JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.9.240.99

Neutral Activity

Abuse Confidence Score

0% Low Risk

14 reports

4 reporters · latest 6 months ago

ISP: AT&T Enterprises, LLC
Usage Type: Fixed Line ISP
ASN: AS7018
Hostname(s): 104-9-240-99.lightspeed.bcvloh.sbcglobal.net
Domain Name: att.com
Country: 🇺🇸 United States of America
City: Olmsted Falls, Ohio

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.9.240.99 has been reported 14 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

14 from 4 distinct reporters

First reported

December 3rd 2023

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-04-15 15:45:08 UTC · (6 months ago)	Blocked by UFW (TCP on 8333) Source port: 43016 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 104.9.240.99) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-01-17 14:21:48 UTC · (9 months ago)	Blocked by UFW (TCP on 7042) Source port: 40312 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 104.9.240.99) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2025-12-29 08:28:28 UTC · (10 months ago)	Blocked by UFW (TCP on 7042) Source port: 42210 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 104.9.240.99) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇻🇳 Xuan Can	2024-01-05 05:28:24 UTC · (2 years ago)	(mod_security) mod_security (id:6) triggered by 104.9.240.99 (US/United States/104-9-240-99.lightspeed.bcvloh.sbcglobal.net): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 05 12:28:15.027223 2024] [security2 ... show more (mod_security) mod_security (id:6) triggered by 104.9.240.99 (US/United States/104-9-240-99.lightspeed.bcvloh.sbcglobal.net): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 05 12:28:15.027223 2024] [security2:error] [pid 30979:tid 47154945120000] [client 104.9.240.99:64362] [client 104.9.240.99] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZZeTb-1yWJOFCcCauG1WjQAAABY"], referer: https://kb.pavietnam.vn/ show less	Brute-Force SSH
🇺🇸 MortimerCat	2023-12-30 14:17:23 UTC · (2 years ago)	Attempting to exploit via a http POST	Web App Attack
🇦🇺 MAGIC	2023-12-28 10:03:10 UTC · (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2023-12-25 13:09:34 UTC · (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇻🇳 Xuan Can	2023-12-22 03:37:09 UTC · (2 years ago)	(mod_security) mod_security (id:6) triggered by 104.9.240.99 (US/United States/104-9-240-99.lightspeed.bcvloh.sbcglobal.net): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 22 10:37:02.785786 2023] [security2 ... show more (mod_security) mod_security (id:6) triggered by 104.9.240.99 (US/United States/104-9-240-99.lightspeed.bcvloh.sbcglobal.net): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 22 10:37:02.785786 2023] [security2:error] [pid 20153:tid 47627259406080] [client 104.9.240.99:58607] [client 104.9.240.99] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZYUEXogDja2xdzVZMBT7KQAAANU"], referer: https://kb.pavietnam.vn/ show less	Brute-Force SSH
🇦🇺 MAGIC	2023-12-19 14:08:29 UTC · (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2023-12-17 00:11:53 UTC · (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2023-12-13 06:12:35 UTC · (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 MortimerCat	2023-12-09 00:14:01 UTC · (2 years ago)	Attempting to exploit via a http POST	Web App Attack
🇻🇳 Xuan Can	2023-12-04 09:57:00 UTC · (2 years ago)	(mod_security) mod_security (id:6) triggered by 104.9.240.99 (US/United States/104-9-240-99.lightspeed.bcvloh.sbcglobal.net): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 04 16:56:50.316202 2023] [security2 ... show more (mod_security) mod_security (id:6) triggered by 104.9.240.99 (US/United States/104-9-240-99.lightspeed.bcvloh.sbcglobal.net): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 04 16:56:50.316202 2023] [security2:error] [pid 26679:tid 47982874916608] [client 104.9.240.99:65377] [client 104.9.240.99] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZW2iYguMtbBACLE01ZqHFgAAAMU"], referer: https://kb.pavietnam.vn/ show less	Brute-Force SSH
🇻🇳 Xuan Can	2023-12-03 08:17:58 UTC · (2 years ago)	(mod_security) mod_security (id:6) triggered by 104.9.240.99 (US/United States/104-9-240-99.lightspeed.bcvloh.sbcglobal.net): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 03 15:17:48.859016 2023] [security2 ... show more (mod_security) mod_security (id:6) triggered by 104.9.240.99 (US/United States/104-9-240-99.lightspeed.bcvloh.sbcglobal.net): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 03 15:17:48.859016 2023] [security2:error] [pid 12297:tid 47515909916416] [client 104.9.240.99:64182] [client 104.9.240.99] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZWw5rDbiQB99bRLlmRxpZAAAAAI"], referer: https://kb.pavietnam.vn/ show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2a03:2880:f818:5d::

🇮🇷 217.218.144.25

🇳🇱 193.47.62.69

🇺🇸 172.208.66.11

🇺🇸 98.80.4.13

🇩🇪 85.155.14.246

🇩🇪 82.165.30.127

🇺🇸 57.141.0.47

🇺🇸 47.77.215.172

🇬🇧 35.203.210.79

🇵🇱 176.53.159.197

🇺🇸 129.121.114.109

🇫🇷 91.196.152.149

🇲🇩 85.120.53.48

🇺🇸 65.49.1.82

🇺🇸 48.217.234.186

🇻🇳 45.251.115.132

🇸🇪 31.208.252.157

🇷🇴 2.57.121.25

🇲🇽 189.142.1.231