JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.211.10.2

195.211.10.2 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 22%: ?

22%

ISP	Telesim sp. z o.o.
Usage Type	Fixed Line ISP
ASN	AS49761
Hostname(s)	etth-195-211-10-2.telesim.com.pl
Domain Name	telesim.com.pl
Country	🇵🇱 Poland
City	Bedzin, Silesia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.211.10.2

Whois 195.211.10.2

IP Abuse Reports for 195.211.10.2:

This IP address has been reported a total of 13 times from 11 distinct sources. 195.211.10.2 was first reported on May 19th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-16 17:01:19 (1 day ago)	[Wed Jun 17 00:01:16.509923 2026] [security2:error] [pid 1012326:tid 139771207124672] [client 195.21 ... show more [Wed Jun 17 00:01:16.509923 2026] [security2:error] [pid 1012326:tid 139771207124672] [client 195.211.10.2:48746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan"] [unique_id "ajGBXEDEUEPujFJ1jTxCJQABlBU"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1012348] [AUof5OHkii4] [ajGBXEDEUEPujFJ1jTxCJQABlBU] keep_alive=[1] [2026-06-17 00:01:16.509927] [R: ... show less	Email Spam Hacking
Anonymous	2026-06-15 23:00:58 (1 day ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/9427/form_key/rme24SHxwp4Eypz1/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-06-08 08:54:38 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security	DDoS Attack Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-06 01:56:34 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 195.211.10.2 (etth-195-211-10-2.telesim.com.pl) ... show more (mod_security) mod_security (id:210492) triggered by 195.211.10.2 (etth-195-211-10-2.telesim.com.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 20:56:27.775264 2026] [security2:error] [pid 9080:tid 9080] [client 195.211.10.2:41120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.customdesignsbybjp.com"] [uri "/.git/HEAD"] [unique_id "aao0S-MnGDGC4ImIm_gnHgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 Mcshield.org	2025-12-01 02:15:45 (6 months ago)	UDP flood/amplification attempt srcport 47245 dstport 11211 length 945	Fraud Orders Bad Web Bot
🇨🇦 wil.com	2025-08-02 04:56:35 (10 months ago)	GlobalProtect login attempts with user waggonerj.	VPN IP Brute-Force
Anonymous	2025-08-01 13:03:05 (10 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇪🇸 Global Cyber Police	2025-07-28 09:13:59 (10 months ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack
🇪🇸 Global Cyber Police	2025-07-27 14:39:14 (10 months ago)	Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).	Port Scan Brute-Force Web App Attack
Anonymous	2025-07-27 05:18:03 (10 months ago)	195.211.10.2 (PL/Poland/Silesia/Wojkowice/etth-195-211-10-2.telesim.com.pl/[redacted]	Brute-Force
🇺🇸 ipblock.com	2025-07-15 02:54:00 (11 months ago)	IPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (Macintosh; Intel Ma ... show more IPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/89.0.4389.130 Safari/537.36 show less	Bad Web Bot
🇺🇸 ipblock.com	2025-06-22 18:53:00 (11 months ago)	IPBlock protected site ID [4055-d][s=08]. Major crawler impostor. Mozilla/5.0 (Macintosh; Intel Ma ... show more IPBlock protected site ID [4055-d][s=08]. Major crawler impostor. Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/88.0.4324.175 Safari/537.36 show less	Bad Web Bot
🇵🇱 sefinek.net	2025-05-19 20:03:30 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.83.90

🇮🇳 152.59.33.197

🇺🇸 107.150.105.153

🇮🇩 103.166.10.244

🇸🇦 50.60.15.225

🇮🇳 49.36.204.175

🇳🇱 45.148.10.152

🇳🇱 45.148.10.141

🇺🇸 18.234.138.250

🇨🇳 114.138.100.120

🇻🇳 103.149.252.11

🇮🇳 68.233.116.124

🇮🇪 65.52.75.227

🇲🇺 41.136.22.205

🇩🇿 41.101.56.94

🇵🇰 39.34.153.133

🇫🇷 2001:41d0:33d:9200::408

🇨🇳 218.95.124.232

🇬🇧 193.163.125.236

🇬🇧 193.163.125.83