209.99.190.126📋 Copy

# IP Intelligence Briefing: 209.99.190.126/32

Classification: Moderate Risk | Jurisdiction: Switzerland | Infrastructure: Residential Endpoint

## Executive Summary

IP 209.99.190.126 is a residential endpoint assigned to SKN Subnet & Telecom Ltd (ASN: 402253) operating within the 209.99.184.0/21 block in Zurich, Switzerland. The address carries a moderate risk score (50/100) with no active threat indicators. While the IP itself shows no malicious activity, the surrounding /24 subnet exhibits elevated abuse density (0.111) with multiple high-risk neighbors.

## Ownership and Network Classification

• Organization: SKN Subnet & Telecom Ltd
• ASN: 402253
• Network Block: 209.99.184.0/21
• Infrastructure Type: Residential Endpoint
• Geolocation: Zurich, Switzerland (CH)
• Timezone: Europe/Zurich

## Threat Assessment

Current threat profile indicates no active malicious activity:

• Known attacker: No
• Spam source: No
• Tor exit node: No
• Blacklist count: 0
• Abuse confidence score: Not elevated
• DNSBL listings: 2 of 8 total lists

However, the control plane shows route instability (isRouteStable: false) and minimal operator reputation (0.1304), suggesting transient or consumer-grade infrastructure.

## Neighborhood Analysis

The /24 subnet (209.99.190.0/24) contains 9 sibling IPs with mixed risk profiles:

• High Risk Neighbors: 209.99.190.200 (risk: 80), 209.99.190.99 (risk: 65), 209.99.190.113 (risk: 65)
• Medium Risk Neighbors: 209.99.190.115 (risk: 40), 209.99.190.172 (risk: 0 - low), 209.99.190.110 (risk: 25)
• Abuse Density: 0.111 (moderate)

The presence of multiple high-risk IPs in the same /24 suggests this subnet may be associated with residential abuse campaigns or shared hosting environments.

## Historical Activity

Observation history shows 11 signals captured as of 2026-07-30. The IP has demonstrated:

• Consistent residential classification across observations
• No ownership changes
• No persistent malicious activity indicators
• Stable geolocation reporting (Switzerland/Zurich)

## Relationship Graph

The IP maintains relationships to the SSTL-49 network block, confirming network-level attribution to the SKN Subnet & Telecom Ltd infrastructure.

## Recommended Actions

No specific firewall rules or blocking actions recommended at this time. The IP carries a moderate risk score without active threat indicators. However, SOC teams should:

1. Monitor for changes in network role classification

2. Be aware of adjacent high-risk neighbors (209.99.190.200, 209.99.190.99)

3. Consider subnet-level monitoring due to elevated abuse density

Status: Monitor | Action Required: None | Priority: Medium

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.