JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.54.109.8

117.54.109.8 was found in our database!

This IP was reported 95 times. Confidence of Abuse is 0%: ?

ISP	IndoInternet Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9340
Domain Name	indonet.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.54.109.8

Whois 117.54.109.8

IP Abuse Reports for 117.54.109.8:

This IP address has been reported a total of 95 times from 26 distinct sources. 117.54.109.8 was first reported on August 9th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇴 conexcol	2024-01-27 22:03:34 (2 years ago)	(cpanel) Failed cPanel login from 117.54.109.8 (ID/Indonesia/-): 5 in the last 3600 secs	Brute-Force Web App Attack
🇩🇪 dihost	2024-01-25 08:05:38 (2 years ago)	(cpanel) Failed cPanel login from 117.54.109.8 (ID/Indonesia/-): 5 in the last 3600 secs	Brute-Force
🇿🇦 Birdflew	2024-01-16 07:04:46 (2 years ago)	Failed FTP login	FTP Brute-Force
🇮🇩 hermawan	2024-01-15 12:02:31 (2 years ago)	[Mon Jan 15 19:02:30.411000 2024] [security2:error] [pid 80642:tid 127179430037056] [client 117.54.1 ... show more [Mon Jan 15 19:02:30.411000 2024] [security2:error] [pid 80642:tid 127179430037056] [client 117.54.109.8:52842] [client 117.54.109.8] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "56"] [id "440006"] [msg "Connection Close Header"] [data "Matched Data: close found within REMOTE_ADDR: 117.54.109.8 request_line = POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/ajax/render/widget_tabbedcontainer_tab_panel"] [unique_id "ZaUe1mGv8RIfo4D9Mv0-PQAAAmI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[80724] [hSHLyYJENEs] [ZaUe1mGv8RIfo4D9Mv0-PQAAAmI] keep_alive=[0] [2024-01-15 19:02:30.411005] [R:ZaUe1mGv8RIfo4D9Mv0-PQAAAmI] UA:'Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' A ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-01-15 05:07:28 (2 years ago)	[Mon Jan 15 12:07:27.118364 2024] [security2:error] [pid 139076:tid 132294184535616] [client 117.54. ... show more [Mon Jan 15 12:07:27.118364 2024] [security2:error] [pid 139076:tid 132294184535616] [client 117.54.109.8:55383] [client 117.54.109.8] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "56"] [id "440006"] [msg "Connection Close Header"] [data "Matched Data: close found within REMOTE_ADDR: 117.54.109.8 request_line = GET /login HTTP/1.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/login"] [unique_id "ZaS9j7bQ6frg0060NlYXzQAAAos"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[139199] [Agpx/URJooU] [ZaS9j7bQ6frg0060NlYXzQAAAos] keep_alive=[0] [2024-01-15 12:07:27.118370] [R:ZaS9j7bQ6frg0060NlYXzQAAAos] UA:'Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
🇮🇩 penjaga BRIN	2024-01-15 03:09:23 (2 years ago)	SQL injection attempt.-180	Web App Attack
🇨🇴 conexcol	2024-01-12 04:52:32 (2 years ago)	(cpanel) Failed cPanel login from 117.54.109.8 (ID/Indonesia/-): 5 in the last 3600 secs	Brute-Force Web App Attack
🇮🇩 penjaga BRIN	2024-01-12 04:01:13 (2 years ago)	Multiple common web attacks from same source ip.-111	Brute-Force
🇲🇾 syokadmin	2024-01-11 06:46:23 (2 years ago)	(cpanel) Failed cPanel login from 117.54.109.8 (ID/Indonesia/-): 1 in the last 3600 secs	Brute-Force Web App Attack
🇿🇦 Birdflew	2024-01-09 02:26:23 (2 years ago)	Failed FTP login	FTP Brute-Force
🇲🇾 syokadmin	2024-01-09 02:26:16 (2 years ago)	(cpanel) Failed cPanel login from 117.54.109.8 (ID/Indonesia/-): 1 in the last 3600 secs	Brute-Force Web App Attack
🇮🇩 hermawan	2024-01-03 04:35:59 (2 years ago)	[Wed Jan 03 11:35:57.685287 2024] [security2:error] [pid 375994:tid 140683885123136] [client 117.54. ... show more [Wed Jan 03 11:35:57.685287 2024] [security2:error] [pid 375994:tid 140683885123136] [client 117.54.109.8:65380] [client 117.54.109.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.27.1 request_line = GET /.env HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/.env"] [unique_id "ZZTkLY9FKrvuGullthuelAAAAVk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[376101] [3hO4JnuZrZE] [ZZ ... show less	Hacking Web App Attack
🇳🇱 mawan	2023-12-22 02:29:28 (2 years ago)	Suspected of having performed illicit activity on AMS server.	Web App Attack
🇮🇩 Glaceon	2023-12-20 09:44:27 (2 years ago)	SQL and Apache Log4j	SQL Injection
🇺🇸 mawan	2023-12-19 05:18:00 (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack

Showing 1 to 15 of 95 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 198.38.86.222

🇧🇷 187.94.255.130

🇳🇱 176.65.148.2

🇩🇪 172.71.148.73

🇻🇳 171.237.176.209

🇫🇷 152.228.213.32

🇸🇬 139.59.116.253

🇨🇳 121.229.13.210

🇬🇧 51.195.215.27

🇨🇱 45.4.1.130

🇮🇶 176.241.83.187

🇺🇸 165.154.163.113

🇻🇳 160.187.229.42

🇮🇱 147.235.199.104

🇨🇳 111.228.36.44

🇧🇬 79.124.62.126

🇸🇬 52.237.80.79

🇸🇰 46.229.233.134

🇺🇸 20.163.34.74

🇺🇸 152.32.207.172