JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.58.78.117

202.58.78.117 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 28%: ?

28%

ISP	PT Data Buana Nusantara
Usage Type	Fixed Line ISP
ASN	AS138886
Domain Name	ptdbn.com
Country	🇮🇩 Indonesia
City	Kediri, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.58.78.117

Whois 202.58.78.117

IP Abuse Reports for 202.58.78.117:

This IP address has been reported a total of 11 times from 9 distinct sources. 202.58.78.117 was first reported on May 19th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 KPS	2026-09-18 02:18:52 (2 hours ago)	PortscanN	Port Scan
🇹🇷 SeczarSecureOps	2026-09-17 08:33:59 (20 hours ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (5 events in 5 ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (5 events in 5min) at 2026-09-17 08:32 show less	Web App Attack
🇩🇪 KPS	2026-09-16 17:23:25 (1 day ago)	PortscanT	Port Scan
Anonymous	2026-09-11 12:09:16 (6 days ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇺🇸 kosada.com	2026-08-24 23:59:23 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-04 16:18:50 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇳🇱 Eric	2026-06-29 15:16:52 (2 months ago)	[Mon Jun 29 15:16:50.891466 2026] [security2:error] [pid 1871858:tid 1871858] [client 202.58.78.117: ... show more [Mon Jun 29 15:16:50.891466 2026] [security2:error] [pid 1871858:tid 1871858] [client 202.58.78.117:33408] [client 202.58.78.117] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.env.dev"] [unique_id "akKMYkAmeh1I46PrkeiKnQAAADc"] [Mon Jun 29 15:16:51.526404 2026] [security2:error] [pid 1871858:tid 1871858] [client 202.58.78.117:33408] [client 202.58.78.117] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [sev ... show less	Hacking Web App Attack
🇫🇷 Sklurk	2026-05-27 06:37:51 (3 months ago)	Web App Attack	Web App Attack
🇨🇭 backslash	2026-03-06 16:21:00 (6 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇮🇩 hermawan	2026-02-06 13:06:03 (7 months ago)	[Fri Feb 06 20:05:58.386527 2026] [security2:error] [pid 319626:tid 140644164036288] [client 202.58. ... show more [Fri Feb 06 20:05:58.386527 2026] [security2:error] [pid 319626:tid 140644164036288] [client 202.58.78.117:5740] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: .%2 found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/using-joomla/extensions/components/search-component/search?searchword=Gempa%20buumi%20besok%20ini%20kab.%20Kediri%20Jawa%20Timur&searchphrase=all HTTP/2.0 Request URI RAW = /index.php/using-joomla/extensions/components/search-component/search?searchword=Gempa%20buumi%20besok%20ini%20kab.%20Kediri%20Jawa%20Timur&searc..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/using-joomla/extensions/components/search-co ... show less	Hacking Web App Attack
🇫🇷 MatStef132	2025-05-19 22:38:36 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /ru UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 217.59.129.228

🇹🇼 198.235.24.54

🇹🇳 197.14.57.27

🇧🇷 177.70.171.158

🇺🇸 174.67.181.114

🇮🇶 169.224.26.229

🇧🇷 164.163.225.194

🇹🇳 154.111.113.38

🇵🇱 109.205.211.23

🇯🇵 101.33.55.172

🇫🇷 85.217.140.39

🇺🇸 47.88.66.103

🇸🇳 41.83.209.237

🇺🇸 40.76.120.80

🇲🇽 38.49.155.74

🇺🇸 35.222.41.153

🇬🇧 35.203.211.247

🇮🇳 34.180.25.197

🇺🇸 4.249.17.190

🇲🇰 217.9.244.102