JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.80.150.183

195.80.150.183 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 100%: ?

100%

ISP	ESTNOC-Global
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206804
Domain Name	estnoc.ee
Country	🇸🇮 Slovenia
City	Ljubljana, Ljubljana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.80.150.183

Whois 195.80.150.183

IP Abuse Reports for 195.80.150.183:

This IP address has been reported a total of 137 times from 96 distinct sources. 195.80.150.183 was first reported on June 10th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-10-26 07:38:42 (1 day ago)	[26/Oct/2026:09:38:41 +0200] -- 195.80.150.183 Ban reason: User-Agent Go-http-client	Bad Web Bot Web App Attack
🇷🇴 iulianh	2026-10-26 07:08:06 (1 day ago)	80,443	Brute-Force SSH
Anonymous	2026-10-26 06:56:10 (1 day ago)	Web probing (3 hits in 24h) on default-vhost,helenehoenjet.nl: sensitive-path scans and/or 404 burst ... show more Web probing (3 hits in 24h) on default-vhost,helenehoenjet.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON. show less	Web App Attack
🇳🇱 Alt255	2026-10-26 06:53:55 (1 day ago)	[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 195.80.150.183 - - [26/Oct/2026:07:53:52 +0100] "GET /.git/config HTTP/1.1" 403 463 "-" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 06:51:35 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 195.80.150.183 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 195.80.150.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 02:51:31.216916 2026] [security2:error] [pid 12741:tid 12741] [client 195.80.150.183:59519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnmueller.org"] [uri "/.git/config"] [unique_id "at74c3Ht2f4i3bDsk56xuwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 sistemacapital	2026-10-26 06:42:07 (1 day ago)	HTTP: probing for sensitive files and common application endpoints.	Web App Attack
🇳🇱 e.fierstra	2026-10-26 06:38:35 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 06:24:11 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 195.80.150.183 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 195.80.150.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 02:24:06.943237 2026] [security2:error] [pid 13824:tid 13824] [client 195.80.150.183:55413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyclingboardgames.net"] [uri "/.git/config"] [unique_id "at7yBvBMGrCxMSYf83JeBQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-10-26 05:58:00 (1 day ago)	195.80.150.183 - - [26/Oct/2026:06:57:56 +0100] "GET /.git/config HTTP/1.1" 301 738 "-" "Go-http-cli ... show more 195.80.150.183 - - [26/Oct/2026:06:57:56 +0100] "GET /.git/config HTTP/1.1" 301 738 "-" "Go-http-client/1.1" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-26 05:50:51 (1 day ago)	GET /.git/config HTTP/1.1 ...	Web App Attack
Anonymous	2026-10-26 05:45:32 (1 day ago)	[ns41.kdns.gr] httpd-config-scan: sites=coris.gr; logs=/var/log/httpd/domains/coris.gr.log; samples= ... show more [ns41.kdns.gr] httpd-config-scan: sites=coris.gr; logs=/var/log/httpd/domains/coris.gr.log; samples=/.git/config \| /.git/config \| fast_lane=true kernel_at=2026-10-26T05:43:14+00:00 show less	Hacking Web App Attack
🇩🇪 netclix.gr	2026-10-26 05:43:26 (1 day ago)	(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 195.80.150.183 (SI/Slovenia/-)	Hacking
🇫🇷 pm33	2026-10-26 05:26:37 (1 day ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇪🇸 masterguru	2026-10-26 05:24:36 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇩🇪 altenglaner	2026-10-26 04:58:47 (1 day ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ... show more Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban. show less	Hacking Web App Attack

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1006::60

🇧🇷 186.239.41.74

🇹🇯 185.121.0.254

🇳🇮 161.0.55.134

🇻🇳 160.250.246.219

🇻🇳 160.22.106.87

🇰🇪 102.0.13.212

🇺🇦 91.203.60.139

🇫🇷 45.95.174.62

🇮🇳 216.10.242.215

🇪🇬 197.134.248.163

🇬🇧 192.248.150.180

🇳🇱 185.136.15.13

🇮🇳 182.237.13.208

🇭🇰 168.76.131.178

🇺🇸 159.65.99.44

🇺🇸 157.230.218.106

🇩🇪 157.230.19.72

🇯🇵 157.7.133.168

🇩🇪 156.236.31.85