Name: Threat Intelligence: 209.99.189.222
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelHIGH55/1001 rule type

11 incidents · confirmed on global blocklist · persistent 7-day campaign · last seen 21d ago

PTR	N/A
Org / ASN	HostRoyale Technologies
Country	🇨🇭 Switzerland
City	Zurich, Zurich
Timezone	Europe/Zurich

Attack Analysis

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

Reports (11)

Date	Severity	Description
8 Sep 2026 - 15:29	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63
8 Sep 2026 - 00:16	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63
6 Sep 2026 - 14:09	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63
5 Sep 2026 - 23:04	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63
5 Sep 2026 - 06:56	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63
4 Sep 2026 - 12:38	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63
4 Sep 2026 - 03:23	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63
2 Sep 2026 - 21:44	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63
2 Sep 2026 - 11:26	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63
1 Sep 2026 - 20:48	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63
1 Sep 2026 - 16:47	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 63

Report for IP: 209.99.189.222

Attack Analysis

Reports (11)

Related IPs — Same /24 Block (209.99.189.0/24)