JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 108.137.79.177

108.137.79.177 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 27%: ?

27%

ISP	Amazon Data Services Jakarta
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-108-137-79-177.ap-southeast-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 108.137.79.177

Whois 108.137.79.177

IP Abuse Reports for 108.137.79.177:

This IP address has been reported a total of 32 times from 27 distinct sources. 108.137.79.177 was first reported on December 17th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-06-25 16:51:23 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇨🇭 zynex	2026-06-25 16:49:57 (2 weeks ago)	URL Probing: /.well-known/wp-signup.php	Web App Attack
🇨🇭 backslash	2026-06-25 16:48:00 (2 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 Martin Lundstrom	2026-06-03 11:06:09 (1 month ago)	https://www.eagleeye-intelligence.com — Webshell scan (3+ hits). Automatically detected and blocked.	Web App Attack
Anonymous	2026-06-03 09:47:58 (1 month ago)	108.137.79.177 - - [03/Jun/2026:11:47:53 +0200] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 ... show more 108.137.79.177 - - [03/Jun/2026:11:47:53 +0200] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 62056 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.137.79.177 - - [03/Jun/2026:11:47:53 +0200] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 14486 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.137.79.177 - - [03/Jun/2026:11:47:55 +0200] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 62056 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.137.79.177 - - [03/Jun/2026:11:47:55 +0200] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 14486 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 11:04:45 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 108.137.79.177 (ec2-108-137-79-177.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 108.137.79.177 (ec2-108-137-79-177.ap-southeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 07:04:42.057568 2026] [security2:error] [pid 939:tid 939] [client 108.137.79.177:61860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mariedjones.com"] [uri "/wp-config.php"] [unique_id "agRaynDXcjAO6n8148BLiQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-05-13 08:36:35 (1 month ago)	(upload_shell) srv104 Shell upload 108.137.79.177 (ID/Indonesia/ec2-108-137-79-177.ap-southeast-3.co ... show more (upload_shell) srv104 Shell upload 108.137.79.177 (ID/Indonesia/ec2-108-137-79-177.ap-southeast-3.compute.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 Vegascosmetics	2026-04-18 21:50:42 (2 months ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇮🇹 Inartis	2026-04-17 15:16:05 (2 months ago)	108.137.79.177 - - [17/Apr/2026:15:16:03 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 404 229 "-" "Mozilla/ ... show more 108.137.79.177 - - [17/Apr/2026:15:16:03 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 404 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-04-17 13:04:33 (2 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 108.137.79.177 (ID/Indonesia/ec2-10 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 108.137.79.177 (ID/Indonesia/ec2-108-137-79-177.ap-southeast-3.compute.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 updown.io	2026-04-17 08:21:01 (2 months ago)	{"level":"info","ts":1776413833.7906983,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1776413833.7906983,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"108.137.79.177","remote_port":"53975","client_ip":"108.137.79.177","proto":"HTTP/1.1","method":"GET","host":"status.menorca.info","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"],"Accept-Language":["en-US,en;q=0.5"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"],"Keep-Alive":["300"],"Connection":["keep-alive"]}},"bytes_read":0,"user_id":"","duration":0.000076536,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.menorca.info/"],"Content-Type":[]}} {"level":"info","ts":1776413834.195071,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"108.137.79.177","remote_port":"54702","client_ip":"108.137.79.177","proto":"HTTP/1.1","method":"GET","host":"status.m ... show less	DDoS Attack Web App Attack
Anonymous	2026-04-16 14:27:47 (2 months ago)	apache vulnerability scan	Web App Attack
🇺🇸 vanguardm	2026-04-16 11:25:04 (2 months ago)	Automated report: 40 events detected. Types: web-attack	Web App Attack
🇺🇸 oralunal	2026-04-16 10:20:34 (2 months ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-04-16 09:44:00 (2 months ago)	IPBlock protected site ID [669-fx]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 185.210.204.201

🇵🇭 112.199.38.218

🇬🇧 2a03:b0c0:1:d0::c6d:c001

🇧🇷 201.76.120.30

🇸🇪 185.212.115.58

🇨🇳 182.88.239.129

🇺🇸 162.217.100.41

🇳🇱 91.92.40.240

🇱🇹 45.227.254.170

🇵🇱 45.138.16.102

🇦🇷 38.52.86.8

🇲🇽 189.194.241.44

🇩🇪 164.92.140.160

🇦🇹 152.53.0.56

🇨🇳 113.88.241.100

🇮🇳 103.123.53.88

🇱🇺 64.89.161.93

🇳🇱 45.148.10.147

🇳🇱 45.148.10.141

🇸🇬 45.82.78.102