JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.223.254.138

54.223.254.138 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 24%: ?

24%

ISP	Beijing Guanghuan Xinwang Digital Technology co.Ltd
Usage Type	Commercial
ASN	AS55960
Hostname(s)	ec2-54-223-254-138.cn-north-1.compute.amazonaws.com.cn
Domain Name	sinnet.com.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.223.254.138

Whois 54.223.254.138

IP Abuse Reports for 54.223.254.138:

This IP address has been reported a total of 108 times from 11 distinct sources. 54.223.254.138 was first reported on August 1st 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-06-26 22:02:50 (1 day ago)	(mod_security) mod_security (id:100011) triggered by 54.223.254.138 (CN/China/Beijing/Beijing/-/[AS5 ... show more (mod_security) mod_security (id:100011) triggered by 54.223.254.138 (CN/China/Beijing/Beijing/-/[AS55960 Beijing Guanghuan Xinwang Digital]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 27 01:02:49.374555 2026] [security2:error] [pid 1093883:tid 1094081] [remote 54.223.254.138:48926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/fonts/1/google-fonts/css/d/6/2/487a4e09e49ec73b9840f3479663e.css"] [unique_id "aj73CRnAkaWCG_eCsXpTAQADUgc"], referer: https://ftiaxtomonosou.gr/ show less	Port Scan
Anonymous	2026-06-26 07:50:11 (2 days ago)	Botnet-generated fake user-agent with impossible version. UA="Mozilla/5.0 (Linux; Android 6.0; Nexus ... show more Botnet-generated fake user-agent with impossible version. UA="Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.6182.1750 Mobile Safar" show less	Bad Web Bot
🇩🇪 Reinhard	2026-06-24 07:51:37 (4 days ago)	Unknown activity, but too many attacks with too many users.	Hacking
🇺🇸 TPI-Abuse	2026-06-07 03:34:35 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 54.223.254.138 (ec2-54-223-254-138.cn-north-1.c ... show more (mod_security) mod_security (id:210730) triggered by 54.223.254.138 (ec2-54-223-254-138.cn-north-1.compute.amazonaws.com.cn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 23:34:31.223355 2026] [security2:error] [pid 24571:tid 24571] [client 54.223.254.138:62744] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aiTmx99oQsesIQ1sZT_FGgAAAAQ"], referer: https://www.civilwarzone.com/RecipeIndex.html show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-04-04 23:41:15 (2 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2026-04- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2026-04-04 20:28:40 /scene.asp show less	Web App Attack
🇮🇩 David Koswari	2026-04-01 06:15:00 (2 months ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇨🇳 ThreatBook.io	2026-02-04 23:37:36 (4 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2026-02- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2026-02-04 05:52:05 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-27 00:35:48 (5 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2026-01- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2026-01-26 11:06:14 /cc.gif show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-24 00:11:30 (5 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2026-01- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2026-01-23 12:16:56 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-24 23:39:25 (6 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-12- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-12-24 01:43:06 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-10 23:55:45 (6 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-12- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-12-10 13:43:05 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-24 23:40:19 (7 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-11- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-11-24 22:58:26 /cc.gif 2025-11-24 08:28:28 /cc.gif show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-14 23:46:27 (7 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-11- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-11-14 06:43:05 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-05 23:38:07 (7 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-11- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-11-05 07:54:08 /cc.gif show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-04 23:39:19 (7 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-11- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.254.138 2025-11-04 23:23:58 /cc.gif show less	Web App Attack

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 118.193.39.103

🇩🇪 109.71.252.174

🇺🇸 34.174.249.44

🇧🇴 200.105.172.184

🇺🇸 158.94.187.16

🇧🇩 114.130.85.36

🇺🇸 107.150.105.153

🇸🇪 104.222.174.149

🇻🇳 27.71.230.31

🇺🇸 20.169.49.11

🇨🇱 200.54.189.99

🇳🇬 152.32.142.188

🇨🇳 121.227.31.13

🇳🇱 91.92.40.200

🇺🇸 73.12.178.54

🇩🇪 69.5.169.147

🇦🇹 46.124.203.77

🇺🇸 44.220.185.8

🇬🇧 37.10.113.213

🇯🇵 20.78.169.229