Check an IP Address, Domain Name, Subnet, or ASN

99.243.62.228 was found in our database!

$ whois 99.243.62.228

country·🇨🇦 Canada

city·London

isp·Rogers Communications Canada Inc.

asn·AS812

network·Standard

$ sikker risk 99.243.62.228scoring →

confidence

78%High

first_seen·Mar 28, 2026

last_seen·21m ago

sessions·3

events·3

$ sikker protocols 99.243.62.228

SSH

3 / 3

$ sikker summary 99.243.62.228

99.243.62.228 has a threat confidence score of 78%. This IP address from Canada (AS812, Rogers Communications Canada Inc.) has been observed in 3 honeypot sessions targeting SSH protocols. Detected attack patterns include ssh routeros cloud probe and telegram sms artifact discovery. First observed on March 28, 2026, most recently active March 28, 2026.

$ sikker behaviors 99.243.62.228catalog →

highSsh Routeros Cloud Probe And Telegram Sms Artifact Discovery3x

SSH post-auth sequence running RouterOS cloud/DDNS commands, Telegram data path checks, GSM/SMS artifact searches, and miner process lookups (`ps | grep miner`), preceded by basic system enumeration.

$ sikker primitives 99.243.62.228

ssh_routeros_ip_cloud_print_probe6 ssh_uname_all3 ssh_cat_proc_cpuinfo3 ssh_ps_ef_grep_miner_bracket_case3 ssh_ifconfig_interface_enumeration3 ssh_routeros_user_set_password_id03 ssh_echo_hi_pipe_cat_numbering_test3 ssh_locate_telegram_tdata_identifier3 ssh_routeros_interface_lte_print_probe3 ssh_routeros_ip_cloud_set_ddns_enabled3 ssh_ps_pipe_grep_miner_case_insensitive3 ssh_ls_telegram_tdata_and_gsm_sms_artifacts3

$ sikker related 99.243.62.228

🇨🇦·More threats fromCanada→AS·More threats fromRogers Communications Canada Inc.→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
99.241.36.212	76%	6
99.254.83.132	36%	4
174.114.168.200	37%	1
72.12.142.222	84%	257
72.139.77.114	61%	2

IP Address	Confidence	Events
15.156.234.60	57%	1,066
20.151.201.236	59%	18
142.93.145.126	94%	605
20.116.34.103	100%	136
143.110.215.118	64%	14