99.253.201.144

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
65% Elevated
212 reports
9 reporters Β· latest 3 hours ago
ISP Rogers Cable Inc. YM
Usage Type Fixed Line ISP
ASN AS812
Hostname(s) pool-99-253-201-144.cpe.net.cable.rogers.com
Domain Name rogers.com
Country πŸ‡¨πŸ‡¦ Canada
City Brantford, Ontario

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 99.253.201.144

This IP address has been reported a total of 212 times from 9 distinct sources. 99.253.201.144 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 190 reports; Australia with 7 reports; Netherlands with 7 reports. The most common categories in these recent reports were: Brute-Force 206 times; Hacking 166 times; Port Scan 5 times; SSH 3 times.

Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡ΊπŸ‡Έ IndigoRidge
Brute-Force
πŸ‡ΊπŸ‡Έ cwytech
Fleet-wide ban from the Ghostfleet πŸ‘». Triggered by scenario: cwy/windows-bf-slow-high.
Brute-Force
πŸ‡ΊπŸ‡Έ drewf.ink
[05:15] RDP NLA authentication attempt as Admin (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[04:55] RDP NLA authentication attempt as Admin (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[04:36] RDP NLA authentication attempt as Admin (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[04:19] RDP NLA authentication attempt as Admin (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[03:49] RDP NLA authentication attempt as Admin (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[03:34] RDP NLA authentication attempt as Admin (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[03:15] RDP NLA authentication attempt as Admin (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
πŸ‡¦πŸ‡Ί dyln
Dyls honeypot brute-force: RDP (308 total hits)
Brute-Force
πŸ‡ΊπŸ‡Έ sargetun
Honeypot: RDP probe on port 3389 at 2026-10-03 02:49:27.220463. Automated report from VPS honeypot.
Port Scan
πŸ‡ΊπŸ‡Έ drewf.ink
[02:48] RDP NLA authentication attempt as Admin (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
πŸ‡³πŸ‡± knock
Knock-Knock honeypot brute-force: RDP (119 total hits)
Brute-Force
πŸ‡ΊπŸ‡Έ IndigoRidge
Brute-Force
πŸ‡ΊπŸ‡Έ drewf.ink
[02:23] RDP NLA authentication attempt as Admin (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking

Showing 1 to 15 of 212 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

πŸ‡¦πŸ‡· 201.219.170.19
πŸ‡³πŸ‡± 193.176.31.241
πŸ‡΅πŸ‡Ύ 186.12.184.12
πŸ‡»πŸ‡³ 163.61.110.233
πŸ‡ΊπŸ‡Έ 148.59.129.78
πŸ‡»πŸ‡³ 123.31.31.125
πŸ‡ΊπŸ‡Έ 104.152.52.114
πŸ‡ΊπŸ‡Έ 104.152.52.113
πŸ‡ΊπŸ‡Έ 104.152.52.112
πŸ‡¨πŸ‡¦ 85.217.149.46
πŸ‡ΊπŸ‡Έ 66.132.224.21
πŸ‡ΊπŸ‡Έ 66.132.186.142
πŸ‡³πŸ‡± 45.198.224.124
πŸ‡΅πŸ‡± 45.158.109.43
πŸ‡§πŸ‡· 45.6.35.65
πŸ‡³πŸ‡± 195.178.110.30
πŸ‡©πŸ‡ͺ 193.124.20.235
πŸ‡«πŸ‡· 178.18.245.53
πŸ‡²πŸ‡Ύ 113.211.212.23
πŸ‡ΊπŸ‡Έ 104.152.52.111