JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.99.189.160

209.99.189.160 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 100%: ?

100%

ISP	SKN Subnet & Telecom Ltd
Usage Type	Fixed Line ISP
ASN	AS402253
Domain Name	skntelecom.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.99.189.160

Whois 209.99.189.160

IP Abuse Reports for 209.99.189.160:

This IP address has been reported a total of 84 times from 70 distinct sources. 209.99.189.160 was first reported on July 25th 2026, and the most recent report was 31 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-27 02:01:54 (31 minutes ago)	wordpress_scan attack on /wp-config.php.bak \| User-Agent: Mozilla/5.0 (compatible; SecurityResearch/ ... show more wordpress_scan attack on /wp-config.php.bak \| User-Agent: Mozilla/5.0 (compatible; SecurityResearch/1.0) \| Detected by PortSense API security system show less	Web App Attack
Anonymous	2026-07-27 01:54:05 (39 minutes ago)	Attempt to access sensitive files	Hacking Web App Attack
🇫🇷 ✨	2026-07-27 01:44:11 (49 minutes ago)	Domain : angular.baxterpearson.co.uk Rule : hack 2026-07-27 01:42:41 *hidden-privacy* GET /.env. ... show more Domain : angular.baxterpearson.co.uk Rule : hack 2026-07-27 01:42:41 *hidden-privacy* GET /.env.bak - 80 - 209.99.189.160 HTTP/1.1 Mozilla/5.0 (compatible; SecurityResearch/1.0) - angular.baxterpearson.co.uk 301 0 0 436 134 26 - - show less	Hacking SQL Injection Brute-Force
🇳🇱 debestelapp	2026-07-27 01:35:06 (58 minutes ago)		Web App Attack
🇫🇷 conseilgouz	2026-07-27 01:31:05 (1 hour ago)	ame-17 : Block hidden directories=>/.env.production(/)	Hacking
🇮🇩 soc-yk	2026-07-27 01:30:13 (1 hour ago)	Type: web_scanning Risk: 100 Events: 399 Evidence: - Automated hostile web probing detected - Repea ... show more Type: web_scanning Risk: 100 Events: 399 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack
🇺🇸 Sling	2026-07-27 01:26:35 (1 hour ago)	Automated detection: IP accessed 8 sensitive endpoints within 30s on api.slingexe.com. Paths: /.env, ... show more Automated detection: IP accessed 8 sensitive endpoints within 30s on api.slingexe.com. Paths: /.env, /.env.production, /.env.local, /.env.backup, /.env.bak, /config/.env, /app/.env, /.env.dev. UA: Mozilla/5.0 (compatible; SecurityResearch/1.0). show less	Web App Attack Bad Web Bot Hacking
🇩🇪 piticu iuli	2026-07-27 01:24:12 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted] 209.99.189.160 (CH/Switzerland/-)	SQL Injection
🇩🇪 Vincent Falzon	2026-07-27 01:22:06 (1 hour ago)	SSH brute-force / unauthorized login attempts observed against sovereign infrastructure. Hits: 1. Co ... show more SSH brute-force / unauthorized login attempts observed against sovereign infrastructure. Hits: 1. Confidence: 75. Recent sample: 2026-07-27T01:18:25.069Z: show less	Brute-Force SSH
🇩🇪 louis77	2026-07-27 01:20:34 (1 hour ago)	Sensitive file access attempt - Path: /.env, Method: GET, UA: Mozilla/5.0 (compatible; SecurityResea ... show more Sensitive file access attempt - Path: /.env, Method: GET, UA: Mozilla/5.0 (compatible; SecurityResearch/1.0) show less	Web App Attack Hacking
🇺🇸 Omega Threat-ID	2026-07-27 01:16:05 (1 hour ago)	Omega Point Threat ID honeypot sensor observed: abuse-reported	Port Scan
🇵🇫 www.gregorymariani.com	2026-07-27 01:11:00 (1 hour ago)	2026-07-25 16:06:05,928 fail2ban.actions [966]: NOTICE [k8s-nginx-404] Ban 209.99.189.160 20 ... show more 2026-07-25 16:06:05,928 fail2ban.actions [966]: NOTICE [k8s-nginx-404] Ban 209.99.189.160 2026-07-26 00:23:10,695 fail2ban.actions [966]: NOTICE [k8s-nginx-404] Ban 209.99.189.160 2026-07-26 14:48:45,704 fail2ban.actions [966]: NOTICE [k8s-nginx-404] Ban 209.99.189.160 ... show less	Exploited Host
Anonymous	2026-07-27 01:09:53 (1 hour ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Event ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=admin.incogvps.com; Paths=/.env,/api/.env,/app/.env,/config/.env,/server/.env; Country=US; ASN=0 show less	Hacking Web App Attack
🇩🇪 lolyay	2026-07-27 01:07:16 (1 hour ago)	209.99.189.160 - - [27/Jul/2026:01:07:15 +0000] "GET /.env HTTP/1.1" 200 203 "-" "Mozilla/5.0 (compa ... show more 209.99.189.160 - - [27/Jul/2026:01:07:15 +0000] "GET /.env HTTP/1.1" 200 203 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)" 209.99.189.160 - - [27/Jul/2026:01:07:15 +0000] "GET /.env.production HTTP/1.1" 200 203 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)" ... show less	Web App Attack Bad Web Bot
🇨🇭 4server	2026-07-27 01:05:28 (1 hour ago)	[MonJul2703:05:21.8472632026][security2:error][pid2417029:tid2417158][client209.99.189.160:0]ModSecu ... show more [MonJul2703:05:21.8472632026][security2:error][pid2417029:tid2417158][client209.99.189.160:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"aidweb.ch\"][uri\"/.env\"][unique_id\"amau0e8jtctUczNeL-6zdgAAAIA\"] show less	Hacking Web App Attack

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.40

🇹🇼 198.235.24.37

🇩🇪 194.187.176.146

🇺🇸 159.223.184.226

🇮🇳 122.170.108.81

🇧🇫 102.178.147.163

🇺🇸 52.242.242.147

🇺🇸 52.88.79.118

🇨🇷 201.192.183.171

🇧🇪 198.235.24.255

🇧🇪 198.235.24.252

🇺🇸 198.12.254.228

🇺🇸 165.154.173.21

🇮🇳 103.82.210.181

🇷🇺 94.41.249.202

🇯🇵 8.216.100.78

🇩🇪 2a09:bac5:27b8:18fa::27d:a4

🇨🇭 209.99.190.113

🇬🇹 200.12.39.21

🇧🇪 198.235.24.249