JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.99.189.152

209.99.189.152 was found in our database!

This IP was reported 121 times. Confidence of Abuse is 100%: ?

100%

ISP	SKN Subnet & Telecom Ltd
Usage Type	Fixed Line ISP
ASN	AS402253
Domain Name	skntelecom.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.99.189.152

Whois 209.99.189.152

IP Abuse Reports for 209.99.189.152:

This IP address has been reported a total of 121 times from 89 distinct sources. 209.99.189.152 was first reported on July 24th 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 hbrks	2026-07-27 16:01:00 (8 minutes ago)	29 attack(s) detected, such as these: {"event":"web_block","ip":"209.99.189.152","host":"adalta.info ... show more 29 attack(s) detected, such as these: {"event":"web_block","ip":"209.99.189.152","host":"adalta.info","request":"GET /cloud-init/user-data HTTP/1.1","user_agent":"","reason":"Status-404","timestamp":"2026-07-27T16:01:00 00:00","logentry":"adalta.info 209.99.189.152 - - [27/Jul/2026:18:01:00 0200] \"GET /cloud-init/user-data HTTP/1.1\" 404 9730 \"-\" \"Mozilla/5.0 (compatible; SecurityResearch/1.0)\" \"172.25.79.57:3000\""} * Report Details : https://p4u.xyz/YB9GQE37B4J/1 IP Details *: https://p4u.xyz/YB9GQE37B4J/2 show less	Web Spam Hacking Bad Web Bot
Anonymous	2026-07-27 15:58:50 (11 minutes ago)	automatically banned	Brute-Force Web App Attack
🇬🇧 WebNiraj	2026-07-27 15:58:46 (11 minutes ago)	(mod_security) mod_security (id:949110) triggered by 209.99.189.152 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:949110) triggered by 209.99.189.152 (US/United States/-): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇦🇺 nzhost.co.nz	2026-07-27 15:56:16 (13 minutes ago)	$f2bV_matches	Hacking Brute-Force
🇩🇪 itsolon	2026-07-27 15:51:26 (18 minutes ago)	[27/Jul/2026:17:51:18 +0200] 178516747855.912593 209.99.189.152 0 217.154.7.177 443 [27/Jul/2026:17: ... show more [27/Jul/2026:17:51:18 +0200] 178516747855.912593 209.99.189.152 0 217.154.7.177 443 [27/Jul/2026:17:51:20 +0200] 178516748064.587468 209.99.189.152 0 217.154.7.177 443 [27/Jul/2026:17:51:24 +0200] 178516748467.373540 209.99.189.152 0 217.154.7.177 443 [27/Jul/2026:17:51:26 +0200] 178516748645.546952 209.99.189.152 0 217.154.7.177 443 [27/Jul/2026:17:51:26 +0200] 178516748661.796813 209.99.189.152 0 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇩🇪 hbrks	2026-07-27 15:44:19 (25 minutes ago)	5 attack(s) detected, such as these: {"event":"web_block","ip":"209.99.189.152","host":"adalta.info" ... show more 5 attack(s) detected, such as these: {"event":"web_block","ip":"209.99.189.152","host":"adalta.info","request":"GET /var/log/system.log HTTP/1.1","user_agent":"","reason":"Status-301","timestamp":"2026-07-27T15:44:19 00:00","logentry":"adalta.info 209.99.189.152 - - [27/Jul/2026:17:44:19 0200] \"GET /var/log/system.log HTTP/1.1\" 301 169 \"-\" \"Mozilla/5.0 (compatible; SecurityResearch/1.0)\" \"-\""} * Report Details : https://p4u.xyz/X77OYCXHB54/1 IP Details *: https://p4u.xyz/X77OYCXHB54/2 show less	Web Spam Hacking Bad Web Bot
🇮🇹 Inartis	2026-07-27 15:41:58 (27 minutes ago)	209.99.189.152 - - [27/Jul/2026:17:41:47 +0200] "GET /.env.test HTTP/1.1" 302 453 "-" "Mozilla/5.0 ( ... show more 209.99.189.152 - - [27/Jul/2026:17:41:47 +0200] "GET /.env.test HTTP/1.1" 302 453 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)" 209.99.189.152 - - [27/Jul/2026:17:41:53 +0200] "GET /.env.example HTTP/1.1" 404 46807 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)" 209.99.189.152 - - [27/Jul/2026:17:41:57 +0200] "GET /.env.sample HTTP/1.1" 404 41556 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 15:41:41 (28 minutes ago)	Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted ... show more Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted access to sensitive configuration files and common vulnerability paths. show less	Brute-Force Web App Attack
🇺🇸 jsjdmediallc	2026-07-27 15:20:04 (49 minutes ago)	Auto-blocked: score 73 (threshold 10). Tier: HIGH. Hits: 29. Flags: 404-scanner, secret-file, env-fi ... show more Auto-blocked: score 73 (threshold 10). Tier: HIGH. Hits: 29. Flags: 404-scanner, secret-file, env-file. Paths: /dist/config.js, /assets/config.js, /public/config.js, /api/settings, /api/env show less	Bad Web Bot Web App Attack
🇩🇪 hbrks	2026-07-27 15:13:07 (56 minutes ago)	19 attack(s) detected, such as these: {"event":"web_block","ip":"209.99.189.152","host":"adalta.info ... show more 19 attack(s) detected, such as these: {"event":"web_block","ip":"209.99.189.152","host":"adalta.info","request":"GET /core/settings.py HTTP/1.1","user_agent":"","reason":"Status-404","timestamp":"2026-07-27T15:13:07 00:00","logentry":"adalta.info 209.99.189.152 - - [27/Jul/2026:17:13:07 0200] \"GET /core/settings.py HTTP/1.1\" 404 9726 \"-\" \"Mozilla/5.0 (compatible; SecurityResearch/1.0)\" \"172.25.79.57:3000\""} * Report Details : https://p4u.xyz/Z12WXD2GM8S/1 IP Details *: https://p4u.xyz/Z12WXD2GM8S/2 show less	Web Spam Hacking Bad Web Bot
🇺🇦 URAN Publishing Service	2026-07-27 15:12:10 (57 minutes ago)	209.99.189.152 - - [27/Jul/2026:18:12:09 +0300] "GET /.env.test HTTP/1.1" 404 729 "-" "Mozilla/5.0 ( ... show more 209.99.189.152 - - [27/Jul/2026:18:12:09 +0300] "GET /.env.test HTTP/1.1" 404 729 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)" ... show less	Web App Attack
🇺🇸 infra-monitor	2026-07-27 15:00:04 (1 hour ago)	Automated ban via infra-monitor: mgmt-path-probe	Port Scan Web App Attack
Anonymous	2026-07-27 14:59:24 (1 hour ago)	(PERMBLOCK) 209.99.189.152 (US/United States/-) has had more than 4 temp blocks in the last 86400 se ... show more (PERMBLOCK) 209.99.189.152 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-07-27 14:19:32 (1 hour ago)	wp admin page access attempt ...	Hacking Web App Attack
🇩🇪 macrob	2026-07-27 14:08:30 (2 hours ago)	2026/07/27 14:08:29 [error] 4144890#4144890: 417383557 access forbidden by rule, client: 209.99.189 ... show more 2026/07/27 14:08:29 [error] 4144890#4144890: 417383557 access forbidden by rule, client: 209.99.189.152, server: antzfund.com, request: "GET /app/etc/config.php HTTP/1.1", host: "antzfund.com" 2026/07/27 14:08:29 [error] 4144890#4144890: 417383564 access forbidden by rule, client: 209.99.189.152, server: antzfund.com, request: "GET /var/log/exception.log HTTP/1.1", host: "antzfund.com" 2026/07/27 14:08:29 [error] 4144890#4144890: 417383108 access forbidden by rule, client: 209.99.189.152, server: antzfund.com, request: "GET /var/log/system.log HTTP/1.1", host: "antzfund.com" ... show less	Web App Attack

Showing 1 to 15 of 121 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.149.156.160

🇪🇹 196.189.126.185

🇨🇴 190.6.176.90

🇮🇳 143.110.183.139

🇸🇬 101.47.158.56

🇫🇷 91.231.89.8

🇺🇸 64.227.110.161

🇨🇳 27.155.92.28

🇳🇱 20.160.177.240

🇮🇳 14.140.205.174

🇰🇿 2.134.15.12

🇫🇮 2a00:1450:4010:c1c::120

🇨🇳 218.200.9.182

🇬🇧 195.96.139.113

🇧🇷 191.210.133.134

🇧🇷 191.52.240.198

🇬🇧 185.247.137.232

🇺🇦 176.120.110.1

🇩🇪 167.94.145.22

🇨🇮 102.67.202.128