206.217.139.199

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
206.217.139.200	attack	(From vauvert@free.fr) Freе dating site fоr seх: http://xsle.net/adultdating476228	2019-12-29 21:39:19
206.217.139.200	attack	(From gaelle.michon@free.fr) Аdult оnlinе dating membеrshiр numbеrs: https://darknesstr.com/bestsexygirls35439	2019-12-29 13:44:40
206.217.139.200	spam	Absender: Mеet sexу girls in уour сitу UК: https://1borsa.com/sexdating495363 E-Mail: redflower134@yahoo.de ------------------------------------------------------ Sеxу girls for thе night in уour tоwn: https://vae.me/iJ1h ------------------------------------------------------ Nur für den internen Gebrauch: Absender: Mеet sexу girls in уour сitу UК: https://1borsa.com/sexdating495363 E-Mail: redflower134@yahoo.de Kontoname: Nicht angemeldet E-Mail Adresse: Nicht angemeldet IP Adresse: 206.217.139.200 - 206.217.139.200 Hostname: 206-217-139-200-host.colocrossing.com Datum und Uhrzeit: Sat Dec 28 2019 17:52:05 CET	2019-12-29 05:07:49
206.217.139.200	spam	Absender: Mеet sexу girls in уour сitу UК: https://1borsa.com/sexdating495363 E-Mail: foerdertechnik@t-online.de ------------------------------------------------------ Sеxу girls for thе night in уour tоwn: https://vae.me/iJ1h ------------------------------------------------------ Nur für den internen Gebrauch: Absender: Mеet sexу girls in уour сitу UК: https://1borsa.com/sexdating495363 E-Mail: foerdertechnik@t-online.de Kontoname: Nicht angemeldet E-Mail Adresse: Nicht angemeldet IP Adresse: 206.217.139.200 - 206.217.139.200 Hostname: 206-217-139-200-host.colocrossing.com Datum und Uhrzeit: Sat Dec 28 2019 17:52:02 CET	2019-12-29 05:07:35
206.217.139.200	spam	Absender: Mеet sexу girls in уour сitу UК: https://1borsa.com/sexdating495363 E-Mail: guizoom20@yahoo.de ------------------------------------------------------ Sеxу girls for thе night in уour tоwn: https://vae.me/iJ1h ------------------------------------------------------ Nur für den internen Gebrauch: Absender: Mеet sexу girls in уour сitу UК: https://1borsa.com/sexdating495363 E-Mail: guizoom20@yahoo.de Kontoname: Nicht angemeldet E-Mail Adresse: Nicht angemeldet IP Adresse: 206.217.139.200 - 206.217.139.200 Hostname: 206-217-139-200-host.colocrossing.com Datum und Uhrzeit: Sat Dec 28 2019 17:51:57 CET	2019-12-29 05:07:14
206.217.139.200	spam	Absender: Mеet sexу girls in уour сitу UК: https://1borsa.com/sexdating495363 E-Mail: www.ma-banaszak@versanet.de ------------------------------------------------------ Sеxу girls for thе night in уour tоwn: https://vae.me/iJ1h ------------------------------------------------------ Nur für den internen Gebrauch: Absender: Mеet sexу girls in уour сitу UК: https://1borsa.com/sexdating495363 E-Mail: www.ma-banaszak@versanet.de Kontoname: Nicht angemeldet E-Mail Adresse: Nicht angemeldet IP Adresse: 206.217.139.200 - 206.217.139.200 Hostname: 206-217-139-200-host.colocrossing.com Datum und Uhrzeit: Sat Dec 28 2019 17:51:53 CET	2019-12-29 05:06:51
206.217.139.200	attack	(From elitedeseafight@live.de) Dаting sitе for sех with girls from thе USA: http://xsle.net/bestsexygirls916151	2019-12-28 22:18:43
206.217.139.200	attackbotsspam	(From viviannymello@arcor.de) Adult #1 dаting арр fоr iрhone: https://huit.re/adultdatingsex811623	2019-12-28 13:21:36
206.217.139.200	attackbots	(From tijana.pet@epost.de) Adult frеe dating sitеs in еаst lоndоn: https://huit.re/adultdating223074	2019-12-28 07:47:51
206.217.139.200	attackbotsspam	(From sandy157@hotmail.com) Аdult free dating sites in east lоndon: https://vae.me/95Cf	2019-12-27 02:59:37
206.217.139.201	attack	Probing sign-up form.	2019-11-26 13:32:14

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 206.217.139.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28575
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;206.217.139.199.		IN	A

;; AUTHORITY SECTION:
.			192	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010801 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 09 10:51:25 CST 2022
;; MSG SIZE  rcvd: 108

Host info

199.139.217.206.in-addr.arpa domain name pointer 206-217-139-199-host.colocrossing.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
199.139.217.206.in-addr.arpa	name = 206-217-139-199-host.colocrossing.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.68.21.125	attackspam	Sep 5 09:41:31 eventyay sshd[6232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125 Sep 5 09:41:33 eventyay sshd[6232]: Failed password for invalid user chan from 138.68.21.125 port 57746 ssh2 Sep 5 09:45:46 eventyay sshd[6302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125 ...	2020-09-05 15:54:09
192.35.168.232	attack	TCP (SYN) 192.35.168.232:18131 -> port 9204, len 44	2020-09-05 16:32:59
54.37.11.58	attack	Sep 5 04:59:53 ws22vmsma01 sshd[221576]: Failed password for root from 54.37.11.58 port 57826 ssh2 Sep 5 05:04:12 ws22vmsma01 sshd[237180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.11.58 ...	2020-09-05 16:25:06
102.173.75.243	attackbots	Sep 4 18:48:51 mellenthin postfix/smtpd[29435]: NOQUEUE: reject: RCPT from unknown[102.173.75.243]: 554 5.7.1 Service unavailable; Client host [102.173.75.243] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/102.173.75.243; from= to= proto=ESMTP helo=<[102.173.75.243]>	2020-09-05 16:11:45
5.102.20.118	attack	php WP PHPmyadamin ABUSE blocked for 12h	2020-09-05 16:01:48
176.37.248.76	attackbots	Autoban 176.37.248.76 ABORTED AUTH	2020-09-05 15:56:14
106.116.118.89	attackbots	Sep 5 09:23:31 server sshd[46691]: Failed password for root from 106.116.118.89 port 47252 ssh2 Sep 5 09:27:50 server sshd[48605]: Failed password for root from 106.116.118.89 port 45788 ssh2 Sep 5 09:45:20 server sshd[56992]: Failed password for root from 106.116.118.89 port 39942 ssh2	2020-09-05 15:57:51
94.25.165.73	attackbotsspam	Unauthorized connection attempt from IP address 94.25.165.73 on Port 445(SMB)	2020-09-05 16:15:28
192.241.220.130	attackspambots	Attempts against Pop3/IMAP	2020-09-05 16:15:01
34.87.181.193	attackspam	" "	2020-09-05 16:24:45
201.149.55.53	attackbots	(sshd) Failed SSH login from 201.149.55.53 (MX/Mexico/53.55.149.201.in-addr.arpa): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 5 03:07:44 server sshd[24962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.55.53 user=root Sep 5 03:07:45 server sshd[24962]: Failed password for root from 201.149.55.53 port 56306 ssh2 Sep 5 03:23:55 server sshd[29497]: Invalid user oracle from 201.149.55.53 port 46760 Sep 5 03:23:57 server sshd[29497]: Failed password for invalid user oracle from 201.149.55.53 port 46760 ssh2 Sep 5 03:27:37 server sshd[30808]: Invalid user uftp from 201.149.55.53 port 51448	2020-09-05 15:55:09
218.155.81.199	attackbotsspam	Sep 4 19:00:49 mxgate1 postfix/postscreen[26039]: CONNECT from [218.155.81.199]:39775 to [176.31.12.44]:25 Sep 4 19:00:49 mxgate1 postfix/dnsblog[26044]: addr 218.155.81.199 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 4 19:00:49 mxgate1 postfix/dnsblog[26044]: addr 218.155.81.199 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 4 19:00:49 mxgate1 postfix/dnsblog[26040]: addr 218.155.81.199 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 4 19:00:49 mxgate1 postfix/dnsblog[26042]: addr 218.155.81.199 listed by domain b.barracudacentral.org as 127.0.0.2 Sep 4 19:00:49 mxgate1 postfix/dnsblog[26043]: addr 218.155.81.199 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Sep 4 19:00:55 mxgate1 postfix/postscreen[26039]: DNSBL rank 5 for [218.155.81.199]:39775 Sep x@x Sep 4 19:00:56 mxgate1 postfix/postscreen[26039]: HANGUP after 1.2 from [218.155.81.199]:39775 in tests after SMTP handshake Sep 4 19:00:56 mxgate1 postfix/postscreen[26039]: DISCONNECT [218.1........ -------------------------------	2020-09-05 16:03:08
192.241.224.140	attackspam	192.241.224.140 - - [04/Sep/2020:12:48:33 -0400] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 444 0 "-" "Mozilla/5.0 zgrab/0.x" ...	2020-09-05 16:22:58
45.95.168.227	attackbotsspam	DATE:2020-09-04 23:41:55, IP:45.95.168.227, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-09-05 16:24:28
190.52.191.49	attackspambots	Sep 5 06:08:12 roki-contabo sshd\[14069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.52.191.49 user=root Sep 5 06:08:13 roki-contabo sshd\[14069\]: Failed password for root from 190.52.191.49 port 45078 ssh2 Sep 5 06:23:51 roki-contabo sshd\[14220\]: Invalid user ym from 190.52.191.49 Sep 5 06:23:51 roki-contabo sshd\[14220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.52.191.49 Sep 5 06:23:54 roki-contabo sshd\[14220\]: Failed password for invalid user ym from 190.52.191.49 port 44282 ssh2 ...	2020-09-05 16:35:11

Recently Reported IPs

39.52.118.225	134.209.127.17	54.175.78.72	113.75.11.64
88.78.37.98	216.58.208.45	50.16.147.107	190.175.23.36
143.20.162.73	14.241.75.71	6.103.156.30	247.237.206.186
59.102.4.56	115.72.204.162	88.250.28.4	181.223.203.172
242.20.19.191	214.84.159.102	110.138.58.128	72.162.169.72