JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.99.192.31

165.99.192.31 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 33%: ?

33%

ISP	PT IDN NUSANTARA NETWORK
Usage Type	Fixed Line ISP
ASN	AS134129
Domain Name	idnunethomefiber.net
Country	🇮🇩 Indonesia
City	Depok, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.99.192.31

Whois 165.99.192.31

IP Abuse Reports for 165.99.192.31:

This IP address has been reported a total of 14 times from 12 distinct sources. 165.99.192.31 was first reported on June 29th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-08-24 09:24:16 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.goblinpot.online \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (compatible) \| BODY: {"requests":[]} show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-24 05:12:24 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.budyn.ovh \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (compatible) \| BODY: {"requests":[]} show less	Bad Web Bot Web App Attack
🇳🇱 enpepet	2026-08-18 11:57:11 (2 weeks ago)	GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) CVE-2026-4 ... show more GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) CVE-2026-48908-Scanner URL:/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Port Scan Hacking Brute-Force Bad Web Bot
🇬🇧 blik2108	2026-08-17 01:46:42 (2 weeks ago)	165.99.192.31 - - [17/Aug/2026:01:46:41 +0000] "GET /index.php?option=com_sppagebuilder&task=asset.u ... show more 165.99.192.31 - - [17/Aug/2026:01:46:41 +0000] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 403 119 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) CVE-2026-48908-Scanner" "-" ... show less	Web App Attack
🇺🇸 VanKoh	2026-08-13 16:16:31 (2 weeks ago)	165.99.192.31 - - [13/Aug/2026:10:16:25 -0600] "POST /wp-json/batch/v1 HTTP/1.1" 207 27 "-" "Mozilla ... show more 165.99.192.31 - - [13/Aug/2026:10:16:25 -0600] "POST /wp-json/batch/v1 HTTP/1.1" 207 27 "-" "Mozilla/5.0 (compatible)" 165.99.192.31 - - [13/Aug/2026:10:16:28 -0600] "POST /wp-json/batch/v1 HTTP/1.1" 207 27 "-" "Mozilla/5.0 (compatible)" 165.99.192.31 - - [13/Aug/2026:10:16:29 -0600] "POST /wp-json/batch/v1 HTTP/1.1" 207 27 "-" "Mozilla/5.0 (compatible)" ... show less	Port Scan Web App Attack
Anonymous	2026-08-05 06:30:16 (4 weeks ago)	Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/5693/form_key/nDGr9TJHf3nyVA7Y/ \| UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 5.1; Trident/3.0) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇸🇬 drewf.ink	2026-08-02 09:47:09 (1 month ago)	[09:47] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1. ... show more [09:47] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇨🇭 4server	2026-08-01 02:10:26 (1 month ago)	[SatAug0104:10:20.6853662026][security2:error][pid1520632:tid1521083][client165.99.192.31:0]ModSecur ... show more [SatAug0104:10:20.6853662026][security2:error][pid1520632:tid1521083][client165.99.192.31:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:Via.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"25\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"support-ticino.ch\"][uri\"/wp-json/wp/v2/posts\"][unique_id\"am1VjE8O-7XA2aJjiKThDQAAAQI\"] show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-07-23 07:10:28 (1 month ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇳🇴 cyruz	2026-07-02 22:04:32 (2 months ago)	Email login Brute force	Hacking Brute-Force
🇸🇬 pusathosting.com	2026-07-02 07:40:04 (2 months ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇩🇪 jasperedv.de	2026-07-02 03:35:46 (2 months ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇫🇷 masterguru	2026-07-01 05:19:02 (2 months ago)	wp-comments-post.php request blocked, no referer. Pattern match "wp-comments-post.php" at REQUEST_UR ... show more wp-comments-post.php request blocked, no referer. Pattern match "wp-comments-post.php" at REQUEST_URI. (88520-196) show less	Hacking
🇨🇭 4server	2026-06-29 22:48:20 (2 months ago)	[TueJun3000:48:16.4942442026][security2:error][pid3992630:tid3992695][client165.99.192.31:0]ModSecur ... show more [TueJun3000:48:16.4942442026][security2:error][pid3992630:tid3992695][client165.99.192.31:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:Via.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"25\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"edilmarra.ch\"][uri\"/wp-json/wp/v2/posts\"][unique_id\"akL2MOaeZZKwXW11wlu0TwAAAQQ\"] show less	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇳🇱 195.178.110.60

🇵🇱 194.180.48.130

🇳🇱 193.118.52.222

🇲🇽 187.154.128.189

🇺🇸 161.123.76.211

🇨🇳 123.191.131.159

🇨🇳 106.113.6.209

🇪🇪 95.85.245.227

🇬🇧 82.18.179.96

🇷🇴 80.94.92.234

🇸🇪 46.59.88.25

🇩🇪 34.185.150.77

🇺🇸 2a03:2880:f806:34::

🇪🇹 213.55.79.195

🇨🇴 190.253.153.119

🇺🇸 185.252.169.210

🇺🇸 185.61.219.201

🇲🇽 177.244.29.30

🇸🇬 148.66.142.9