JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.80.151.30

195.80.151.30 was found in our database!

This IP was reported 920 times. Confidence of Abuse is 0%: ?

ISP	ESTNOC-Global
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206804
Domain Name	estnoc.ee
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.80.151.30

Whois 195.80.151.30

IP Abuse Reports for 195.80.151.30:

This IP address has been reported a total of 920 times from 242 distinct sources. 195.80.151.30 was first reported on November 22nd 2020, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-06-28 22:49:35 (2 years ago)	Honeypot HIT	Brute-Force
Anonymous	2024-04-22 05:44:50 (2 years ago)	apache-wordpress-login	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-04-20 21:32:04 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.80.151.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 195.80.151.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 20 17:31:59.150176 2024] [security2:error] [pid 15991:tid 46918580668160] [client 195.80.151.30:39830] [client 195.80.151.30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|property-management.company\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "property-management.company"] [uri "/agement.sql"] [unique_id "ZiQ0TxzrX-afxbXqxLd6UgAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2024-04-18 09:00:40 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇨🇦 Julio Covolato	2024-04-16 06:10:01 (2 years ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇺🇸 TPI-Abuse	2024-04-15 14:24:38 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 195.80.151.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 195.80.151.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 15 10:24:32.935856 2024] [security2:error] [pid 8475] [client 195.80.151.30:42532] [client 195.80.151.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jfexpressfr8.com"] [uri "/wp-config.php.bak"] [unique_id "Zh04oG4OSmStdG7fMWvuXgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2024-04-14 07:00:25 (2 years ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇩🇪 ger-stg-sifi1	2024-04-08 21:53:37 (2 years ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2024-04-08 21:39:54 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.80.151.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 195.80.151.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 08 17:39:46.394850 2024] [security2:error] [pid 24900] [client 195.80.151.30:36182] [client 195.80.151.30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cubbylure.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cubbylure.com"] [uri "/2022-e.sql"] [unique_id "ZhRkIn3OBFuGln0SM9rK_AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 ozisp.com.au	2024-04-08 10:26:23 (2 years ago)	PL_ESTNOC-MNT_<33>1712571981 [1:2522065:5486] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traf ... show more PL_ESTNOC-MNT_<33>1712571981 [1:2522065:5486] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 66 [Classification: Misc Attack] [Priority: 2] {TCP} 195.80.151.30:46061 show less	Open Proxy
Anonymous	2024-04-07 00:23:45 (2 years ago)	joshuajohannes.de 195.80.151.30 [07/Apr/2024:02:23:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4073 "- ... show more joshuajohannes.de 195.80.151.30 [07/Apr/2024:02:23:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0" joshuajohannes.de 195.80.151.30 [07/Apr/2024:02:23:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0" show less	Web App Attack
🇺🇸 TPI-Abuse	2024-04-05 10:23:36 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.80.151.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 195.80.151.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 05 06:23:30.035972 2024] [security2:error] [pid 6170:tid 47297358935808] [client 195.80.151.30:37338] [client 195.80.151.30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|eceinal.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "eceinal.com"] [uri "/test.sql"] [unique_id "Zg_RIplVmMKoXtc57oe1QgAAAEg"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 leolemos	2024-04-03 13:33:25 (2 years ago)	195.80.151.30 - - [03/Apr/2024:10:33:14 -0300] "POST /xmlrpc.php HTTP/1.1" 200 5458 "-" "Mozilla/5.0 ... show more 195.80.151.30 - - [03/Apr/2024:10:33:14 -0300] "POST /xmlrpc.php HTTP/1.1" 200 5458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 195.80.151.30 - - [03/Apr/2024:10:33:19 -0300] "POST /xmlrpc.php HTTP/1.1" 200 5458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 195.80.151.30 - - [03/Apr/2024:10:33:22 -0300] "POST /xmlrpc.php HTTP/1.1" 200 5458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 195.80.151.30 - - [03/Apr/2024:10:33:25 -0300] "POST /xmlrpc.php HTTP/1.1" 200 5458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" show less	Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1	2024-04-01 06:14:49 (2 years ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 oncord	2024-03-31 09:01:57 (2 years ago)	Form spam	Web Spam

Showing 1 to 15 of 920 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 175.10.72.238

🇺🇸 147.185.132.174

🇨🇳 139.170.72.54

🇸🇬 2404:6800:4003:c05::12d

🇸🇬 205.188.63.15

🇦🇷 200.225.118.223

🇳🇱 91.92.42.81

🇨🇦 52.139.44.162

🇬🇧 217.154.32.63

🇨🇳 183.197.98.40

🇨🇴 181.189.17.22

🇫🇷 85.217.140.39

🇸🇾 78.155.65.159

🇳🇱 77.239.124.239

🇺🇸 67.216.96.42

🇸🇬 45.82.78.103

🇷🇴 2.57.121.112

🇩🇪 2.26.53.142

🇨🇳 118.145.104.37

🇬🇧 87.236.176.152