JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 99.253.251.45

99.253.251.45 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 48%: ?

48%

ISP	Rogers Cable Inc. BLOOR
Usage Type	Fixed Line ISP
ASN	AS812
Hostname(s)	pool-99-253-251-45.cpe.net.cable.rogers.com
Domain Name	rogers.com
Country	🇨🇦 Canada
City	Newmarket, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 99.253.251.45

Whois 99.253.251.45

IP Abuse Reports for 99.253.251.45:

This IP address has been reported a total of 28 times from 17 distinct sources. 99.253.251.45 was first reported on August 8th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-26 16:06:56 (14 hours ago)	Not following 301 redirects — wasted requests \| host: ammb.fr \| method: GET \| path: /wp-json/wp-user ... show more Not following 301 redirects — wasted requests \| host: ammb.fr \| method: GET \| path: /wp-json/wp-user-manager/v1/users \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| src_port: 52310 \| 2026-10-26 16:06 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-26 11:55:35 (18 hours ago)	(mod_security) mod_security (id:225170) triggered by 99.253.251.45 (pool-99-253-251-45.cpe.net.cable ... show more (mod_security) mod_security (id:225170) triggered by 99.253.251.45 (pool-99-253-251-45.cpe.net.cable.rogers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 07:55:28.388196 2026] [security2:error] [pid 16132:tid 16132] [client 99.253.251.45:60648] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thehealthyplaceclayton.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thehealthyplaceclayton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at8_sFXfKIZR9Tb6Qt4W3wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-10-24 10:05:03 (2 days ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇩🇪 LRob	2026-10-20 13:54:55 (6 days ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 \| 2026-10-20 13:54 UTC show less	Bad Web Bot
🇫🇷 LRob	2026-10-19 23:48:37 (1 week ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-13 21:47:15 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 99.253.251.45 (pool-99-253-251-45.cpe.net.cable ... show more (mod_security) mod_security (id:225170) triggered by 99.253.251.45 (pool-99-253-251-45.cpe.net.cable.rogers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:47:11.933801 2026] [security2:error] [pid 2869:tid 2869] [client 99.253.251.45:55042] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cm-salon.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cm-salon.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as6m3-8cAf--8DuFol99VwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 13:06:50 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 99.253.251.45 (pool-99-253-251-45.cpe.net.cable ... show more (mod_security) mod_security (id:225170) triggered by 99.253.251.45 (pool-99-253-251-45.cpe.net.cable.rogers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 09:06:46.074240 2026] [security2:error] [pid 29707:tid 29707] [client 99.253.251.45:55404] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|xcarsubscription.com.bamedica.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "xcarsubscription.com.bamedica.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as4s5ldCu61lUIHqk4id3AAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 gigatech	2026-10-11 19:05:03 (2 weeks ago)	Webserver Probing	Web App Attack
🇩🇪 thesimonmanuel	2026-10-09 18:51:04 (2 weeks ago)	99.253.251.45 - [redacted] [10/Oct/2026:00:21:03 +0530] "GET /wp-json/wp/v2/users/me HTTP/1.1" 401 1 ... show more 99.253.251.45 - [redacted] [10/Oct/2026:00:21:03 +0530] "GET /wp-json/wp/v2/users/me HTTP/1.1" 401 107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 09:04:22 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 99.253.251.45 (pool-99-253-251-45.cpe.net.cable ... show more (mod_security) mod_security (id:225170) triggered by 99.253.251.45 (pool-99-253-251-45.cpe.net.cable.rogers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 05:04:16.865216 2026] [security2:error] [pid 27654:tid 27654] [client 99.253.251.45:45342] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|plazahacienda.imerka.com.mx\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "plazahacienda.imerka.com.mx"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asdckDXTj99MKIvUlI9D_AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman	2026-10-01 00:10:02 (3 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇺🇸 鬼影233	2026-09-25 03:33:29 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 nationaleventpros.com	2026-09-24 15:23:28 (1 month ago)	WordPress login attempt	Brute-Force
🇺🇸 鬼影233	2026-09-24 13:29:25 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 22:56:46 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a0f:ca80:b00b:1d9b::5

🇺🇸 209.139.45.148

🇳🇱 195.178.110.159

🇺🇸 170.106.194.247

🇺🇸 162.216.149.89

🇵🇰 124.29.214.78

🇺🇸 104.23.251.175

🇫🇷 91.231.89.76

🇫🇷 89.93.134.82

🇯🇵 34.146.48.116

🇭🇰 20.205.15.223

🇦🇺 13.54.83.96

🇻🇳 2405:4802:9435:2e0:fccf:c39b:9232:1fae

🇺🇸 216.25.89.68

🇺🇸 202.81.208.72

🇨🇴 190.27.25.234

🇲🇽 189.190.168.131

🇭🇰 188.253.126.196

🇧🇷 186.192.79.157

🇳🇱 185.196.220.132