JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.99.65.24

118.99.65.24 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 42%: ?

42%

ISP	Biznet Networks
Usage Type	Fixed Line ISP
ASN	AS17451
Domain Name	biznetnetworks.com
Country	🇮🇩 Indonesia
City	Malang, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.99.65.24

Whois 118.99.65.24

IP Abuse Reports for 118.99.65.24:

This IP address has been reported a total of 28 times from 18 distinct sources. 118.99.65.24 was first reported on January 28th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-28 10:15:17 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 bps-statistics	2026-07-25 03:52:33 (3 weeks ago)	Malicious Access	Brute-Force
🇺🇸 kosada.com	2026-07-17 05:29:14 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-13 11:37:01 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 07:36:55.613377 2026] [security2:error] [pid 27238:tid 27238] [client 118.99.65.24:25808] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 118.99.65.24 (+1 hits since last alert)\|therealseska.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "therealseska.com"] [uri "/xmlrpc.php"] [unique_id "alTN1xJFA3FEI6xTjmb6dwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 10:07:50 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 06:07:42.299805 2026] [security2:error] [pid 6999:tid 6999] [client 118.99.65.24:17042] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 118.99.65.24 (+1 hits since last alert)\|pearlhomesfw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pearlhomesfw.com"] [uri "/xmlrpc.php"] [unique_id "alS47q2bb6KIYXMySURt3AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-13 08:52:33 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 dynamix	2026-07-13 07:36:52 (1 month ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 06:39:21 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 02:39:15.570861 2026] [security2:error] [pid 27624:tid 27624] [client 118.99.65.24:23049] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 118.99.65.24 (+1 hits since last alert)\|mainefirst.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mainefirst.org"] [uri "/xmlrpc.php"] [unique_id "alSIE9CunQj0hljWo9QWlQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 06:07:25 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 02:07:21.208064 2026] [security2:error] [pid 6136:tid 6136] [client 118.99.65.24:22387] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 118.99.65.24 (+1 hits since last alert)\|guarinofurnituredesigns.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "guarinofurnituredesigns.com"] [uri "/xmlrpc.php"] [unique_id "alSAme0b1ZdyHcRb8OSmWQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-13 05:38:18 (1 month ago)	(xmlrpc) Failed xmlrpc access from 118.99.65.24 (ID/Indonesia/-): 5 in the last 3600 secs (0-122)	Hacking
🇲🇹 Malta	2026-07-13 05:34:34 (1 month ago)	118.99.65.24 - - [13/Jul/2026:07:34:34 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.com"	Hacking Web App Attack
Anonymous	2026-07-13 05:06:05 (1 month ago)	Trying to access config files	Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 04:53:48 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 00:53:41.557401 2026] [security2:error] [pid 22122:tid 22122] [client 118.99.65.24:21538] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 118.99.65.24 (+1 hits since last alert)\|tcit.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tcit.org"] [uri "/xmlrpc.php"] [unique_id "alRvVcOYsyxeVqiqMSwS_wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 03:55:47 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 118.99.65.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 23:55:39.455562 2026] [security2:error] [pid 6277:tid 6277] [client 118.99.65.24:35567] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 118.99.65.24 (+1 hits since last alert)\|artizandecor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "artizandecor.com"] [uri "/xmlrpc.php"] [unique_id "alRhuy8pRuX6PJs3exvheAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-13 02:00:02 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.41

🇮🇳 202.53.94.246

🇳🇱 192.253.248.223

🇲🇽 187.190.167.231

🇧🇷 187.120.19.162

🇺🇦 176.98.8.165

🇨🇳 110.179.80.93

🇮🇹 95.247.208.51

🇨🇦 85.217.149.71

🇳🇱 77.239.124.248

🇨🇳 61.53.91.0

🇺🇸 150.136.214.177

🇯🇵 124.156.228.190

🇩🇪 3.79.134.69

🇹🇭 2403:6200:8000:66:9893:8255:eaf8:7093

🇳🇱 195.178.110.232

🇻🇪 190.120.248.131

🇨🇳 171.217.70.151

🇵🇭 103.149.100.161

🇪🇸 79.72.60.87