JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 69.249.211.138

69.249.211.138 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 17%: ?

17%

ISP	Comcast Cable Communications, Inc.
Usage Type	Fixed Line ISP
ASN	AS33287
Hostname(s)	c-69-249-211-138.hsd1.pa.comcast.net
Domain Name	comcast.net
Country	🇺🇸 United States of America
City	Philadelphia, Pennsylvania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 69.249.211.138

Whois 69.249.211.138

IP Abuse Reports for 69.249.211.138:

This IP address has been reported a total of 31 times from 24 distinct sources. 69.249.211.138 was first reported on October 19th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 DRI	2026-08-25 11:23:50 (1 week ago)	Web attack/Malicious activity detected	Web App Attack
🇨🇦 DRI	2026-08-24 09:17:12 (1 week ago)	Web attack/Malicious activity detected	Web App Attack
🇩🇪 LRob	2026-08-23 16:32:40 (1 week ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/wp/v2/users/ \| 2026-08-23 16:32 UTC show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-19 22:00:52 (1 month ago)	Zimbra: Login failures from malicious IP: 69.249.211.138. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 69.249.211.138. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-19 21:00:52 (1 month ago)	Zimbra: Login failures from malicious IP: 69.249.211.138. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 69.249.211.138. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 MusicLibrary	2026-05-06 07:57:33 (3 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇳🇱 wlt-blocker	2026-05-05 23:43:47 (3 months ago)	Attempts to login to mail server with wrong username and/or password	Brute-Force
🇩🇪 MusicLibrary	2026-04-25 15:00:06 (4 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
Anonymous	2026-01-19 07:06:11 (7 months ago)	2026-01-19T02:06:10.306604bastadge.tele2win.net sshd[28060]: Invalid user config from 69.249.211.138 ... show more 2026-01-19T02:06:10.306604bastadge.tele2win.net sshd[28060]: Invalid user config from 69.249.211.138 port 34432 ... show less	Brute-Force SSH
🇫🇷 COMAITE	2026-01-18 13:24:26 (7 months ago)	Honeypot login success	Brute-Force
🇪🇸 cuscusero (FlexBacks, FlexChar, FlexAve, FlexCDNM, FlexTudy, ColdHosting SL)	2026-01-15 08:41:54 (7 months ago)	[CPD ESP-BCN02-FW11-394] Suspicious connection detected on port 22. DDoS detected	DDoS Attack Brute-Force SSH
Anonymous	2026-01-13 08:02:33 (7 months ago)	<6 unauthorized SSH connections	Brute-Force SSH
🇺🇸 agenciahypelab.com.br	2025-12-27 04:49:41 (8 months ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇵🇱 IROK	2025-11-30 10:23:54 (9 months ago)	2025-11-30T11:15:49.577232 pclab24.pl sshd[2316326]: Failed password for invalid user admin from 69. ... show more 2025-11-30T11:15:49.577232 pclab24.pl sshd[2316326]: Failed password for invalid user admin from 69.249.211.138 port 40496 ssh2 2025-11-30T11:16:20.826164 pclab24.pl sshd[2316547]: Invalid user alarm from 69.249.211.138 port 40784 2025-11-30T11:16:21.202425 pclab24.pl sshd[2316547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.249.211.138 2025-11-30T11:16:23.186510 pclab24.pl sshd[2316547]: Failed password for invalid user alarm from 69.249.211.138 port 40784 ssh2 2025-11-30T11:20:50.159518 pclab24.pl sshd[2318606]: Invalid user rtorrent from 69.249.211.138 port 53934 ... show less	SSH
🇵🇱 sefinek.net	2025-11-30 08:05:19 (9 months ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: !!!:!!! • Number of login att ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: !!!:!!! • Number of login attempts: 1 • Client: SSH-2.0-PuTTY_Local:_May_14_2009_21:12:18 show less	SSH

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 85.217.149.58

🇺🇸 52.225.25.51

🇹🇳 197.5.145.150

🇧🇷 177.43.83.43

🇵🇭 165.154.59.118

🇳🇱 89.248.172.11

🇩🇪 89.117.104.21

🇫🇷 85.217.140.16

🇺🇸 74.7.243.62

🇺🇸 66.132.224.28

🇺🇸 66.132.195.105

🇰🇪 41.139.133.169

🇺🇸 34.174.153.31

🇺🇸 3.143.172.237

🇺🇸 162.216.150.38

🇫🇮 147.185.133.99

🇷🇴 92.118.39.14

🇺🇸 66.132.186.175

🇸🇬 47.79.7.137

🇺🇸 43.130.116.223