reports were:
Web App Attack
27
times;
Brute-Force
15
times;
Hacking
6
times;
SSH
5
times;
Port Scan
4
times;
Other
6
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show moreFail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
Anonymous
Automated web vulnerability scanning and reconnaissance
[SunOct0405:24:54.0369352026][security2:error][pid3188870:tid3188872][client183.80.248.120:0]ModSecu ...
show more[SunOct0405:24:54.0369352026][security2:error][pid3188870:tid3188872][client183.80.248.120:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"buonviaggio.ch\"][uri\"/xmlrpc.php\"][unique_id\"asHHBhSp5xkcRPlamYT4zAAAAQA\"]
show less
(mod_security) mod_security triggered on hostname [redacted] 183.80.248.120 (VN/Vietnam/-): (CF_ENA ...
show more(mod_security) mod_security triggered on hostname [redacted] 183.80.248.120 (VN/Vietnam/-): (CF_ENABLE)
show less
{"ClientAddr":"183.80.248.120:58171","ClientHost":"183.80.248.120","ClientPort":"58171","ClientUsern ...
show more{"ClientAddr":"183.80.248.120:58171","ClientHost":"183.80.248.120","ClientPort":"58171","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":184961960,"OriginContentSize":418,"OriginDuration":181411546,"OriginStatus":403,"Overhead":3550414,"RequestAddr":"www.cleveradmin.de","RequestContentSize":680,"RequestCount":1350963,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-10-03T10:51:45.361026549+02:00","StartUTC":"2026-10-03T08:51:45.361026549Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-10-03T10:51:45+02:00"}
{"ClientAddr":"183.80.248.120:56192","ClientHost":"183.80.248.120","ClientPort"
...
show less
