104.11.91.89
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- AT&T Enterprises, LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS7018
- Hostname(s)
- 104-11-91-89.lightspeed.miamfl.sbcglobal.net
- Domain Name
- att.com
- Country
- 🇺🇸 United States of America
- City
- Miami, Florida
Abuse Reports
Total reports
10 from
9 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇿🇦 maximonline.co.za |
Brute Force IMAP AUTH Attack
|
Brute-Force | |
| 🇩🇪 Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: Cluster Berater de17848 (57 IPs/15 Min)
|
Hacking Bad Web Bot Web App Attack | |
| Anonymous |
Unauthorized bot with fake user agent
|
Hacking | |
| 🇨🇦 zXero |
Fail2Ban automatic report - jail: dovecot-iptables
|
Brute-Force SSH DDoS Attack | |
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-11T07:05:02Z.
|
Bad Web Bot | |
| Anonymous |
Web application attack detected.
|
Web App Attack | |
| 🇬🇧 D3monite |
Attempted Brute Force (cpaneld)
|
Brute-Force | |
| 🇺🇸 ipblock.com |
IPBlock protected site ID [4055-d][s=01].
Persistent 404, vulnerability scanner
|
Hacking Bad Web Bot Web App Attack | |
| 🇺🇸 stechusa |
[Askari] | Behavior: HTTP/1.1 over TLS, Outdated browser, Concurrent page load during attack, Slow-read attack, Targeting specific pages
|
Bad Web Bot DDoS Attack | |
| 🇺🇸 stechusa |
ELEVATED_THREAT | 482 IPs targeting /brand.html | URL template shared by 196 IPs: /brand.html?bulb_shape=*&bulb_shape_type=*&bulb_type=*&mode=list&p=* | Facet request during elevated threat (facet_ratio=0.95, unique_ips=671)
|
Bad Web Bot DDoS Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown