209.99.185.184 Threat Intelligence - Switzerland | IP Address Lookup
ipinfopage
Share on:
General
IP Address
209.99.185.184
Location
🇨🇠Zurich, Switzerland
Network
AS402253
Threat Score
60/100
Attack Intelligence
MITRE ATT&CK Techniques
T1046 - Network Service Scanning, T1059.004 - Unix Shell, T1078 - Valid Accounts, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.001 - Password Guessing, T1110 - Brute Force, T1190 - Exploit Public-Facing Application, T1210 - Exploitation of Remote Services, T1496 - Resource Hijacking
Noticed
26 times
Protocols Attacked
combined ssh
Countries Attacked
Malaysia
Passive DNS
ltdsentinelguard.com
Open Ports Detected
1352233894434455357598580
Geographic Location
Country
Switzerland
City
Zurich
Region
Zurich
Coordinates
47.3643, 8.5437
Network Information
ASN
AS402253
Organization
SKN Subnet & Telecom Ltd
Network
AS402253 SKN Subnet & Telecom Ltd
WHOIS Information
NetRange
209.99.184.0 - 209.99.191.255
CIDR
209.99.184.0/21
NetName
SSTL-49
NetHandle
NET-209-99-184-0-1
Parent
NET209 (NET-209-0-0-0-0)
NetType
Direct Allocation
Organization
SKN Subnet & Telecom Ltd (SSTL-49)
RegDate
2026-04-07
Updated
2026-09-11
Comment
https://skntelecom.com
Ref
https://rdap.arin.net/registry/ip/209.99.184.0
OrgName
SKN Subnet & Telecom Ltd
OrgId
SSTL-49
Address
Harnilton Development
City
Charlestown
Country
KN
OrgAbuseHandle
ABUSE9540-ARIN
OrgAbuseName
Abuse
OrgAbusePhone
+1-869-569-0074
OrgAbuseEmail
abuse@skntelecom.com
OrgAbuseRef
https://rdap.arin.net/registry/entity/ABUSE9540-ARIN
OrgTechHandle
CORPO54-ARIN
OrgTechName
Corporation, SGC
OrgTechPhone
+1-869-469-0074
Attack Logs
| Date | Target Location | Protocol | Link |
|---|---|---|---|
| 2026-10-10 | Perth, Australia | Multiple | View Log |
| 2026-10-08 | Digitaloceanlondon Combined | Multiple | View Log |
| 2026-10-08 | Perth, Australia | Multiple | View Log |
| 2026-10-08 | London, UK | SSH | View Log |
Disclaimer
This page contains threat intelligence information for the IPv4 address 209.99.185.184 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only, and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.