JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

118.99.91.3

Neutral Activity

Abuse Confidence Score

0% Low Risk

24 reports

16 reporters · latest 3 months ago

ISP: BIZNET POSTPAID
Usage Type: Fixed Line ISP
ASN: AS17451
Domain Name: biznetnetworks.com
Country: 🇮🇩 Indonesia
City: Surakarta, Central Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

118.99.91.3 has been reported 24 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

24 from 16 distinct reporters

First reported

June 28th 2022

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-28 06:21:54 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-14 13:11:40 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-07-06 05:57:09 UTC · (4 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇺🇸 kosada.com	2026-07-04 05:40:12 UTC · (4 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 pltcldvlpr	2026-06-15 15:50:13 UTC · (4 months ago)	Bogus Useragent: 118.99.91.3 - - [14/Jun/2026:15:57:05 +0200] "GET /protocol?id=th_6_159&paragraph=15811492&seq=1327 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 5.0; Windows NT 5.2; Trident/5.1)" asn=17451 org="BIZNET NETWORKS" country=ID ...	Bad Web Bot
🇮🇩 hermawan	2026-05-12 06:17:35 UTC · (5 months ago)	[Tue May 12 13:07:45.088160 2026] [security2:error] [pid 154970:tid 139752656312000] [client 118.99.91.3:34529] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:^\|b[\\"'\\\\)\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b] ... show more [Tue May 12 13:07:45.088160 2026] [security2:error] [pid 154970:tid 139752656312000] [client 118.99.91.3:34529] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:^\|b[\\"'\\\\)\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\$\\\\\\\\-0-9\\\\?@_a-\\\\{])?\\\\x5c?u[\\"'\\\$\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\$\\\\\\\\-0-9\\\\?@_a-\\\\{])?\\\\x5c?s[\\"'\\\$\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\\(\\\\\\\\-0- ..." at ARGS_NAMES:id. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "3253"] [id "932350"] [msg "Remote Command Execution: Direct Unix Command Execution (No Arguments)"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: id found within ARGS_NAMES:id: id request_line = GET /index.php/component/search/?Itemid=1310&id=408:gempa-terkini&format=opensearch HTTP/2.0 Request URI ... show less	Email Spam Hacking
Anonymous	2026-05-08 04:15:15 UTC · (5 months ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇮🇹 VHosting	2025-11-14 07:56:53 UTC · (11 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇫🇷 dynamix	2025-08-06 01:25:35 UTC · (1 year ago)	Multiple WAF Violations	Web App Attack
🇫🇷 ᴀʀᴛ	2025-07-29 10:07:26 UTC · (1 year ago)	Triggered Cloudflare WAF (l7ddos) from ID. ASN: 17451 (BIZNET-AS-AP BIZNET NETWORKS) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 This report was ge ... show more Triggered Cloudflare WAF (l7ddos) from ID. ASN: 17451 (BIZNET-AS-AP BIZNET NETWORKS) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇯🇵 mkaraki	2025-06-20 06:57:12 UTC · (1 year ago)	1750402630 # Service_probe # SIGNATURE_SEND # source_ip:118.99.91.3 # dst_port:8080 ...	Port Scan
Anonymous	2025-06-15 18:17:06 UTC · (1 year ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2025-06-15 00:43:50 UTC · (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇨🇳 ThreatBook.io	2025-04-27 22:10:18 UTC · (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/118.99.91.3 2025-04-27 04:51:31 /	Web App Attack
Anonymous	2025-04-26 13:07:42 UTC · (1 year ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 167.99.181.110

🇰🇷 220.76.91.28

🇳🇱 193.176.31.225

🇨🇴 179.33.69.234

🇺🇸 172.212.107.121

🇫🇮 147.185.133.82

🇨🇳 122.226.102.201

🇧🇩 103.150.65.207

🇸🇪 31.59.160.24

🇺🇸 209.50.163.189

🇦🇷 186.57.141.11

🇩🇪 164.92.200.161

🇨🇳 122.97.209.179

🇺🇸 20.42.97.244

🇩🇿 197.203.13.237

🇧🇷 186.221.164.231

🇻🇪 170.247.215.24

🇫🇷 85.217.140.41

🇺🇸 73.145.50.221

🇬🇧 35.203.210.166