JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.96.14.52

172.96.14.52

Neutral Activity

34 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Heymman Servers Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS64236

Domain Name

heymman.com

Country

🇺🇸 United States of America

City

Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.96.14.52 has been reported 34 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 172.96.14.52:

This IP address has been reported a total of 34 times from 28 distinct sources. 172.96.14.52 was first reported on March 14th 2022, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2024-09-03 23:04:13 (2 years ago)	9.759 4xx requests in 1 hour (2w3d3h)	Brute-Force Bad Web Bot
🇨🇦 JuicyJ	2024-09-03 09:39:51 (2 years ago)	Excessive crawling/scraping	Web App Attack
🇩🇪 Petros Stefanakis	2024-09-02 20:31:31 (2 years ago)	(mod_security) mod_security triggered on hostname [redacted] 172.96.14.52 (US/United States/-)	SQL Injection
🇺🇸 TheMadBeaker	2024-09-02 20:02:57 (2 years ago)	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	Hacking SQL Injection
🇪🇸 seoxan.es	2024-09-02 18:49:52 (2 years ago)	SQL Injection attempt detected	SQL Injection
Anonymous	2024-09-01 21:55:01 (2 years ago)	\| XSS (Cross Site Scripting) attempt.	Hacking SQL Injection Web App Attack
🇺🇸 aygabtu	2024-09-01 21:55:00 (2 years ago)	sql injection	Hacking SQL Injection
🇺🇸 TPI-Abuse	2024-09-01 21:48:19 (2 years ago)	(mod_security) mod_security (id:212620) triggered by 172.96.14.52 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:212620) triggered by 172.96.14.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 17:48:12.280780 2024] [security2:error] [pid 19702:tid 19702] [client 172.96.14.52:54193] [client 172.96.14.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|mathewsdental.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php?option=<script>alert(\\x22x1s1s1\\x22)</script>&view=page&id=19"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "mathewsdental.com"] [uri "/index.php"] [unique_id "ZtThHPGjfXJtKlagT34fVwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2024-08-30 23:43:17 (2 years ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2024-08-30 14:58:53 (2 years ago)	(mod_security) mod_security (id:210831) triggered by 172.96.14.52 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 172.96.14.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 10:58:49.472986 2024] [security2:error] [pid 21601:tid 21601] [client 172.96.14.52:57762] [client 172.96.14.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.jwwsb.jaspercity.com\|F\|4"] [data "Microsoft URL"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jwwsb.jaspercity.com"] [uri "/index.php"] [unique_id "ZtHeKQbgN3Xn5GEBUuKHeQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇪 mex	2024-08-30 07:26:12 (2 years ago)	SQL-Injection	SQL Injection
🇺🇸 fortypoundhead	2024-08-29 23:51:49 (2 years ago)	SQL Injection Attempt	SQL Injection Web App Attack
🇫🇷 Tonga-Soa	2024-08-29 22:33:19 (2 years ago)	"use of nvopzp ... script by baby hacker"	SQL Injection Web App Attack
🇫🇷 Sklurk	2024-08-29 22:32:59 (2 years ago)	Web App Attack	Web App Attack
🇩🇪 HoneyPot-DE	2022-04-05 10:38:21 (4 years ago)	Apr 5 16:38:17 mail postfix/postscreen[11870]: DNSBL rank 7 for [172.96.14.52]:64888 ...	Email Spam

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.208.198.38

🇺🇸 205.210.31.40

🇧🇪 198.235.24.174

🇧🇪 198.235.24.171

🇺🇸 198.23.185.98

🇬🇧 193.176.29.20

🇦🇷 181.105.154.173

🇫🇷 164.68.102.175

🇮🇩 103.31.250.251

🇫🇷 91.231.89.123

🇩🇪 69.5.169.8

🇳🇱 45.148.10.157

🇺🇸 34.11.185.45

🇺🇸 34.11.103.199

🇬🇧 31.14.254.122

🇺🇸 15.204.233.32

🇺🇸 2600:1900:4171:12:0:9d1::

🇺🇸 216.73.217.112

🇻🇪 201.221.115.221

🇹🇼 198.235.24.127