JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

118.99.64.0

Recent Activity

Abuse Confidence Score

38% Elevated

11 reports

10 reporters · latest 5 days ago

ISP: BIZNET HOME
Usage Type: Fixed Line ISP
ASN: AS17451
Domain Name: biznetnetworks.com
Country: 🇮🇩 Indonesia
City: Pontianak, West Kalimantan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

11 from 10 distinct reporters

First reported

June 22nd 2026

Most recent report

5 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇨🇿 Czechia 2 🇩🇪 Germany 1

Most common categories Brute-Force 7 Web App Attack 5 Bad Web Bot 4 Hacking 3 VPN IP 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-07 00:15:03 UTC · (5 days ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Excessive Shopby Manufacturers Blocked: /brands/shopby/manufacturer-extron-hp-aruba_networks-aver-projectiondesign-cyberpower-powercom/product_vc_type-personal_noe.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇨🇿 lp	2026-10-31 02:18:03 UTC · (1 week ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 118.99.64.0 2026-10-31T03:11:17+0100 vpn Access-Reject station: 118.99.64.0	Brute-Force Web App Attack
🇨🇿 Countryman	2026-10-31 01:10:01 UTC · (1 week ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇳🇱 maxxsense	2026-10-30 21:35:45 UTC · (1 week ago)	(smtpauth) Failed SMTP AUTH login from 118.99.64.0 (ID/Indonesia/-)	Brute-Force
🇩🇪 london2038.com	2026-10-15 06:54:55 UTC · (3 weeks ago)	Detected by WP fail2ban 2026-10-15T08:54:54.200245+02:00 wordpress: Authentication attempt from 118.99.64.0	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 12:41:13 UTC · (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 118.99.64.0 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:41:06.491385 2026] [security2:error] [pid 10254:tid 10254] [client 118.99.64.0:16400] ModSe ... show more (mod_security) mod_security (id:225170) triggered by 118.99.64.0 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:41:06.491385 2026] [security2:error] [pid 10254:tid 10254] [client 118.99.64.0:16400] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sfgardening.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sfgardening.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as94YkxBXioXim1w6CIL5QAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 04:54:24 UTC · (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 118.99.64.0 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 00:54:17.537898 2026] [security2:error] [pid 17454:tid 17454] [client 118.99.64.0:0] ModSecuri ... show more (mod_security) mod_security (id:225170) triggered by 118.99.64.0 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 00:54:17.537898 2026] [security2:error] [pid 17454:tid 17454] [client 118.99.64.0:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.bradleybarefoot.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bradleybarefoot.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as8K-QSnVDxX39fntEY1wAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 LTM	2026-10-12 06:20:01 UTC · (1 month ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇺🇸 鬼影233	2026-10-01 08:19:14 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0	Bad Web Bot
🇺🇸 kosada.com	2026-07-15 10:50:47 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-22 19:23:20 UTC · (4 months ago)	1782156192.587206 118.99.64.0 103.166.156.58 65535_2-1-3-1-1-4_1412_2 2026-06-23 02:23:12 WIB ...	Email Spam Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇷 217.60.255.130

🇹🇭 203.172.156.215

🇧🇷 201.28.237.90

🇵🇱 172.69.155.38

🇮🇩 165.154.151.207

🇺🇸 162.216.150.196

🇺🇸 162.216.16.86

🇫🇮 147.185.133.94

🇫🇮 147.185.133.61

🇫🇷 141.95.162.162

🇸🇬 134.185.88.23

🇮🇩 122.102.43.50

🇷🇴 80.94.95.115

🇺🇸 68.183.163.116

🇫🇷 51.77.216.36

🇺🇸 45.79.214.122

🇰🇷 43.164.190.124

🇩🇪 41.216.189.147

🇧🇪 34.156.56.208

🇺🇸 2400:cb00:650:1000:6efa:8f31:5450:f084