JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.99.121.209

118.99.121.209 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 18%: ?

18%

ISP	Biznet Networks
Usage Type	Fixed Line ISP
ASN	AS17451
Domain Name	biznetnetworks.com
Country	🇮🇩 Indonesia
City	Probolinggo, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.99.121.209

Whois 118.99.121.209

IP Abuse Reports for 118.99.121.209:

This IP address has been reported a total of 57 times from 40 distinct sources. 118.99.121.209 was first reported on January 22nd 2022, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 RoboSOC	2026-09-18 14:41:03 (23 hours ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
Anonymous	2026-09-05 06:44:12 (2 weeks ago)	Unsolicited inbound connection attempt(s) dropped by firewall (Mikrotik INPUT-WAN-DROP), 14 packet(s ... show more Unsolicited inbound connection attempt(s) dropped by firewall (Mikrotik INPUT-WAN-DROP), 14 packet(s) over 1 port(s): udp/23445 show less	Port Scan
🇩🇪 pltcldvlpr	2026-08-13 14:47:17 (1 month ago)	Bogus Useragent: 118.99.121.209 - - [13/Aug/2026:16:47:17 +0200] "GET /protocol?id=bb_8_19&offset=80 ... show more Bogus Useragent: 118.99.121.209 - - [13/Aug/2026:16:47:17 +0200] "GET /protocol?id=bb_8_19&offset=800&seq=877 HTTP/1.1" 444 0 "-" "Opera/8.64.(Windows 98; Win 9x 4.90; ha-NG) Presto/2.9.179 Version/12.00" asn=17451 org="BIZNET NETWORKS" country=ID ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-09 19:09:46 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-14 12:00:04 (3 months ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signatur ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signature Blocked: /wishlist/index/add/product/10948/form_key/I08HWPaYqMYgYasB/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G... show less	Hacking Bad Web Bot Web App Attack
🇷🇸 Smel	2026-02-14 15:00:06 (7 months ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-02-13 03:16:11 (7 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-02-13 02:19:23 (7 months ago)	tcp/23 (3 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2025-11-24 05:38:48 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 118.99.121.209 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 118.99.121.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:38:40.553305 2025] [security2:error] [pid 3033:tid 3033] [client 118.99.121.209:22805] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|williamfitzsimmons.com\|F\|2"] [data ".sinclaircambridge.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/www.sinclaircambridge.com"] [unique_id "aSPvYN2V9JbLHVB8RYN1FgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 hermawan	2025-11-15 15:19:26 (10 months ago)	[Sat Nov 15 21:29:58.685570 2025] [security2:error] [pid 982786:tid 140208969123520] [client 118.99. ... show more [Sat Nov 15 21:29:58.685570 2025] [security2:error] [pid 982786:tid 140208969123520] [client 118.99.121.209:9763] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:file. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "728"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: f found within ARGS_NAMES:file: file request_line = GET /pdfjs/web/viewer.html?file=/images/PPID/Pelayanan_Informasi/Tata_Cara_Pengaduan_Penyalahgunaan_Wewenang_atau_Pelanggaran_oleh_Pejabat_Badan_Publik/Tata_Cara_Pengaduan_Penyalahgunaan_Wewenang_atau_Pelanggaran_oleh_Pihak_Yang_Mendapatkan_Izin.pdf HTTP/2.0 Request URI RAW = /pdfjs/web/viewer.html?file=/images/PPID/Pelayanan_Informasi/Tata_Cara_Pen..."] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag ... show less	Hacking Web App Attack
🇺🇸 sefinek.net	2025-07-18 17:52:36 (1 year ago)	Blocked by UFW on NY01 [80/tcp] Source port: 56413 TTL: 236 Packet length: 40 TOS: 0x00 This report ... show more Blocked by UFW on NY01 [80/tcp] Source port: 56413 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇷🇸 Scan	2025-07-15 02:04:14 (1 year ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2025-07-14 18:01:41 (1 year ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇷🇸 Smel	2025-07-12 13:00:10 (1 year ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 guldkage	2025-07-11 17:46:48 (1 year ago)	Unauthorized connection attempt detected from IP address 118.99.121.209 to port 23 (ger-03) [J]	Brute-Force Exploited Host

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.48.200.2

🇭🇰 144.48.243.18

🇻🇳 113.163.202.114

🇺🇿 89.249.63.6

🇹🇼 61.220.235.10

🇺🇸 20.186.238.146

🇹🇭 203.154.158.195

🇧🇷 177.206.157.168

🇳🇱 176.65.149.30

🇻🇳 165.101.40.109

🇨🇳 118.126.65.181

🇸🇬 101.47.159.125

🇬🇪 91.231.218.149

🇺🇸 63.250.36.183

🇨🇦 57.134.142.191

🇳🇱 45.156.128.56

🇻🇳 45.119.85.159

🇷🇺 212.104.88.237

🇨🇦 198.245.62.60

🇺🇸 136.70.228.193