207.237.20.152

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
11% Caution
59 reports
30 reporters · latest 2 weeks ago
ISP
RCN
Usage Type
Fixed Line ISP
ASN
AS6079
Hostname(s)
207-237-20-152.c3-0.80w-ubr5.nyr-80w.ny.static.cable.rcn.com
Domain Name
astound.com
Country
🇺🇸 United States of America
City
New York City, New York
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
59 from 30 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 1 🇳🇱 Netherlands 1
Most common categories Port Scan 1 SSH 1 Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 lechat
2026-10-29T09:20:04.164676+0000 inbound port scan detected by Suricata. src=207.237.20.152:58416 dst=51.68.231.122:22 proto=TCP. signature="ET SCAN Potential SSH Scan" category="Attempted Information Leak" sid=2001219 reason=scan_signature.
Port Scan
🇳🇱 COMPLEX
Banned by Multi Agent · node …rea9 · reason=SSH banner invalid / banner exchange invalid format · attempts=3 · SSH banner invalid / banner exchange invalid format
Brute-Force SSH
🇺🇸 MPL
tcp/23
Port Scan
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇯🇵 mkaraki
1775876945 # Service_probe # SIGNATURE_SEND # source_ip:207.237.20.152 # dst_port:23 ...
Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: iot_device,Dynamic IP more details on https://threatbook.io/ip/207.237.20.152
SSH
🇩🇪 Moritz
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
Hacking Port Scan
🇳🇵 radheykrishna.com.np
Apr 10 17:03:54 kernel: [979695.062930] [UFW BLOCK] IN=ens160 OUT= SRC=207.237.20.152 LEN=40 TOS=0x00 PREC=0x20 TTL=47 ID=2049 PROTO=TCP SPT=9721 DPT=23 WINDOW=11505 RES=0x00 SYN URGP=0 ...
Port Scan
🇺🇸 RAP
2026-04-10 08:28:25 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇷🇺 Agrohim
Gate Inet blocked for categories:
DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇺🇸 MPL
tcp/2323 (2 or more attempts)
Port Scan
Anonymous
Port Scan Brute-Force
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:9721 dst:23
Port Scan
🇺🇸 OceanTreasure
tcp/23; Legacy Telnet remote access probe (R18) @ 2026-04-06T14:35:50Z
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.95
🇺🇦 188.163.120.81
🇺🇸 188.114.97.11
🇵🇱 172.64.200.165
🇵🇱 172.64.200.81
🇸🇬 145.223.131.26
🇺🇸 104.243.208.140
🇻🇳 103.216.126.99
🇺🇸 74.0.187.15
🇺🇸 71.6.134.232
🇮🇶 65.20.237.94
🇳🇱 45.148.10.152
🇮🇩 41.216.178.119
🇬🇧 35.203.210.93
🇺🇸 20.65.178.121
🇺🇸 195.184.76.53
🇺🇸 181.215.65.47
🇳🇱 176.65.148.243
🇺🇸 172.236.103.8
🇯🇵 164.52.24.182
feedback