JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.99.1.9

140.99.1.9 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 34%: ?

34%

ISP	Internet Utilities NA LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	iana.org
Country	🇦🇺 Australia
City	Melbourne, Victoria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.99.1.9

Whois 140.99.1.9

IP Abuse Reports for 140.99.1.9:

This IP address has been reported a total of 76 times from 33 distinct sources. 140.99.1.9 was first reported on October 14th 2023, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 Antinson	2026-07-11 01:58:19 (10 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇫🇷 dynamix	2026-07-10 18:28:52 (18 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 DrLex0	2026-07-08 05:05:34 (3 days ago)	Distributed attack from multiple IPs in 140.99.1.0/24 range, poking for WordPress 140.99.1.9 80 - [ ... show more Distributed attack from multiple IPs in 140.99.1.0/24 range, poking for WordPress 140.99.1.9 80 - [08/Jul/2026:05:05:01 +0000] "GET /update/f35.php HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 140.99.1.9 80 - [08/Jul/2026:05:05:34 +0000] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" show less	DDoS Attack Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-06-26 17:29:01 (2 weeks ago)	Aggressive web search of vulnerable pages: /wp-content/x/ /wp-includes/assets/ /wp-includes/fonts/ / ... show more Aggressive web search of vulnerable pages: /wp-content/x/ /wp-includes/assets/ /wp-includes/fonts/ /autoload_classmap/ /wp-content/themes/tflow ... show less	Web App Attack
🇬🇧 consul.to	2026-06-24 05:49:20 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-15 20:43:22 (3 weeks ago)	140.99.1.9 - - [15/Jun/2026:22:43:22 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6 ... show more 140.99.1.9 - - [15/Jun/2026:22:43:22 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/69.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 Site.eu	2026-03-18 01:35:37 (3 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-03-04 08:03:13 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 140.99.1.9 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 140.99.1.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 03:03:07.260574 2026] [security2:error] [pid 18705:tid 18705] [client 140.99.1.9:34923] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|styxwamworld.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "styxwamworld.com"] [uri "/images/stories/themes.php"] [unique_id "aafnOzGXqqrhs0QYSULg_gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-04 06:24:50 (4 months ago)	[redacted] 140.99.1.9 - - [04/Mar/2026:07:24:41 +0100] "GET /admin/function.php HTTP/1.1" 404 1873 " ... show more [redacted] 140.99.1.9 - - [04/Mar/2026:07:24:41 +0100] "GET /admin/function.php HTTP/1.1" 404 1873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" [redacted] 140.99.1.9 - - [04/Mar/2026:07:24:42 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 404 1873 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" [redacted] 140.99.1.9 - - [04/Mar/2026:07:24:43 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 404 1873 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" [redacted] 140.99.1.9 - - [04/Mar/2026:07:24:45 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 1873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" [redacted] 140.99.1.9 - - [04/Mar/2026:07:24:46 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 404 1873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:6 ... show less	Hacking Web App Attack
🇫🇷 Octopuce	2026-03-04 00:30:44 (4 months ago)	Aggressive web search of vulnerable pages: /wp-includes/blocks/group/ /blog/ /wp-content/themes/twen ... show more Aggressive web search of vulnerable pages: /wp-includes/blocks/group/ /blog/ /wp-content/themes/twentytwentyfour/ /wp-includes/interactivity-ap ... show less	Web App Attack
🇷🇺 sms.ru	2026-03-03 19:18:39 (4 months ago)	/wp-admin/images/index.php	Web App Attack
🇳🇱 Site.eu	2026-03-03 16:47:15 (4 months ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Ba-Yu	2026-03-03 04:40:59 (4 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇫🇷 dynamix	2026-03-03 01:07:27 (4 months ago)	Multiple WAF Violations	Web App Attack
🇨🇦 saudetski	2026-03-03 00:03:55 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.180.10.196

🇺🇸 76.158.223.231

🇺🇸 23.234.106.173

🇵🇭 2001:fd8:4704:200:950c:1a9a:74e1:4ef1

🇭🇰 220.246.42.212

🇳🇱 185.156.73.157

🇺🇸 172.234.218.210

🇬🇧 154.16.44.182

🇫🇮 147.185.133.200

🇮🇳 124.253.211.92

🇨🇳 106.75.8.124

🇮🇷 94.184.10.115

🇺🇸 23.234.105.84

🇧🇷 191.54.99.191

🇧🇷 177.1.223.14

🇻🇳 171.244.60.35

🇻🇳 103.186.101.231

🇮🇷 85.185.153.60

🇺🇸 75.91.61.129

🇺🇸 45.140.206.248