JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.223.96.72

Activity Trending Down

Abuse confidence score ?

13% Caution

111 reports

12 reporters · latest 1 week ago

ISP	Beijing Guanghuan Xinwang Digital Technology co.Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55960
Domain Name	sinnet.com.cn
Country	🇨🇳 China
City	Beijing, Beijing

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 54.223.96.72

Export CSV

This IP address has been reported a total of 111 times from 12 distinct sources. 54.223.96.72 was first reported on June 5th 2024, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: Germany with 1 report; United States of America with 1 report. The only category in these recent reports was: Bad Web Bot 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1gz	2026-10-05 05:18:50 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/termetet/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 LRob	2026-10-03 09:28:16 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (iPhone; CPU ... show more Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/148.0.0.0 Mobile/15E148 Sa show less	Bad Web Bot
🇫🇷 Security_Whaller	2026-07-11 21:06:42 (3 months ago)	Malicious activity detected on Honeypot.	Brute-Force Hacking Web App Attack
🇵🇱 sefinek.net	2026-07-11 11:08:58 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.9632.1992 Mobile Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-23 22:04:08 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 54.223.96.72 (ec2-54-223-96-72.cn-north-1.compu ... show more (mod_security) mod_security (id:210730) triggered by 54.223.96.72 (ec2-54-223-96-72.cn-north-1.compute.amazonaws.com.cn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 18:04:05.177211 2026] [security2:error] [pid 27175:tid 27175] [client 54.223.96.72:49300] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ahIkVWOmlTyzOh-_r3oEVAAAAAk"], referer: https://www.civilwarzone.com/TheWilderness.html show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-05-16 02:07:19 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇳 ThreatBook.io	2026-03-22 23:01:40 (6 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2026-03-22 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2026-03-22 09:20:47 /cc.gif show less	Web App Attack
🇮🇩 David Koswari	2026-03-16 06:15:00 (6 months ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇨🇳 ThreatBook.io	2026-02-09 22:55:38 (8 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2026-02-09 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2026-02-09 10:44:40 /cc.gif 2026-02-09 01:27:47 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-31 23:18:53 (8 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2026-01-31 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2026-01-31 05:44:24 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-26 23:32:37 (8 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2026-01-26 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2026-01-26 20:07:08 /cc.gif show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-15 22:57:25 (10 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2025-11-15 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2025-11-15 03:46:52 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-10-26 22:40:08 (11 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2025-10-26 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2025-10-26 01:43:25 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-10-17 23:09:54 (11 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2025-10-17 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2025-10-17 08:45:54 /cc.gif show less	Web App Attack
🇨🇳 ThreatBook.io	2025-10-04 22:52:20 (1 year ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2025-10-04 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.223.96.72 2025-10-04 02:09:23 /cc.gif 2025-10-04 15:53:27 /cc.gif show less	Web App Attack

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.75.179.42

🇹🇳 165.50.42.92

🇳🇱 160.119.76.166

🇹🇭 119.110.233.200

🇬🇧 77.67.26.175

🇺🇸 70.184.175.154

🇺🇸 64.62.156.187

🇸🇬 47.128.112.207

🇧🇪 34.38.211.182

🇨🇳 27.18.131.15

🇦🇫 149.54.62.54

🇫🇷 109.222.15.27

🇨🇦 85.217.149.69

🇺🇸 64.62.156.175

🇲🇽 45.174.73.163

🇺🇸 45.136.113.191

🇬🇧 35.203.211.209

🇮🇳 34.93.40.82

🇸🇬 212.135.216.99

🇰🇷 211.106.133.202