JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.114.7.6

195.114.7.6 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 21%: ?

21%

ISP	Artem Zubkov
Usage Type	Fixed Line ISP
ASN	AS41161
Domain Name	kct.me
Country	🇺🇦 Ukraine
City	Simferopol, Crimea

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.114.7.6

Whois 195.114.7.6

IP Abuse Reports for 195.114.7.6:

This IP address has been reported a total of 39 times from 15 distinct sources. 195.114.7.6 was first reported on April 14th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-06-14 15:23:10 (1 week ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 COMPLEX	2026-05-08 15:49:19 (1 month ago)	Triggered Cloudflare WAF (l7ddos) from UA. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from UA. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0 show less	DDoS Attack Bad Web Bot
🇺🇸 cheatmaster.store	2026-05-08 11:34:51 (1 month ago)	Proxy parsed from 195.114.7.6:1080	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-05-08 08:00:32 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 195.114.7.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210831) triggered by 195.114.7.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 04:00:16.870673 2026] [security2:error] [pid 15457:tid 15457] [client 195.114.7.6:42024] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/"] [unique_id "af2YEFqdz02qpD1xmdXsiQAAAAQ"], referer: http://backstore.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 interconnect.cz	2026-05-05 15:01:34 (1 month ago)	[05/May/2026 17:01:33] IP address 195.114.7.6 found in DNS blacklist SpamCop, mail from <warizxnzej@ ... show more [05/May/2026 17:01:33] IP address 195.114.7.6 found in DNS blacklist SpamCop, mail from <[email protected]> to <[email protected]> [05/May/2026 17:01:33] IP address 195.114.7.6 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [05/May/2026 17:01:34] IP address 195.114.7.6 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> ... show less	Brute-Force Email Spam
🇸🇪 KIDOS	2026-04-10 22:45:44 (2 months ago)	malicious activity	Web App Attack
🇪🇸 10dencehispahard SL	2025-08-19 15:27:41 (10 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
🇸🇬 Vano Ganzzz	2025-08-17 06:18:39 (10 months ago)	Triggered Cloudflare WAF (ratelimit) from GE. Action taken: BLOCK ASN: 41161 (REALWEB-AS) Protocol: ... show more Triggered Cloudflare WAF (ratelimit) from GE. Action taken: BLOCK ASN: 41161 (REALWEB-AS) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-08-17T06:18:39Z Ray ID: 97070e2cdd942c3b UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-08-13 18:16:53 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇬🇧 Silly Development	2025-08-10 00:59:02 (10 months ago)	Malicious activity detected from 41161 REALWEB-AS towards host sillydev.co.uk (GET HTTP/2) @ 2025-08 ... show more Malicious activity detected from 41161 REALWEB-AS towards host sillydev.co.uk (GET HTTP/2) @ 2025-08-10T00:59:02Z (3 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 SuperEvilLuke	2025-08-05 21:47:56 (10 months ago)	2025-08-05T19:03:06Z,"Malicious activity detected from 41161 REALWEB-AS towards host panel.embotic.x ... show more 2025-08-05T19:03:06Z,"Malicious activity detected from 41161 REALWEB-AS towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:03:06Z (3 occurrences) show less	DDoS Attack
🇬🇧 SuperEvilLuke	2025-08-05 19:06:09 (10 months ago)	Malicious activity detected from 41161 REALWEB-AS towards host dash.embotic.xyz (GET HTTP/2) @ 2025- ... show more Malicious activity detected from 41161 REALWEB-AS towards host dash.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:06:09Z (3 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 SuperEvilLuke	2025-08-05 19:06:09 (10 months ago)	Malicious activity detected from 41161 REALWEB-AS towards host dash.embotic.xyz (GET HTTP/2) @ 2025- ... show more Malicious activity detected from 41161 REALWEB-AS towards host dash.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:06:09Z (3 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 SuperEvilLuke	2025-08-05 19:06:09 (10 months ago)	Malicious activity detected from 41161 REALWEB-AS towards host dash.embotic.xyz (GET HTTP/2) @ 2025- ... show more Malicious activity detected from 41161 REALWEB-AS towards host dash.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:06:09Z (3 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 SuperEvilLuke	2025-08-05 19:06:09 (10 months ago)	Malicious activity detected from 41161 REALWEB-AS towards host dash.embotic.xyz (GET HTTP/2) @ 2025- ... show more Malicious activity detected from 41161 REALWEB-AS towards host dash.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:06:09Z (3 occurrences) show less	DDoS Attack Exploited Host

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 103.61.123.132

🇨🇴 181.50.102.37

🇰🇷 114.200.210.83

🇱🇹 62.60.130.148

🇳🇱 45.148.10.141

🇮🇷 5.232.215.35

🇫🇮 193.47.60.186

🇧🇷 179.235.117.95

🇧🇷 167.249.151.204

🇺🇸 54.156.55.147

🇩🇪 31.76.244.102

🇬🇧 2a06:4882:3000::33

🇹🇷 185.139.5.123

🇮🇳 165.232.186.76

🇷🇸 109.72.48.228

🇩🇪 91.92.240.64

🇩🇪 87.106.29.151

🇩🇪 47.245.143.74

🇺🇸 45.79.109.4

🇸🇬 43.156.162.193