JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.99.185.81

209.99.185.81 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	SKN Subnet & Telecom Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS402253
Domain Name	skntelecom.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.99.185.81

Whois 209.99.185.81

IP Abuse Reports for 209.99.185.81:

This IP address has been reported a total of 56 times from 49 distinct sources. 209.99.185.81 was first reported on June 8th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 psauxit	2026-06-16 00:22:20 (6 hours ago)	Fail2Ban - POSTFIX DNSBL listed sender, DNSBL Rank \> 3	Email Spam Spoofing Brute-Force
🇨🇦 senkodev	2026-06-15 20:06:08 (10 hours ago)	2026-06-15T20:05:52.669561Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 209.99.185.81:5329 ... show more 2026-06-15T20:05:52.669561Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 209.99.185.81:53296 (158.69.22.11:2222) [session: 703758244967] 2026-06-15T20:06:08.386345Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 209.99.185.81:54956 (158.69.22.11:2222) [session: 8c146789b0f7] ... show less	Brute-Force SSH
🇩🇪 guldkage	2026-06-15 17:25:13 (13 hours ago)	Unauthorized connection attempt detected from IP address 209.99.185.81 to port 22 (ger-03) [c]	Brute-Force Exploited Host
🇺🇸 LotPhantom	2026-06-15 15:51:23 (15 hours ago)	2026-06-15T15:49:47.446631+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-06-15T15:49:47.446631+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=209.99.185.81 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=56862 PROTO=TCP SPT=14169 DPT=14662 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-15T15:51:22.877699+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=209.99.185.81 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=1886 PROTO=TCP SPT=47125 DPT=33333 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇩🇪 ecs.ge	2026-06-15 15:47:44 (15 hours ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇫🇮 sonot	2026-06-15 14:53:32 (16 hours ago)	Blocked by UFW on mail [9943/tcp] \| SPT: 21419 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [9943/tcp] \| SPT: 21419 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇬 anotherwatcher	2026-06-15 14:46:40 (16 hours ago)	bad bot	Bad Web Bot
🇸🇬 securejdprop	2026-06-15 14:24:22 (16 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 64). Ip 209.99.185.81 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-15 14:24:20.852319073 +0000 UTC show less	Hacking Web App Attack
🇫🇷 Petre 21_ip	2026-06-15 09:29:14 (21 hours ago)	2026-06-15T11:29:13.579774+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-15T11:29:13.579774+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=209.99.185.81 DST=155.133.26.57 LEN=28 TOS=0x00 PREC=0x00 TTL=53 ID=30005 DF PROTO=UDP SPT=45724 DPT=7016 LEN=8 ... show less	Port Scan
🇰🇷 winter	2026-06-15 03:53:57 (1 day ago)	Connection attemp from 209.99.185.81 to port 22	Brute-Force SSH
🇺🇸 mutebot.net	2026-06-15 03:02:13 (1 day ago)	SRC=209.99.185.81, PROTO=TCP, SPT=19852, DPT=25	Port Scan
🇩🇪 london2038.com	2026-06-15 02:48:53 (1 day ago)	Connection atttempts against closed TCP ports Jun 15 04:41:23 BLOCK SRC=209.99.185.81 LEN=60 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 15 04:41:23 BLOCK SRC=209.99.185.81 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=56392 PROTO=TCP SPT=3187 DPT=22 WINDOW=64240 RES=0x00 SYN Jun 15 04:47:32 BLOCK SRC=209.99.185.81 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55649 PROTO=TCP SPT=50555 DPT=1300 WINDOW=64240 RES=0x00 SYN Jun 15 04:48:53 BLOCK SRC=209.99.185.81 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=29069 PROTO=TCP SPT=12066 DPT=1025 WINDOW=64240 RES=0x00 SYN show less	Port Scan
🇦🇹 centurion	2026-06-15 01:57:04 (1 day ago)	Unauthorized attempt on coresecret [1293/tcp] Source port: 1132 TTL: 55 Packet length: 60 TOS: 0x00 ... show more Unauthorized attempt on coresecret [1293/tcp] Source port: 1132 TTL: 55 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 pingusurmars	2026-06-15 01:46:06 (1 day ago)	Blocked by UFW on ampereone [514/tcp] Source port: 58957 TTL: 54 Packet length: 60 TOS: 0x00 This r ... show more Blocked by UFW on ampereone [514/tcp] Source port: 58957 TTL: 54 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-06-15 01:26:03 (1 day ago)	Unauthorized attempt on cendev [113/tcp] Source port: 30743 TTL: 55 Packet length: 60 TOS: 0x00 http ... show more Unauthorized attempt on cendev [113/tcp] Source port: 30743 TTL: 55 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.244.143.209

🇩🇪 167.94.146.58

🇵🇭 119.94.69.129

🇫🇷 81.220.90.72

🇺🇸 45.79.186.176

🇵🇰 39.32.41.98

🇫🇷 217.113.194.189

🇮🇶 185.166.25.150

🇨🇳 183.197.52.77

🇧🇷 177.155.133.175

🇺🇸 172.104.215.164

🇨🇳 101.126.95.172

🇺🇸 91.230.168.74

🇳🇱 86.54.31.34

🇮🇳 49.204.74.149

🇧🇷 45.185.208.108

🇬🇧 35.203.211.239

🇳🇱 34.141.139.129

🇺🇸 2604:a880:400:d1:0:4:9880:9001

🇧🇷 201.17.133.138