JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

195.80.150.101

Recent Activity

Abuse confidence score ?

71% Elevated

15 reports

14 reporters · latest 5 hours ago

ISP	ESTNOC-Global
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206804
Domain Name	estnoc.ee
Country	🇸🇮 Slovenia
City	Ljubljana, Ljubljana

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 195.80.150.101

Export CSV

This IP address has been reported a total of 15 times from 14 distinct sources. 195.80.150.101 was first reported on June 24th 2026, and the most recent report was 5 hours ago. In the last 60 days, the top reporter locations were: Switzerland with 3 reports; Germany with 3 reports; Netherlands with 3 reports. The most common categories in these recent reports were: Web App Attack 6 times; Bad Web Bot 4 times; Brute-Force 3 times; Port Scan 2 times; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-04 15:58:59 (5 hours ago)	[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 195 ... show more [ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 195.80.150.101 - - \[04/Oct/2026:17:58:54 +0200\] "GET / HTTP/1.1" 403 223 "http://qargo.de/wp-content/plugins/buddypress/alfa.php" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-10-04 15:36:48 (5 hours ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 195.80.150.101 (SI/Slovenia/-): 3 in the last ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 195.80.150.101 (SI/Slovenia/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 195.80.150.101 - - [04/Oct/2026:17:36:47 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/2.0" 404 31582 "https://papertek.it/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php" "Go-http-client/2.0" "-" host=www.papertek.it 2026/10/04 17:36:43 [error] 3390902#3390902: 537953 access forbidden by rule, client: 195.80.150.101, server: papertek.it, request: "GET /wp-includes/cookie.php HTTP/1.1", host: "papertek.it" 2026/10/04 17:36:45 [error] 3390902#3390902: *537953 access forbidden by rule, client: 195.80.150.101, server: papertek.it, request: "GET /wp-includes/woocommerce-call.php HTTP/1.1", host: "papertek.it" show less	Port Scan
🇨🇭 zynex	2026-10-04 13:24:48 (7 hours ago)	URL Probing: /wp-content/themes/fukasawa/inc/classes/403.php	Web App Attack
🇩🇪 maxpower	2026-10-04 12:41:58 (8 hours ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 195.80.150.101 (SI/Slovenia/-): 3 in the last ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 195.80.150.101 (SI/Slovenia/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 195.80.150.101 - - [04/Oct/2026:14:41:56 +0200] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 403 146 "-" "Go-http-client/1.1" "-" host=archabi.it 2026/10/04 14:41:54 [error] 3251823#3251823: 507710 access forbidden by rule, client: 195.80.150.101, server: archabi.it, request: "GET /wp-includes/cookie.php HTTP/1.1", host: "archabi.it" 2026/10/04 14:41:56 [error] 3251823#3251823: *507710 access forbidden by rule, client: 195.80.150.101, server: archabi.it, request: "GET /wp-includes/woocommerce-call.php HTTP/1.1", host: "archabi.it" show less	Port Scan
🇩🇪 LRob	2026-10-04 12:40:15 (8 hours ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/plugins/neoncore-the ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php \| ua: Go-http-client/1.1 show less	Bad Web Bot
🇳🇱 BlueWire Hosting	2026-10-04 12:25:41 (8 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇨🇭 backslash	2026-10-04 12:12:00 (8 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-10-04 10:54:22 (10 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇨🇭 Origon	2026-10-04 10:48:16 (10 hours ago)	http-wordpress-scan - IP: 195.80.150.101 - time="2026-10-04T12:48:16+02:00" level=info msg="(555f66 ... show more http-wordpress-scan - IP: 195.80.150.101 - time="2026-10-04T12:48:16+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 195.80.150.101 (SI/206804) : 4h ban on Ip 195.80.150.101" module=db show less	Web App Attack
🇬🇧 consul.to	2026-10-04 10:43:02 (10 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 VHosting	2026-10-04 10:40:03 (10 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 Peter Racine	2026-09-28 17:42:00 (6 days ago)	Credential stuffing - exchange accounts	Brute-Force
🇨🇴 JhonDavidModel	2026-09-28 14:44:00 (6 days ago)	Password Spray Attack	Brute-Force
🇧🇪 cmbplf	2026-06-24 23:39:04 (3 months ago)	321 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇫🇷 ELYAZ	2026-06-24 21:40:44 (3 months ago)	(y3) Failed access -byebye- from 195.80.150.101 (SI/Slovenia/-): (CF_ENABLE)	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 209.97.178.203

🇧🇪 207.175.194.102

🇺🇸 201.79.49.19

🇩🇪 193.124.20.249

🇺🇸 157.245.236.233

🇭🇰 152.32.189.59

🇵🇰 139.135.45.104

🇺🇸 107.170.27.52

🇧🇪 85.234.213.145

🇰🇬 85.113.1.243

🇱🇹 62.60.130.227

🇧🇷 45.226.218.242

🇺🇸 43.159.149.56

🇺🇸 20.168.122.122

🇺🇸 20.98.164.243

🇵🇭 222.127.12.19

🇩🇪 213.209.159.228

🇿🇼 197.221.232.44

🇪🇨 190.110.206.234

🇫🇷 185.217.126.52