99.8.129.103
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- AT&T Enterprises, LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS7018
- Domain Name
- att.com
- Country
- 🇺🇸 United States of America
- City
- Milwaukee, Wisconsin
Abuse Reports
Total reports
30 from
28 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
WordPress login / xmlrpc probing across multiple sites
|
Web App Attack | |
| 🇺🇸 gbutiri |
Automated report: source IP probed nonexistent .php paths on our web server (vulnerability scanning / bad bot).
|
Web App Attack Bad Web Bot | |
| 🇩🇪 dbmwebdesign |
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
|
Brute-Force Web App Attack | |
| 🇨🇭 4server |
|
Hacking Web App Attack | |
| 🇷🇴 iulianh |
80,443
|
Brute-Force SSH | |
| 🇩🇪 Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /[a-z0-9]{1,12}\.php (Match: /xmlrpc.php)
|
Hacking Exploited Host Web App Attack | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-18 UTC.
|
Brute-Force | |
| 🇳🇱 BlueWire Hosting |
Probing websites for vulnerabilities
|
Web App Attack | |
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
(wordpress) Failed wordpress login from 99.8.129.103 (US/United States/-)
|
Brute-Force | |
| 🇩🇪 dbmwebdesign |
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
|
Brute-Force Web App Attack | |
| 🇩🇪 FD-IX |
Fail2Ban: WordPress XML-RPC brute-force attack detected.
|
Bad Web Bot Web App Attack | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇹🇷 oalver |
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /xmlrpc.php (HTTP 404). First seen: 2026-10-17. Risk score: 30/100.
|
Web App Attack | |
| 🇮🇹 Inartis |
99.8.129.103 - - [16/Oct/2026:22:29:31 +0200] "POST /xmlrpc.php HTTP/1.1" 302 7423 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
...
|
Brute-Force Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown