JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

118.137.245.117

Neutral Activity

Abuse confidence score ?

0% Low Risk

9 reports

2 reporters · latest 5 years ago

ISP	PT. First Media, Tbk.
Usage Type	Fixed Line ISP
ASN	AS23700
Domain Name	linknet.co.id
Country	🇮🇩 Indonesia
City	Depok, West Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

118.137.245.117 has been reported 9 times. The most recent report is from 5 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 118.137.245.117

This IP address has been reported a total of 9 times from 2 distinct sources. 118.137.245.117 was first reported on August 31st 2021, and the most recent report was 5 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2021-09-24 06:45:58 (5 years ago)	[Fri Sep 24 17:45:55.945612 2021] [:error] [pid 11426:tid 140060829677312] [client 118.137.245.117:3 ... show more [Fri Sep 24 17:45:55.945612 2021] [:error] [pid 11426:tid 140060829677312] [client 118.137.245.117:38312] [client 118.137.245.117] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.22.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555559007-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-b ... show less	Hacking Web App Attack
🇬🇧 TURKISH.CO.UK	2021-09-23 22:40:00 (5 years ago)	server logs..	Port Scan
🇮🇩 hermawan	2021-09-18 13:33:19 (5 years ago)	[Sun Sep 19 00:33:16.258040 2021] [:error] [pid 15260:tid 140030521583360] [client 118.137.245.117:6 ... show more [Sun Sep 19 00:33:16.258040 2021] [:error] [pid 15260:tid 140030521583360] [client 118.137.245.117:60680] [client 118.137.245.117] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan/555558992-analisis-bulanan-distribusi-curah-hujan-bulan-agustus-tahun-2021-d ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-09-13 11:38:33 (5 years ago)	[Mon Sep 13 22:38:29.296786 2021] [:error] [pid 89227:tid 140692332447488] [client 118.137.245.117:4 ... show more [Mon Sep 13 22:38:29.296786 2021] [:error] [pid 89227:tid 140692332447488] [client 118.137.245.117:40742] [client 118.137.245.117] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.22.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/555558989-infografis-dasarian-informasi-iklim-jatim-update-10-september-2021"] [unique_id "YT9wdeDBryLST ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-09-11 19:49:44 (5 years ago)	[Sun Sep 12 06:49:36.521123 2021] [:error] [pid 10305:tid 140489227486976] [client 118.137.245.117:4 ... show more [Sun Sep 12 06:49:36.521123 2021] [:error] [pid 10305:tid 140489227486976] [client 118.137.245.117:42480] [client 118.137.245.117] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555558982-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-sept ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-09-10 05:22:49 (5 years ago)	[Fri Sep 10 16:22:47.669349 2021] [:error] [pid 1920:tid 140223845467904] [client 118.137.245.117:50 ... show more [Fri Sep 10 16:22:47.669349 2021] [:error] [pid 1920:tid 140223845467904] [client 118.137.245.117:50304] [client 118.137.245.117] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.22.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/daerah-potensi-banjir-di-provinsi-jawa-timur/555558970-prakiraan-bulanan-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk- ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-09-05 14:54:19 (5 years ago)	[Mon Sep 06 01:54:16.589387 2021] [:error] [pid 2064:tid 140579497301760] [client 118.137.245.117:48 ... show more [Mon Sep 06 01:54:16.589387 2021] [:error] [pid 2064:tid 140579497301760] [client 118.137.245.117:48078] [client 118.137.245.117] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/analisis-musim/4109-perbandingan-klimatologi/perbandingan-prakiraan-awal-musim-hujan-dengan-normalnya-zona-musim-di-propinsi-jawa-timur/perbandingan-prakiraan-awal-mus ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-09-03 13:53:42 (5 years ago)	[Sat Sep 04 00:53:38.626225 2021] [:error] [pid 10703:tid 140163967608576] [client 118.137.245.117:5 ... show more [Sat Sep 04 00:53:38.626225 2021] [:error] [pid 10703:tid 140163967608576] [client 118.137.245.117:58180] [client 118.137.245.117] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.22.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/4084-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2021/555558952-analisis-dan-prediksi-dasarian-di ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-08-31 08:19:27 (5 years ago)	[Tue Aug 31 19:19:24.831081 2021] [:error] [pid 7649:tid 140230715750144] [client 118.137.245.117:49 ... show more [Tue Aug 31 19:19:24.831081 2021] [:error] [pid 7649:tid 140230715750144] [client 118.137.245.117:49978] [client 118.137.245.117] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.22.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555558949-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bu ... show less	Hacking Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a940:301:225:0:1e::

🇹🇷 176.40.225.123

🇺🇸 173.239.218.232

🇺🇸 134.199.211.238

🇮🇩 114.6.128.61

🇮🇩 114.5.84.99

🇨🇳 112.64.169.110

🇨🇳 112.31.167.120

🇧🇪 104.199.72.69

🇻🇳 103.28.37.12

🇫🇮 80.66.83.83

🇺🇿 62.164.148.87

🇷🇺 46.188.52.59

🇻🇳 221.133.3.83

🇺🇸 192.0.96.187

🇵🇾 190.128.166.110

🇵🇭 124.105.24.67

🇧🇩 103.137.80.24

🇫🇷 91.231.89.34

🇦🇿 62.217.151.104