JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.119.155.96

114.119.155.96 was found in our database!

This IP was reported 964 times. Confidence of Abuse is 40%: ?

40%

ISP	Huawei-Cloud-SG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Hostname(s)	petalbot-114-119-155-96.petalsearch.com
Domain Name	huawei.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 114.119.155.96

Whois 114.119.155.96

IP Abuse Reports for 114.119.155.96:

This IP address has been reported a total of 964 times from 63 distinct sources. 114.119.155.96 was first reported on December 8th 2020, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mccsoft.io	2026-06-15 20:58:11 (23 hours ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-06-15 14:35:46 (1 day ago)	(mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Por ... show more (mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 17:35:45.217943 2026] [security2:error] [pid 1709592:tid 1709645] [client 114.119.155.96:37539] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: PetalBot - in adoro.gr"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/wp-content/uploads/2018/10/047.jpg"] [unique_id "ajANwaWBS8mxmEE23cDchgAAARg"], referer: https://adoro.gr/wp-content/uploads/2018/10/047.jpg show less	Port Scan
Anonymous	2026-06-15 09:33:00 (1 day ago)	FortiWeb WAF: 18 attacks detected. Threat Score: 6600. Types: Client Management(9), GEO IP(9). Origi ... show more FortiWeb WAF: 18 attacks detected. Threat Score: 6600. Types: Client Management(9), GEO IP(9). Origin: Singapore. show less	Web App Attack
🇺🇸 mccsoft.io	2026-06-14 17:34:09 (2 days ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-06-13 22:27:31 (2 days ago)	(mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Por ... show more (mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 01:27:29.118499 2026] [security2:error] [pid 948989:tid 949034] [client 114.119.155.96:51697] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: PetalBot - in adoro.gr"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/robots.txt"] [unique_id "ai3ZUdXD3_cY7WcDuxpLmwAAAJI"], referer: https://adoro.gr/robots.txt show less	Port Scan
🇬🇷 setupgr	2026-06-13 16:55:55 (3 days ago)	(mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Por ... show more (mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 19:55:51.729711 2026] [security2:error] [pid 922089:tid 922132] [client 114.119.155.96:55703] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: PetalBot - in adoro.gr"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/wp-content/plugins/woocommerce-pdf-product-vouchers/src/class-wc-pdf-product-vouchers-product.php"] [unique_id "ai2Ll42186Wa_UvIHKjr8AAAAZA"], referer: https://adoro.gr/wp-content/plugins/woocommerce-pdf-product-vouchers/src/ show less	Port Scan
Anonymous	2026-06-13 09:33:16 (3 days ago)	FortiWeb WAF: 10 attacks detected. Threat Score: 6200. Types: Client Management(5), GEO IP(5). Origi ... show more FortiWeb WAF: 10 attacks detected. Threat Score: 6200. Types: Client Management(5), GEO IP(5). Origin: Singapore. show less	Web App Attack
🇺🇸 mccsoft.io	2026-06-12 20:54:16 (3 days ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-06-12 17:50:55 (4 days ago)	(mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Por ... show more (mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 20:50:53.168884 2026] [security2:error] [pid 351324:tid 351519] [client 114.119.155.96:25011] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: PetalBot - in adoro.gr"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/wp-content/uploads/2018/12/IRINA-ROSEN060.jpg"] [unique_id "aixG_a6PDvwc_i5kBP5COgAAANI"], referer: https://adoro.gr/wp-content/uploads/2018/12/IRINA-ROSEN060.jpg show less	Port Scan
🇬🇷 setupgr	2026-06-12 08:52:40 (4 days ago)	(mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Por ... show more (mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 11:52:39.874990 2026] [security2:error] [pid 104034:tid 104128] [client 114.119.155.96:35061] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: PetalBot - in adoro.gr"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/wp-content/plugins/woocommerce-gateway-moneris/i18n/languages/woocommerce-gateway-moneris.pot"] [unique_id "aivI11abcBA3ZH61lLfzvQAAABg"], referer: https://adoro.gr/wp-content/plugins/woocommerce-gateway-moneris/i18n/languages/woocommerce-gateway-moneris.pot show less	Port Scan
🇬🇷 setupgr	2026-06-12 03:27:19 (4 days ago)	(mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Por ... show more (mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 06:27:16.059350 2026] [security2:error] [pid 104035:tid 104203] [client 114.119.155.96:31417] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: PetalBot - in adoro.gr"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/wp-content/uploads/2018/10/089.jpg"] [unique_id "ait8lBlpQwqD_h4X_jctfQAAAFg"], referer: https://adoro.gr/wp-content/uploads/2018/10/089.jpg show less	Port Scan
🇬🇷 setupgr	2026-06-11 22:42:42 (4 days ago)	(mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Por ... show more (mod_security) mod_security (id:11000010) triggered by 114.119.155.96: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 01:42:41.479253 2026] [security2:error] [pid 2274:tid 2399] [client 114.119.155.96:52115] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: PetalBot - in adoro.gr"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/wp-content/plugins/woocommerce-pdf-product-vouchers/src/class-wc-pdf-product-vouchers-background-generator.php"] [unique_id "ais54SOS9qvayoURem7rBgAAAEw"], referer: https://adoro.gr/wp-content/plugins/woocommerce-pdf-product-vouchers/src/ show less	Port Scan
🇺🇸 mccsoft.io	2026-06-11 19:15:26 (5 days ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇺🇸 mccsoft.io	2026-06-11 12:02:02 (5 days ago)	Web application attack / vulnerability scanning. Source sent 1 HTTP request(s) (1 distinct paths) to ... show more Web application attack / vulnerability scanning. Source sent 1 HTTP request(s) (1 distinct paths) to our public nginx web server on TCP 80/443, probing blocked/sensitive paths; all returned HTTP 444 (connection closed by security rule, jail nginx-444). Sample requests: GET /single-equity?ticker=XIJN. User-Agent: Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.. Observed 2026-06-11 12:02:00 UTC. TCP handshake completed (requests fully received). Categories: Web App Attack / Bad Web Bot. show less	Bad Web Bot Web App Attack
Anonymous	2026-06-11 09:32:33 (5 days ago)	FortiWeb WAF: 26 attacks detected. Threat Score: 5800. Types: Client Management(13), GEO IP(13). Ori ... show more FortiWeb WAF: 26 attacks detected. Threat Score: 5800. Types: Client Management(13), GEO IP(13). Origin: Singapore. show less	Web App Attack

Showing 1 to 15 of 964 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.113.10.178

🇭🇰 156.226.168.143

🇳🇱 45.148.10.141

🇨🇳 36.212.227.224

🇬🇪 2.57.217.229

🇧🇪 198.235.24.225

🇩🇪 185.110.191.158

🇷🇴 185.100.87.136

🇺🇸 173.67.25.155

🇫🇷 163.172.143.15

🇺🇸 104.128.72.37

🇪🇸 88.30.201.56

🇳🇱 81.19.216.81

🇫🇷 77.237.239.101

🇳🇱 45.198.224.5

🇸🇬 194.231.149.15

🇪🇨 190.214.123.72

🇺🇸 184.73.239.35

🇺🇸 184.72.84.154

🇧🇷 181.218.9.86