JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.202.170.56

216.202.170.56 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 100%: ?

100%

ISP	Level 3 Parent, LLC
Usage Type	Fixed Line ISP
ASN	AS3356
Hostname(s)	ca.216.202.170.56.gtecablemodem.com
Domain Name	lumen.com
Country	🇺🇸 United States of America
City	Casper, Wyoming

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.202.170.56

Whois 216.202.170.56

IP Abuse Reports for 216.202.170.56:

This IP address has been reported a total of 99 times from 55 distinct sources. 216.202.170.56 was first reported on March 17th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Richie	2026-05-12 17:50:59 (3 weeks ago)	[HOST1] Port Scan detected	Port Scan
🇺🇸 xmission.com	2026-05-12 17:48:30 (3 weeks ago)	Blocked by UFW (TCP on 65275) Source port: 80 TTL: 60 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 65275) Source port: 80 TTL: 60 Packet length: 52 TOS: 0x00 This report (for 216.202.170.56) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-05-11 20:07:05 (3 weeks ago)	UFW blocked 11 unsolicited TCP packet(s) in last 65 minutes ago. Destination port(s): 27198. Server ... show more UFW blocked 11 unsolicited TCP packet(s) in last 65 minutes ago. Destination port(s): 27198. Server has no public-facing services; all blocks are uninvited. show less	Port Scan
🇺🇸 TryPr0x	2026-05-11 19:32:35 (3 weeks ago)	2026-05-11T21:32:31.656778+02:00 vmi2805887 kernel: [5772457.174939] [UFW BLOCK] IN=eth0 OUT= MAC=00 ... show more 2026-05-11T21:32:31.656778+02:00 vmi2805887 kernel: [5772457.174939] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5d:01:47:98:5d:82:47:d6:d9:08:00 SRC=216.202.170.56 DST=209.145.61.160 LEN=40 TOS=0x00 PREC=0x00 TTL=61 ID=0 DF PROTO=TCP SPT=25565 DPT=14793 WINDOW=0 RES=0x00 ACK RST URGP=0 2026-05-11T21:32:31.656915+02:00 vmi2805887 kernel: [5772457.174965] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5d:01:47:98:5d:82:47:d6:d9:08:00 SRC=216.202.170.56 DST=209.145.61.160 LEN=40 TOS=0x00 PREC=0x00 TTL=61 ID=0 DF PROTO=TCP SPT=25565 DPT=14793 WINDOW=0 RES=0x00 RST URGP=0 2026-05-11T21:32:31.656954+02:00 vmi2805887 kernel: [5772457.174989] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5d:01:47:98:5d:82:47:d6:d9:08:00 SRC=216.202.170.56 DST=209.145.61.160 LEN=40 TOS=0x00 PREC=0x00 TTL=61 ID=0 DF PROTO=TCP SPT=25565 DPT=14793 WINDOW=0 RES=0x00 RST URGP=0 2026-05-11T21:32:31.656988+02:00 vmi2805887 kernel: [5772457.175011] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5d:01:47:98:5d:82:47:d6:d9:08:00 SRC=216.202.170.56 ... show less	Port Scan
🇹🇭 Sawasdee	2026-05-11 18:59:19 (3 weeks ago)	Port Scan ...	Port Scan
🇳🇱 Roderic	2026-05-10 19:10:51 (3 weeks ago)	(bind) bind triggered by 216.202.170.56 (US/United States/Wyoming/Casper/ca.216.202.170.56.gtecablem ... show more (bind) bind triggered by 216.202.170.56 (US/United States/Wyoming/Casper/ca.216.202.170.56.gtecablemodem.com/[redacted]) show less	DNS Poisoning
🇺🇸 Josh S.	2026-05-10 04:56:58 (3 weeks ago)	Blocked by UFW on Mailcow [63637/tcp] Source port: 80 TTL: 53 Packet length: 60 TOS: 0x00 If this w ... show more Blocked by UFW on Mailcow [63637/tcp] Source port: 80 TTL: 53 Packet length: 60 TOS: 0x00 If this was a mistake contact me: [email protected] show less	Port Scan
🇩🇪 Richie	2026-05-10 04:56:43 (3 weeks ago)	[HOST1] Port Scan detected	Port Scan
Anonymous	2026-05-09 10:04:46 (3 weeks ago)	Port Scan detected from 216.202.170.56 (US/United States/ca.216.202.170.56.gtecablemodem.com). 5 h ... show more Port Scan detected from 216.202.170.56 (US/United States/ca.216.202.170.56.gtecablemodem.com). 5 hits in the last 15 seconds show less	Brute-Force Port Scan
🇷🇴 gtheo99	2026-05-09 10:02:24 (3 weeks ago)	(CT) IP 216.202.170.56 (US/United States/ca.216.202.170.56.gtecablemodem.com) found to have 282 conn ... show more (CT) IP 216.202.170.56 (US/United States/ca.216.202.170.56.gtecablemodem.com) found to have 282 connections show less	Port Scan
Anonymous	2026-05-07 16:55:58 (3 weeks ago)	Port Scan detected from 216.202.170.56 (US/United States/ca.216.202.170.56.gtecablemodem.com). 5 h ... show more Port Scan detected from 216.202.170.56 (US/United States/ca.216.202.170.56.gtecablemodem.com). 5 hits in the last 50 seconds show less	Brute-Force Port Scan
Anonymous	2026-05-04 18:50:38 (4 weeks ago)	Port Scan detected from 216.202.170.56 (US/United States/ca.216.202.170.56.gtecablemodem.com). 5 h ... show more Port Scan detected from 216.202.170.56 (US/United States/ca.216.202.170.56.gtecablemodem.com). 5 hits in the last 25 seconds show less	Brute-Force Port Scan
🇺🇸 wteiken	2026-05-01 14:07:49 (1 month ago)	2026-05-01T10:07:46.462630-04:00 rocinante.teiken.net kernel: [ 3634.413569] syn_limit:IN=ens5 OUT= ... show more 2026-05-01T10:07:46.462630-04:00 rocinante.teiken.net kernel: [ 3634.413569] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=216.202.170.56 DST=192.168.16.119 LEN=52 TOS=0x00 PREC=0x00 TTL=100 ID=63436 DF PROTO=TCP SPT=5478 DPT=443 WINDOW=14600 RES=0x00 SYN URGP=0 2026-05-01T10:07:46.751861-04:00 rocinante.teiken.net kernel: [ 3634.702732] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=216.202.170.56 DST=192.168.16.119 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=43286 DF PROTO=TCP SPT=45236 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-05-01T10:07:47.135254-04:00 rocinante.teiken.net kernel: [ 3635.086186] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=216.202.170.56 DST=192.168.16.119 LEN=52 TOS=0x00 PREC=0x00 TTL=97 ID=61722 DF PROTO=TCP SPT=24254 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 2026-05-01T10:07:47.200556-04:00 rocinante.teiken.net kernel: [ 3635.151444] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3: ... show less	Port Scan
🇦🇹 SchiWaGoA	2026-05-01 05:25:48 (1 month ago)	DNS flooding on our DNS server: 22x abb.com in 60s. Banned by Adguard Shield 🔗 https://tnvs.de/as	DDoS Attack
🇩🇪 pscriptos	2026-05-01 04:41:57 (1 month ago)	DNS flooding on our DNS server: 200x vtb.com in 60s. Banned by Adguard Shield 🔗 https://tnvs.de/as	DDoS Attack

Showing 31 to 45 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.223.199.221

🇮🇳 135.13.28.35

🇨🇳 112.46.217.163

🇧🇩 103.248.206.204

🇷🇺 83.239.108.218

🇧🇷 69.6.220.104

🇺🇸 65.49.1.77

🇺🇸 65.49.1.34

🇺🇸 65.49.1.24

🇺🇸 64.31.53.170

🇮🇳 59.98.148.5

🇸🇬 52.187.9.8

🇮🇶 212.237.119.150

🇳🇱 195.178.110.30

🇺🇸 172.245.28.121

🇺🇸 162.216.150.134

🇫🇮 147.185.133.158

🇺🇸 147.185.132.116

🇹🇼 128.14.226.125

🇸🇬 103.187.146.131