JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.80.150.184

195.80.150.184 was found in our database!

This IP was reported 118 times. Confidence of Abuse is 100%: ?

100%

ISP	ESTNOC-Global
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206804
Domain Name	estnoc.ee
Country	🇸🇮 Slovenia
City	Ljubljana, Ljubljana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.80.150.184

Whois 195.80.150.184

IP Abuse Reports for 195.80.150.184:

This IP address has been reported a total of 118 times from 78 distinct sources. 195.80.150.184 was first reported on August 4th 2022, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-26 09:00:53 (23 hours ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇺🇸 wbsouza	2026-08-26 03:31:47 (1 day ago)	CrowdSec: infra/bad-path-probe — automated firewall drops on self-hosted IDS sensor	Hacking
🇬🇧 AvonleaConsulting	2026-08-25 17:20:12 (1 day ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-08-25 13:20:18 (1 day ago)	195.80.150.184 - - [25/Aug/2026:15:20:17 +0200] "GET /.git/config HTTP/1.1" 302 459 "-" "Go-http-cli ... show more 195.80.150.184 - - [25/Aug/2026:15:20:17 +0200] "GET /.git/config HTTP/1.1" 302 459 "-" "Go-http-client/1.1" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 13:11:53 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 195.80.150.184 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 195.80.150.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 09:11:44.822841 2026] [security2:error] [pid 3975:tid 3975] [client 195.80.150.184:39407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hygeiamedical.icu"] [uri "/.git/config"] [unique_id "ao2UkHMtJzXOsW6JlttWiAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-25 12:57:46 (1 day ago)	GET /.git/config HTTP/1.1 ...	Web App Attack
🇨🇭 YF	2026-08-25 12:30:43 (1 day ago)	Git config exposure probe	Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 12:18:07 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 195.80.150.184 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 195.80.150.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:17:58.211818 2026] [security2:error] [pid 3291:tid 3291] [client 195.80.150.184:42265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lightningbug.farm"] [uri "/.git/config"] [unique_id "ao2H9mLwgRKaf19ctC0RhQAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 MarkGGN	2026-08-25 11:53:21 (1 day ago)	Web attack. 195.80.150.184 - - [25/Aug/2026:13:53:20 +0200] "GET /.git/config HTTP/1.1" 403 146 "htt ... show more Web attack. 195.80.150.184 - - [25/Aug/2026:13:53:20 +0200] "GET /.git/config HTTP/1.1" 403 146 "http://*/.git/config" "Go-http-client/1.1" 195.80.150.184 - - [25/Aug/2026:13:53:21 +0200] "GET /.git/config HTTP/1.1" 403 146 "-" "Go-http-client/1.1" show less	Web App Attack
🇩🇪 raph	2026-08-25 11:41:16 (1 day ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇩🇪 Admins@FBN	2026-08-25 11:15:33 (1 day ago)	FW-PortScan: Traffic Blocked srcport=61185 dstport=80	Port Scan
🇩🇪 london2038.com	2026-08-25 10:49:08 (1 day ago)	Probing for exploits 195.80.150.184 - - [25/Aug/2026:12:49:04 +0200] "GET /.git/config HTTP/1.1" 422 ... show more Probing for exploits 195.80.150.184 - - [25/Aug/2026:12:49:04 +0200] "GET /.git/config HTTP/1.1" 422 0 "-" "Go-http-client/1.1" 195.80.150.184 - - [25/Aug/2026:12:49:04 +0200] "GET /.git/config HTTP/1.1" 422 0 "-" "Go-http-client/1.1" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 10:35:26 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 195.80.150.184 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 195.80.150.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 06:35:21.642011 2026] [security2:error] [pid 19811:tid 19811] [client 195.80.150.184:32333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whodatnation.com"] [uri "/.git/config"] [unique_id "ao1v6Ury9e2vJcHyVaTQtwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 10:09:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 195.80.150.184 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 195.80.150.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 06:09:29.518982 2026] [security2:error] [pid 22120:tid 22120] [client 195.80.150.184:52759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tedmccachren.com"] [uri "/.git/config"] [unique_id "ao1p2Z_QEtNmdHAwY5sLogAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 09:50:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 195.80.150.184 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 195.80.150.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:50:38.357018 2026] [security2:error] [pid 28735:tid 28735] [client 195.80.150.184:41621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sheargrafix.com"] [uri "/.git/config"] [unique_id "ao1lbp3ITOmbBLjS0y_2ywAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.113

🇩🇪 196.251.121.123

🇺🇸 195.184.76.133

🇬🇧 193.32.209.240

🇨🇳 180.153.236.87

🇫🇷 91.231.89.204

🇨🇦 85.217.149.43

🇨🇦 85.217.149.10

🇦🇲 46.162.203.97

🇺🇸 20.65.195.59

🇨🇦 20.48.160.90

🇺🇸 195.184.76.110

🇦🇷 181.81.117.227

🇦🇺 168.144.169.169

🇺🇸 162.216.149.194

🇺🇸 162.216.149.180

🇩🇿 105.111.235.143

🇵🇹 94.61.235.86

🇺🇸 66.132.172.236

🇺🇸 66.94.122.104