AbuseIPDB » 195.7.11.5
195.7.11.5
This IP was reported 8 times. Confidence of
Abuse
is 4% : ?
ISP
IQ NOORALBIDAYA
Usage Type
Fixed Line ISP
ASN
AS208324
Domain Name
nbtele.com
Country
🇮🇶
Iraq
City
Kirkuk, Kirkuk
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 195.7.11.5 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
195.7.11.5 was first reported on
August 4th 2025 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-21 13:54:42
(1 day ago)
(mod_security) mod_security (id:217210) triggered by 195.7.11.5 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:217210) triggered by 195.7.11.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 09:54:35.676247 2026] [security2:error] [pid 12722:tid 12722] [client 195.7.11.5:3546] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||heckenbach.org|F|4"] [data "GET http://heckenbach.org HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "heckenbach.org"] [uri "/"] [unique_id "ajftG2gFP2KwbrVks7zVDAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-04-15 12:34:17
(2 months ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
🇦🇺
MAGIC
2026-01-28 02:04:27
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2025-12-10 21:56:46
(6 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
show less
Bad Web Bot
Exploited Host
🇺🇸
octageeks.com
2025-12-04 05:08:09
(6 months ago)
Wordpress malicious attack:[octa404]
Web App Attack
🇩🇪
SMARTNET
2025-11-30 18:38:00
(6 months ago)
Aisuru(Mirai variant) DDoS
DDoS Attack
2025-11-21 12:28:13
(7 months ago)
scanning http requests from known botnet
Web App Attack
🇳🇱
exxos
2025-08-04 15:10:01
(10 months ago)
HTTP1.x attacks
DDoS Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: