JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

118.99.99.243

Recent Activity

Abuse confidence score ?

20% Elevated

10 reports

6 reporters · latest 11 hours ago

ISP	metroNET By Biznet
Usage Type	Fixed Line ISP
ASN	AS17451
Domain Name	biznetnetworks.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 118.99.99.243

Export CSV

This IP address has been reported a total of 10 times from 6 distinct sources. 118.99.99.243 was first reported on June 4th 2021, and the most recent report was 11 hours ago. In the last 60 days, the top reporter locations were: Russian Federation with 1 report; Ukraine with 1 report; United States of America with 1 report. The most common categories in these recent reports were: Bad Web Bot 2 times; Hacking 2 times; Exploited Host 1 time; Web App Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-10-07 12:18:39 (11 hours ago)	[07/Oct/2026:15:18:38 +0300] -- 118.99.99.243 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /wp- ... show more [07/Oct/2026:15:18:38 +0300] -- 118.99.99.243 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /wp-json/batch/v1 HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 GreekCity	2026-10-07 07:37:20 (15 hours ago)	bad-bot hacking for vulnerable links.	Hacking Exploited Host
Anonymous	2026-09-20 02:00:45 (2 weeks ago)	Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Attack Signature Blocked: /brands/shopby/manufacturer-extron-iiyama-hp-rcf-smart-lsi-xyz.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇮🇩 hermawan	2022-05-16 05:02:39 (4 years ago)	[Mon May 16 16:02:38.126633 2022] [-:error] [pid 5542:tid 140733478573824] [client 118.99.99.243:461 ... show more [Mon May 16 16:02:38.126633 2022] [-:error] [pid 5542:tid 140733478573824] [client 118.99.99.243:46180] [client 118.99.99.243] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/buku/4128-buku-edisi-setiap-1-bulan-sekali/buku-analisis-dan-prakiraan-bulanan-jawa-timur/buletin-bulanan-analisis-dan-prakiraan-hujan-di-provinsi-jawa-timur-tahun-2022/5 ... show less	Hacking Web App Attack
🇺🇸 Al Coholic	2022-05-12 17:37:55 (4 years ago)	Detected By Fail2ban	Bad Web Bot
🇮🇩 hermawan	2022-05-10 08:31:38 (4 years ago)	[Tue May 10 19:31:36.264063 2022] [-:error] [pid 34313:tid 140734434883328] [client 118.99.99.243:50 ... show more [Tue May 10 19:31:36.264063 2022] [-:error] [pid 34313:tid 140734434883328] [client 118.99.99.243:50524] [client 118.99.99.243] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/555559428-analisis-dasarian-distribusi-curah-hujan-dasarian-i-tanggal-1-10-mei-tahun ... show less	Hacking Web App Attack
🇮🇩 hermawan	2022-05-10 04:51:54 (4 years ago)	[Tue May 10 15:51:50.633506 2022] [-:error] [pid 32575:tid 140729644943104] [client 118.99.99.243:36 ... show more [Tue May 10 15:51:50.633506 2022] [-:error] [pid 32575:tid 140729644943104] [client 118.99.99.243:36120] [client 118.99.99.243] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.22.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/daerah-potensi-banjir-di-provinsi-jawa-timur/555559424-prakiraan-bulanan-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bu ... show less	Hacking Web App Attack
🇨🇭 flaus	2021-08-22 23:40:32 (5 years ago)		Brute-Force SSH
🇨🇭 flaus	2021-06-10 08:58:16 (5 years ago)		Brute-Force SSH
🇨🇭 flaus	2021-06-04 00:43:25 (5 years ago)		Brute-Force SSH

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.15

🇺🇸 54.242.243.244

🇰🇪 41.139.187.217

🇫🇷 2001:41d0:33d:9200::409

🇳🇱 195.178.110.232

🇺🇸 194.180.237.185

🇧🇷 172.69.138.66

🇧🇷 170.247.38.143

🇬🇧 35.203.211.225

🇫🇷 185.177.72.7

🇫🇷 143.244.57.90

🇺🇸 104.243.133.18

🇳🇱 104.23.170.14

🇺🇸 98.174.32.3

🇷🇴 92.118.39.202

🇺🇸 71.27.86.44

🇺🇸 2a03:2880:f806:42::

🇺🇸 2a03:2880:f806:36::

🇺🇸 199.96.165.156

🇳🇱 195.178.110.217