This IP address has been reported a total of
12
times from
9 distinct
sources.
114.10.20.132 was first reported on
February 1st 2026 , and the most recent report was
1 month ago Australia
with 3
reports;
Indonesia
with 2
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
6
times;
Hacking
5
times;
Email Spam
2
times;
SQL Injection
1
time;
Exploited Host
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
sockominfo
2026-08-03 21:00:28
(1 month ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Email Spam
🇮🇩
sockominfo
2026-08-03 20:00:08
(1 month ago)
Webshell discovery success (Response: 200). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-C ...
show more
Webshell discovery success (Response: 200). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Email Spam
🇦🇺
paulshipley.com.au
2026-08-03 15:52:57
(1 month ago)
[Tue Aug 04 01:52:56.660144 2026] [security2:error] [pid 128434] [client 114.10.20.132:37716] [clien ...
show more
[Tue Aug 04 01:52:56.660144 2026] [security2:error] [pid 128434] [client 114.10.20.132:37716] [client 114.10.20.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "stkildashule.org.au"] [uri "/"] [unique_id "anC5WJjGw-oGxoL45aI5CgAAAAA"]
...
show less
Web App Attack
🇹🇭
MWA SOC
2026-08-03 08:43:18
(1 month ago)
SQL Injection
🇦🇺
paulshipley.com.au
2026-08-03 06:45:45
(1 month ago)
[Mon Aug 03 16:45:45.175825 2026] [security2:error] [pid 66986] [client 114.10.20.132:29167] [client ...
show more
[Mon Aug 03 16:45:45.175825 2026] [security2:error] [pid 66986] [client 114.10.20.132:29167] [client 114.10.20.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.co.nz"] [uri "/"] [unique_id "anA5GdDaoLnBMcUrsz27bgAAAAE"]
...
show less
Web App Attack
🇪🇸
alferez
2026-08-03 00:51:18
(1 month ago)
wp2shell bug exploit
Hacking
Exploited Host
Web App Attack
🇹🇼
ashiyasayo
2026-08-02 23:02:00
(1 month ago)
Detected injection attack.
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-02 21:27:23
(1 month ago)
[Mon Aug 03 07:27:22.260858 2026] [security2:error] [pid 20259] [client 114.10.20.132:26541] [client ...
show more
[Mon Aug 03 07:27:22.260858 2026] [security2:error] [pid 20259] [client 114.10.20.132:26541] [client 114.10.20.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "stkildashule.org.au"] [uri "/"] [unique_id "am-2OpaASwe-pr6XJ8CsYAAAAAc"]
...
show less
Web App Attack
2026-08-02 21:02:02
(1 month ago)
[_admin] auto-suppressed-foreign: auto: foreign suppressed offender [ID, script-probe-mixed-traffic]
Hacking
Web App Attack
🇫🇷
bruno28
2026-08-02 20:45:01
(1 month ago)
bpe-7 : Trying access unauthorized files/dir=>/administrator/components/com_rsfiles/rsfiles.xml
Hacking
🇮🇩
David Koswari
2026-04-27 05:11:00
(5 months ago)
REQ_BLOCKED_SECURITY
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇩🇰
castipo
2026-02-01 14:54:12
(7 months ago)
nginx-http :: 114.10.20.132 - - [01/Feb/2026:21:54:12 +0700] "GET / HTTP/2.0" 301 162 "-" "python-re ...
show more
nginx-http :: 114.10.20.132 - - [01/Feb/2026:21:54:12 +0700] "GET / HTTP/2.0" 301 162 "-" "python-requests/2.32.5" host="[host]o.my.id" cfip="114.10.20.132" cfray="9c72485c3d7ef8d6-SIN"
show less
Bad Web Bot
Showing 1 to
12
of 12 reports
