JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 99.225.205.8

99.225.205.8 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 51%: ?

51%

ISP	Rogers Cable Inc. YM
Usage Type	Fixed Line ISP
ASN	AS812
Hostname(s)	pool-99-225-205-8.cpe.net.cable.rogers.com
Domain Name	rogers.com
Country	🇨🇦 Canada
City	Guelph, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 99.225.205.8

Whois 99.225.205.8

IP Abuse Reports for 99.225.205.8:

This IP address has been reported a total of 10 times from 8 distinct sources. 99.225.205.8 was first reported on October 12th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cwytech	2026-10-23 02:29:10 (2 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
Anonymous	2026-10-22 04:19:17 (1 day ago)	2026-10-22T06:19:17.193241+02:00 aion wordpress[148630]: Blocked user enumeration attempt from 99.22 ... show more 2026-10-22T06:19:17.193241+02:00 aion wordpress[148630]: Blocked user enumeration attempt from 99.225.205.8 ... show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-10-21 11:35:29 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 99.225.205.8 (pool-99-225-205-8.cpe.net.cable.r ... show more (mod_security) mod_security (id:225170) triggered by 99.225.205.8 (pool-99-225-205-8.cpe.net.cable.rogers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 07:35:21.008909 2026] [security2:error] [pid 28670:tid 28670] [client 99.225.205.8:57118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sharawi-gum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharawi-gum.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atijeVZaWqQDcPwt8qav2gAAAB0"], referer: https://sharawi-gum.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-10-18 06:47:00 (4 days ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-17 01:26:23 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 99.225.205.8 (pool-99-225-205-8.cpe.net.cable.r ... show more (mod_security) mod_security (id:225170) triggered by 99.225.205.8 (pool-99-225-205-8.cpe.net.cable.rogers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 21:26:16.180525 2026] [security2:error] [pid 1480:tid 1480] [client 99.225.205.8:57802] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|modestosoftwater.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modestosoftwater.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atLOuGynWWVOfR0OuoXhuQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 17:05:46 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 99.225.205.8 (pool-99-225-205-8.cpe.net.cable.r ... show more (mod_security) mod_security (id:225170) triggered by 99.225.205.8 (pool-99-225-205-8.cpe.net.cable.rogers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 13:05:39.568940 2026] [security2:error] [pid 27092:tid 27092] [client 99.225.205.8:51622] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|whodatnation.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "whodatnation.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atJZY-cSbXkozURwq-1cKAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-10-14 05:36:24 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇫🇷 masterguru	2026-10-13 09:42:31 (1 week ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 99.225.205.8 (CA/Canada/pool-99-225-205-8.cpe ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 99.225.205.8 (CA/Canada/pool-99-225-205-8.cpe.net.cable.rogers.com): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 Packets-Decreaser.NET	2026-10-12 15:25:52 (1 week ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇷🇺 AbuseIPDB informer	2026-10-12 09:25:02 (1 week ago)	nfdump top talker: 99.225.205.8 \| first seen 2026-10-12 12:25:02.848 \| duration 00:00:00.218 \| flows ... show more nfdump top talker: 99.225.205.8 \| first seen 2026-10-12 12:25:02.848 \| duration 00:00:00.218 \| flows=4 \| packets=87978 \| bytes=64.3 M \| pps=402 \| bps=2.4 M \| bpp=731 \| proto=udp show less	DDoS Attack Exploited Host

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 185.132.230.56

🇺🇸 172.87.4.241

🇵🇰 103.157.200.43

🇿🇦 41.198.155.44

🇬🇧 35.203.210.22

🇺🇸 3.86.114.186

🇳🇱 204.76.203.43

🇲🇽 187.174.238.116

🇬🇧 185.230.216.5

🇧🇷 177.234.190.90

🇹🇷 176.236.127.114

🇺🇸 142.93.90.204

🇻🇳 117.5.152.147

🇯🇵 107.155.15.8

🇫🇷 85.217.140.36

🇬🇧 51.195.215.115

🇮🇳 49.156.83.223

🇸🇬 43.172.198.120

🇨🇳 222.90.142.243

🇳🇱 213.177.179.109