JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.96.14.101

172.96.14.101 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 4%: ?

ISP	Heymman Servers Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS64236
Hostname(s)	gxfdwj.com
Domain Name	heymman.com
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.96.14.101

Whois 172.96.14.101

IP Abuse Reports for 172.96.14.101:

This IP address has been reported a total of 12 times from 5 distinct sources. 172.96.14.101 was first reported on October 26th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-10-21 00:34:33 (2 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.baidu.com:443 show less	Open Proxy Port Scan
🇨🇳 ThreatBook.io	2025-06-30 00:22:42 (1 year ago)	2025-06-29 00:02:54 //connectivitycheck.gstatic.com:443 2025-06-29 00:34:21 //connectivitycheck.gsta ... show more 2025-06-29 00:02:54 //connectivitycheck.gstatic.com:443 2025-06-29 00:34:21 //connectivitycheck.gstatic.com:443 2025-06-29 00:18:43 //connectivitycheck.gstatic.com:443 2025-06-29 01:38:42 //connectivitycheck.gstatic.com:443 2025-06-29 01:22:32 //connectivitycheck.gstatic.com:443 show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-29 00:23:37 (1 year ago)	2025-06-28 00:27:37 //connectivitycheck.gstatic.com:443 2025-06-28 00:11:45 //connectivitycheck.gsta ... show more 2025-06-28 00:27:37 //connectivitycheck.gstatic.com:443 2025-06-28 00:11:45 //connectivitycheck.gstatic.com:443 2025-06-28 00:43:28 //connectivitycheck.gstatic.com:443 2025-06-28 00:59:04 //connectivitycheck.gstatic.com:443 2025-06-28 01:14:33 //connectivitycheck.gstatic.com:443 show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-28 00:26:36 (1 year ago)	2025-06-27 00:33:27 //connectivitycheck.gstatic.com:443 2025-06-27 00:49:01 //connectivitycheck.gsta ... show more 2025-06-27 00:33:27 //connectivitycheck.gstatic.com:443 2025-06-27 00:49:01 //connectivitycheck.gstatic.com:443 2025-06-27 00:01:57 //connectivitycheck.gstatic.com:443 2025-06-27 00:17:57 //connectivitycheck.gstatic.com:443 2025-06-27 01:04:36 //connectivitycheck.gstatic.com:443 show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-27 00:09:03 (1 year ago)	2025-06-26 00:30:27 //connectivitycheck.gstatic.com:443 2025-06-26 01:16:59 //connectivitycheck.gsta ... show more 2025-06-26 00:30:27 //connectivitycheck.gstatic.com:443 2025-06-26 01:16:59 //connectivitycheck.gstatic.com:443 2025-06-26 00:14:57 //connectivitycheck.gstatic.com:443 2025-06-26 01:01:31 //connectivitycheck.gstatic.com:443 2025-06-26 00:46:04 //connectivitycheck.gstatic.com:443 show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-26 00:16:49 (1 year ago)	2025-06-25 00:43:30 //connectivitycheck.gstatic.com:443 2025-06-25 00:27:56 //connectivitycheck.gsta ... show more 2025-06-25 00:43:30 //connectivitycheck.gstatic.com:443 2025-06-25 00:27:56 //connectivitycheck.gstatic.com:443 2025-06-25 00:59:03 //connectivitycheck.gstatic.com:443 2025-06-25 00:12:14 //connectivitycheck.gstatic.com:443 2025-06-25 01:14:53 //connectivitycheck.gstatic.com:443 show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-25 00:07:47 (1 year ago)	2025-06-24 01:51:08 //connectivitycheck.gstatic.com:443 2025-06-24 01:35:14 //connectivitycheck.gsta ... show more 2025-06-24 01:51:08 //connectivitycheck.gstatic.com:443 2025-06-24 01:35:14 //connectivitycheck.gstatic.com:443 2025-06-24 00:29:55 //connectivitycheck.gstatic.com:443 2025-06-24 01:18:58 //connectivitycheck.gstatic.com:443 show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-24 00:18:54 (1 year ago)	2025-06-23 00:00:12 //unprot-cloudflare.dstat123.uk:443 2025-06-23 00:00:12 //unprot-cloudflare.dsta ... show more 2025-06-23 00:00:12 //unprot-cloudflare.dstat123.uk:443 2025-06-23 00:00:12 //unprot-cloudflare.dstat123.uk:443 2025-06-23 00:00:13 //unprot-cloudflare.dstat123.uk:443 2025-06-23 00:00:11 //unprot-cloudflare.dstat123.uk:443 2025-06-23 00:00:14 //unprot-cloudflare.dstat123.uk:443 show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-23 00:14:48 (1 year ago)	2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025 ... show more 2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025-06-22 11:10:51 https://www.zfyidc.com/cart 2025-06-22 11:10:51 https://www.zfyidc.com/cart show less	Web App Attack
🇪🇸 voxga.es	2025-06-11 02:58:35 (1 year ago)	Project Satyr: IP launched an attack to one of our customers; our honeypots captured 33 requests fro ... show more Project Satyr: IP launched an attack to one of our customers; our honeypots captured 33 requests from it using HTTP. More info: https://voxga.es/blog/project-satyr/ show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-09-13 22:50:02 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 172.96.14.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 172.96.14.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 13 18:49:56.075828 2024] [security2:error] [pid 31167:tid 31167] [client 172.96.14.101:54915] [client 172.96.14.101] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cnprcertificationreviews.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/twitter.com"] [unique_id "ZuTBlGEe0t7V4jsuX2ztAgAAAAg"], referer: https://cnprcertificationreviews.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Joe-Mark	2021-10-26 04:27:40 (4 years ago)	Rejected by Mcafee IP Reputation (509)	Email Spam

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.154.131.111

🇮🇳 203.145.165.2

🇳🇱 185.136.15.111

🇵🇰 149.40.215.65

🇺🇸 66.132.186.244

🇪🇸 46.6.126.162

🇺🇸 20.65.178.19

🇩🇴 201.229.138.12

🇧🇷 138.185.23.96

🇺🇸 107.180.88.176

🇸🇪 82.96.32.42

🇮🇪 63.35.197.64

🇺🇸 20.29.57.70

🇨🇳 219.151.191.44

🇨🇱 190.5.44.162

🇲🇽 189.232.41.11

🇧🇴 181.188.148.74

🇨🇳 180.76.168.116

🇵🇪 161.132.38.233

🇩🇪 138.68.71.34