AbuseIPDB » 197.14.246.95
197.14.246.95
This IP was reported 5 times. Confidence of
Abuse
is 36% : ?
ISP
ATI - Agence Tunisienne Internet
Usage Type
Fixed Line ISP
ASN
AS2609
Domain Name
ati.tn
Country
🇹🇳
Tunisia
City
El Ain, Sfax Governorate
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 197.14.246.95 :
This IP address has been reported a total of
5
times from
5 distinct
sources.
197.14.246.95 was first reported on
July 16th 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-17 04:14:51
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 197.14.246.95 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 197.14.246.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:14:47.657449 2026] [security2:error] [pid 18155:tid 18155] [client 197.14.246.95:54743] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||chezlubacov.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chezlubacov.org"] [uri "/wp-content/uploads/wp-clone/wpclone_backup/database.sql"] [unique_id "almsN4FlN4Mr8ItIePso_wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-17 03:41:50
(2 days ago)
197.14.246.95 - - [17/Jul/2026:06:41:49 +0300] "GET /cgi-bin/cgiServer.exx?download=/etc/passwd HTTP ...
show more
197.14.246.95 - - [17/Jul/2026:06:41:49 +0300] "GET /cgi-bin/cgiServer.exx?download=/etc/passwd HTTP/1.1" 404 3273 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
197.14.246.95 - - [17/Jul/2026:06:41:50 +0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 729 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.10586"
...
show less
Web App Attack
🇳🇱
melroy89
2026-07-17 03:18:52
(2 days ago)
197.14.246.95 - - [17/Jul/2026:05:18:36 +0200] "POST /c/router HTTP/1.1" 404 189 "-" "Mozilla/5.0 ( ...
show more
197.14.246.95 - - [17/Jul/2026:05:18:36 +0200] "POST /c/router HTTP/1.1" 404 189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" "blog.melroy.org" 0.000
197.14.246.95 - - [17/Jul/2026:05:18:36 +0200] "OPTIONS /wp-json/omapp/v1/support HTTP/1.1" 404 189 "https://wp.app.optinmonster.test" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" "blog.melroy.org" 0.000
197.14.246.95 - admin [17/Jul/2026:05:18:36 +0200] "GET /cgi-bin/cgiServer.exx?download=/etc/passwd HTTP/1.1" 404 207 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "blog.melroy.org" 0.000
197.14.246.95 - - [17/Jul/2026:05:18:36 +0200] "GET /api/v1/users HTTP/1.1" 404 189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" "blog.melroy.org" 0.000
197.14.246.95 - - [17/Jul/2026:05:18:36
...
show less
Web App Attack
🇷🇺
DZBOT
2026-07-16 21:00:54
(3 days ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
dynamix
2026-07-16 20:53:18
(3 days ago)
Multiple WAF Violations
Web App Attack
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: