This IP address has been reported a total of
9
times from
5 distinct
sources.
204.44.120.114 was first reported on
January 7th 2026 , and the most recent report was
12 hours ago Italy
with 1
report.
The only category in these recent reports was:
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇹
A000Z
2026-10-08 05:02:56
(12 hours ago)
Fail2Ban: 204.44.120.114 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ...
show more
Fail2Ban: 204.44.120.114 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 14; 23127PN0CC) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36
show less
Bad Web Bot
🇩🇪
Phenix Info
2026-03-13 03:29:37
(6 months ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
2026-02-19 05:40:18
(7 months ago)
Malicious activity detected
Hacking
Web App Attack
🇩🇪
Phenix Info
2026-02-16 02:22:53
(7 months ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
2026-02-15 04:43:03
(7 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-02-02 14:20:33
(8 months ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
kosada.com
2026-01-17 21:44:40
(8 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-01-07 16:21:10
(9 months ago)
[Wed Jan 07 23:21:09.230646 2026] [security2:error] [pid 359308:tid 140022803285696] [client 204.44. ...
show more
[Wed Jan 07 23:21:09.230646 2026] [security2:error] [pid 359308:tid 140022803285696] [client 204.44.120.114:46803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".svg" at REQUEST_LINE. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "463"] [id "440010"] [msg "BAD REQUEST Bro, 206 Partial Content"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: identity found within REQUEST_LINE: GET /pdfjs/web/images/toolbarButton-zoomOut.svg HTTP/2.0 request_line = GET /pdfjs/web/images/toolbarButton-zoomOut.svg HTTP/2.0 Request URI RAW = /pdfjs/web/images/toolbarButton-zoomOut.svg Request Basename = toolbarButton-zoomOut.svg"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/images/toolbarButton-zoomOut.svg"] [unique_id "aV6H9Tj7EVY2TjnnXgpGKwAAQAA"], referer https://staklim-jatim.bmkg.go.id/pdfjs/web/viewer.css [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.i
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2026-01-07 00:42:40
(9 months ago)
[Wed Jan 07 07:42:39.789811 2026] [security2:error] [pid 357753:tid 140119720298176] [client 204.44. ...
show more
[Wed Jan 07 07:42:39.789811 2026] [security2:error] [pid 357753:tid 140119720298176] [client 204.44.120.114:35453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".jpg" at REQUEST_LINE. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "463"] [id "440010"] [msg "BAD REQUEST Bro, 206 Partial Content"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: identity found within REQUEST_LINE: GET /images/gempa/webp/20260106071132.mmi.jpg.webp HTTP/2.0 request_line = GET /images/gempa/webp/20260106071132.mmi.jpg.webp HTTP/2.0 Request URI RAW = /images/gempa/webp/20260106071132.mmi.jpg.webp Request Basename = 20260106071132.mmi.jpg.webp"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/gempa/webp/20260106071132.mmi.jpg.webp"] [unique_id "aV2r_0IFgpk6fWZStlpAewAAAAA"], referer https://staklim-jatim.bmkg.go.id/index.php/profil/meteorologi/list-all-categories/3890-klim
...
show less
Hacking
Web App Attack
Showing 1 to
9
of 9 reports
