67.172.16.159

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
35% Elevated
74 reports
51 reporters · latest 4 weeks ago
ISP
Comcast Cable Communications, IP Services
Usage Type
Fixed Line ISP
ASN
AS7016
Domain Name
comcast.net
Country
🇺🇸 United States of America
City
Manorville, Pennsylvania
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
74 from 51 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 11 🇩🇪 Germany 3 🇫🇷 France 2
Most common categories SSH 24 Brute-Force 20 Port Scan 4 Hacking 3 Web App Attack 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 LSPCCU
Port Scan Hacking Brute-Force Web App Attack SSH
🇺🇸 uhhhhhhyeahnotanythingthatislikemyotheraccountsanywhereelse
5 login or exploit attempts on SSH/22, 2026-10-06 23:33-23:33 UTC
Brute-Force SSH
🇨🇿 gszasz
Brute-Force SSH
🇭🇷 IgorS.zg.hr
SSHD brute force attack detected by fail2ban
Brute-Force SSH
🇺🇸 ras07
Brute force SSH login attempts.
Brute-Force SSH
🇮🇳 Parth Maniar
This IP address carried out 4 port scanning attempts on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇮🇳 Parth Maniar
This IP address carried out 1 SSH credential attack (attempts) on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
🇫🇮 basil s
Port Scan SSH
🇫🇷 Kejult
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
Hacking SSH
🇺🇸 benjensen
SSH honeypot — automated credential stuffing and scanning detected by Cowrie honeypot
Brute-Force SSH
🇺🇸 HamSammich
Automated sensor: 6 SSH brute-force attempts over the last 24h (latest 2026-09-28T00:07Z). Usernames tried: root, ubnt.
Brute-Force SSH
🇨🇦 dpinse
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH • Credential used: default:1 • Number of login attempts: 1 • Client: SSH-2.0-PuTTY_Release_0.70
SSH
Anonymous
SSH brute-force port 22
Brute-Force SSH
🇩🇪 Luhte
Unauthorised SSH/Telnet login attempt with user "<empty>" at 2026-09-23T11:04:09Z
Brute-Force SSH
Anonymous
SSH Honeypot detected multiple failed login attempts
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 150.223.20.12
🇺🇸 146.190.142.132
🇮🇳 103.207.9.246
🇺🇸 43.135.142.7
🇨🇳 183.251.85.61
🇨🇳 182.61.51.103
🇺🇸 169.136.216.17
🇺🇸 164.92.67.33
🇺🇸 162.216.149.220
🇺🇸 146.190.35.93
🇳🇱 138.226.239.234
🇺🇸 137.184.10.125
feedback