Report for IP: 99.254.169.138

Threat LevelCRITICAL80/1003 rule types across 2 attack categories
3 incidents on record · 3 rule types · active attack detected · active over 6 days · last seen 4d ago
PTR pool-99-254-169-138.cpe.net.cable.rogers.com

Attack Analysis

Bad Bot Flood
This IP generated over 20 HTTP 4xx errors in 60 seconds using a User-Agent identified as a bad bot (scraper, headless browser, or attack proxy). The high error rate indicates automated probing for vulnerabilities while trying to appear as generic traffic. Legitimate services respect robots.txt and do not flood servers with errors.
WordPress: Brute Force Attack
This IP was blocked attempting to log into a WordPress site's wp-login.php — either from a disallowed country or after exceeding the allowed number of failed login attempts. Automated credential-stuffing and brute-force tools account for the overwhelming majority of this traffic; legitimate users rarely trigger a hard IP block on login alone.
local blocklist

Reports (3)

Date Severity Description
1 Nov 2026 - 14:05 low local blocklist
1 Nov 2026 - 14:05 medium WordPress Login Brute Force Attempt
26 Oct 2026 - 11:44 high Web: Bad bot 4xx flood — 20+ errors in 60s