154.59.56.72

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
25% Elevated
15 reports
7 reporters · latest 6 days ago
ISP
Cogent Communications, LLC
Usage Type
Fixed Line ISP
ASN
AS264778
Domain Name
cogentco.com
Country
🇻🇪 Venezuela (Bolivarian Republic of)
City
Caracas, Distrito Federal
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 7 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇺🇸 United States of America 2 🇨🇭 Switzerland 1
Most common categories Bad Web Bot 5 Exploited Host 2 Hacking 2 Web App Attack 2 DDoS Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 PTScreens
Rotating-proxy exit used by a headless browser crawler on an image host: 1 request on 2026-11-03, part of a ~1M request/day scrape spread over ~57k IPs.
Bad Web Bot
🇨🇭 ALPHANET
Botnet or web spider not respecting robots.txt
DDoS Attack Exploited Host
🇺🇸 island-freaks.com
Attack Type: WordPress Exploit Bot attempt on /photo/113997/ | DNS 154.59.56.72 | Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Port Scan Hacking Bad Web Bot Exploited Host Web App Attack
🇩🇪 LRob
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇩🇪 LRob
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-16 17:17 UTC
Bad Web Bot
🇩🇪 LRob
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /xmlrpc.php | ua: PHP/6.3.18 | 2026-09-15 00:45 UTC
Hacking Web App Attack
🇩🇪 LRob
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-08 23:06 UTC
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
Exploited Host Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇴 181.205.51.99
🇮🇳 103.207.9.246
🇺🇸 100.29.192.90
🇺🇸 70.167.235.83
🇸🇬 47.79.201.192
🇮🇩 36.64.33.82
🇻🇳 36.50.134.129
🇺🇸 216.73.216.14
🇷🇺 178.178.222.47
🇫🇮 147.185.133.198
🇮🇳 122.183.33.204
🇺🇸 122.8.46.115
🇨🇳 117.143.168.17
🇰🇷 112.161.75.207
🇺🇸 109.105.209.106
🇫🇷 85.204.70.104
🇳🇱 45.148.10.152
🇺🇸 40.77.167.62
🇨🇳 36.213.0.140
🇮🇩 36.37.73.242
feedback