JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.141.99.138

192.141.99.138 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 20%: ?

20%

ISP	INTERNET SOLUTIONS NETWORK PERU SAC
Usage Type	Fixed Line ISP
ASN	AS271900
Domain Name	isonetperu.com
Country	🇵🇪 Peru
City	Huancayo, Junin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.141.99.138

Whois 192.141.99.138

IP Abuse Reports for 192.141.99.138:

This IP address has been reported a total of 17 times from 14 distinct sources. 192.141.99.138 was first reported on August 30th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 02:03:52 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 192.141.99.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 192.141.99.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 22:03:45.925655 2026] [security2:error] [pid 30415:tid 30415] [client 192.141.99.138:55328] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cookingwithjule.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cookingwithjule.com"] [uri "/"] [unique_id "aqycAeFnW02y9j5R-dXYsAAAABc"], referer: https://dacheckertool.space/dir/results-focused-backlinks-44982 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-19 02:03:39 (1 month ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /31-meilleur-velo-entre-3000-et-4000-euros \| query: order=product.name.asc&q=Famille-iRide-Yucatan-Spark show less	DDoS Attack Web App Attack
Anonymous	2026-08-08 01:15:36 (1 month ago)	Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/244/form_key/2zVyUjG8Kbv0YNrP/ \| UA: Mozilla/5.0 (X11; Linux i686) AppleWebKit/533.1 (KHTML, like Gecko) Chrome/28.0.846.0 Safari/533.1 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-08-07 10:39:27 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇳🇱 soverin	2026-06-05 15:38:11 (3 months ago)	spam	Email Spam
🇷🇸 Smel	2026-05-24 02:49:09 (3 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇮🇩 hermawan	2026-05-23 02:20:06 (3 months ago)	[Sat May 23 09:20:05.039408 2026] [security2:error] [pid 964043:tid 140471484536512] [client 192.141 ... show more [Sat May 23 09:20:05.039408 2026] [security2:error] [pid 964043:tid 140471484536512] [client 192.141.99.138:63258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "624"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "ahEO1cS8Dm5g8m-Uad_WMgABjAE"], referer http://www.baidu.go.id ... show less	Email Spam Hacking
🇹🇷 rtbh.com.tr	2026-03-05 20:11:54 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇸🇬 mypatricks	2026-03-05 07:36:24 (6 months ago)	192.141.99.138 \| Port: 13378 \| DNS: 192.141.99.138 2026-03-05T15:36:23+08:00 America/Lima \| IPs rese ... show more 192.141.99.138 \| Port: 13378 \| DNS: 192.141.99.138 2026-03-05T15:36:23+08:00 America/Lima \| IPs reserved list \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /account/signin/?566b2361c258ddf87df2d389575ba750=1772498706 \| Ref: https://xxxxxx/cart/?7661857fdf0810be69c32156a2eafb05=1772376023b \| Country: PE/Peru/−05:00 IP City: Huancayo macOS 9d7773071ab4680d-EZE/Buenos Aires, Argentina 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇹🇷 rtbh.com.tr	2026-03-04 20:11:53 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇸🇬 mypatricks	2026-03-03 04:11:48 (6 months ago)	192.141.99.138 \| Port: 12593 \| DNS: 192.141.99.138 2026-03-03T12:11:47+08:00 America/Lima \| IPs rese ... show more 192.141.99.138 \| Port: 12593 \| DNS: 192.141.99.138 2026-03-03T12:11:47+08:00 America/Lima \| IPs reserved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0 HTTP/1.1 443 GET \| URL: /customer-self-service/how-to-make-a-payment-through-wechat-pay/?146fd6e03c8c=enabled&18879751a1dd8ee7c45953e3c65e4a4d=1772372696 \| Ref: https://xxxxxx/customer-self-service/how-to-make-a-payment-through-wechat-pay/?abfe12a7ef1c0733bba3a4a549c5854c=1772261344&dcaf140865be1f28f=enabled \| Country: PE/Peru/−05:00 IP City: Huancayo Windows 9d65cc8f8cdc1eaa-EZE/Buenos Aires, Argentina 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
Anonymous	2026-03-02 20:12:16 (6 months ago)	DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less	DDoS Attack Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-23 14:25:29 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-02 19:07:38 (9 months ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2025-10-13 18:02:50 (11 months ago)	Web attack	Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.155.76.14

🇷🇺 188.233.70.195

🇲🇽 187.190.24.197

🇧🇷 177.33.174.66

🇺🇸 162.216.150.30

🇺🇸 155.94.233.59

🇨🇳 117.34.125.173

🇺🇸 74.82.47.14

🇳🇱 45.148.10.141

🇨🇳 42.238.92.27

🇲🇦 41.251.12.3

🇺🇸 34.48.34.28

🇸🇦 2a02:ce0:1002:c8c8:6c49:7a30:7f3d:6cbc

🇺🇸 216.218.206.99

🇦🇷 190.2.22.129

🇺🇸 143.110.234.95

🇩🇪 134.255.252.76

🇩🇪 69.5.169.70

🇳🇱 45.142.193.169

🇺🇸 44.220.136.102