JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.99.185.118

209.99.185.118 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 100%: ?

100%

ISP	SKN Subnet & Telecom Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS402253
Domain Name	skntelecom.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.99.185.118

Whois 209.99.185.118

IP Abuse Reports for 209.99.185.118:

This IP address has been reported a total of 79 times from 66 distinct sources. 209.99.185.118 was first reported on June 8th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-17 13:31:30 (11 hours ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 sefinek.net	2026-06-17 05:46:43 (19 hours ago)	Blocked by UFW on NY01 [55555/tcp] \| SPT: 48806 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on NY01 [55555/tcp] \| SPT: 48806 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 security.rdmc.fr	2026-06-16 17:11:19 (1 day ago)	IP in Malicious Database	Web App Attack
🇩🇪 Trapper67	2026-06-16 15:04:13 (1 day ago)	Port Scan detected from 209.99.185.118 (Unknown). 11 hits in the last 215 seconds; Ports: ; Direc ... show more Port Scan* detected from 209.99.185.118 (Unknown). 11 hits in the last 215 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Jun 16 15:54:30 kernel: Firewa show less	Port Scan
🇩🇪 Luhte	2026-06-16 11:04:07 (1 day ago)	Unsolicited TCP connection from 209.99.185.118 to port 0 at 2026-06-16T11:04:07Z. Source IP complete ... show more Unsolicited TCP connection from 209.99.185.118 to port 0 at 2026-06-16T11:04:07Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 Luhte	2026-06-16 09:34:28 (1 day ago)	Unsolicited TCP connection from 209.99.185.118 to port 0 at 2026-06-16T09:34:28Z. Source IP complete ... show more Unsolicited TCP connection from 209.99.185.118 to port 0 at 2026-06-16T09:34:28Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 wupinyin	2026-06-16 08:05:02 (1 day ago)	CrowdSec ban: ET DROP Spamhaus DROP Listed Traffic Inbound group 66	Port Scan Hacking
🇺🇸 en0	2026-06-16 06:25:27 (1 day ago)	209.99.185.118 was recorded 3 times by 2 hosts attempting to connect to 3 unique ports. Incident cou ... show more 209.99.185.118 was recorded 3 times by 2 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 3 show less	Port Scan
🇩🇪 psauxit	2026-06-16 00:23:35 (2 days ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Web App Attack Hacking
🇺🇸 chronos	2026-06-16 00:15:29 (2 days ago)	[AUTORAVALT][[15/06/2026 - 21:15:29 -03:00 UTC] Attack from [SKN Subnet & Telecom Ltd] [209.99.185.1 ... show more [AUTORAVALT][[15/06/2026 - 21:15:29 -03:00 UTC] Attack from [SKN Subnet & Telecom Ltd] [209.99.185.118] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
Anonymous	2026-06-15 23:24:43 (2 days ago)		DNS Compromise DDoS Attack
🇩🇪 guldkage	2026-06-15 17:22:30 (2 days ago)	Unauthorized connection attempt detected from IP address 209.99.185.118 to port 1433 (ger-03) [e]	Brute-Force Exploited Host
🇺🇸 www.winos.me	2026-06-15 17:16:04 (2 days ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇺🇸 LotPhantom	2026-06-15 15:50:49 (2 days ago)	2026-06-15T15:45:04.107716+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-06-15T15:45:04.107716+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=209.99.185.118 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=55477 PROTO=TCP SPT=49589 DPT=25 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-15T15:50:49.131315+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=209.99.185.118 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=34510 PROTO=TCP SPT=29225 DPT=7000 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇩🇪 ecs.ge	2026-06-15 15:49:52 (2 days ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.50.182.3

🇧🇷 205.210.31.252

🇳🇱 195.178.110.30

🇺🇸 147.185.132.141

🇺🇸 147.185.132.138

🇺🇸 147.185.132.31

🇫🇷 91.196.152.176

🇳🇬 62.173.38.229

🇸🇬 43.156.60.15

🇨🇳 42.121.161.198

🇺🇸 34.197.70.90

🇩🇪 217.181.90.133

🇸🇪 171.25.158.24

🇭🇰 152.32.189.128

🇮🇳 152.32.159.177

🇸🇬 144.48.6.26

🇨🇳 120.48.135.189

🇷🇺 95.71.127.158

🇺🇸 64.62.156.50

🇬🇧 35.203.211.81