69.253.202.100
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Comcast Cable Communications, Inc.
- Usage Type
- Fixed Line ISP
- ASN
- AS33287
- Hostname(s)
- c-69-253-202-100.hsd1.pa.comcast.net
- Domain Name
- comcast.net
- Country
- 🇺🇸 United States of America
- City
- Philadelphia, Pennsylvania
Abuse Reports
Total reports
18 from
17 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Drop from IP address 69.253.202.100 to tcp-port 3389
|
Port Scan | |
| Anonymous |
3389/tcp (1 or more attempts)
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: RDP brute-force. 2 events observed. Reported automatically from a honeypot sensor.
|
Brute-Force | |
| 🇫🇷 aki |
PortScan: TCP/3389
|
Port Scan | |
| 🇩🇪 Admins@Storch |
IPS:drop <match> dstport=3389
|
Brute-Force Exploited Host | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 3389 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇺🇸 sargetun |
Honeypot: Auto-ban: 24 hour idle after honeypot interaction. Auto-reported from VPS honeypot.
|
Brute-Force SSH Hacking | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-10-25 UTC.
|
Exploited Host | |
| 🇰🇷 ds2bkp |
|
Port Scan | |
| 🇺🇸 sargetun |
Honeypot: RDP probe on port 3389 at 2026-10-24 10:13:19.242051. Automated report from VPS honeypot.
|
Port Scan | |
| Anonymous |
Trying ports that it shouldn't be.
|
Port Scan Hacking Exploited Host | |
| 🇳🇱 i-turnradio.nl |
2026-10-22 11:39:43 +02:00 - Unsolicited TCP connection to a honeypot port; probing port 3389.
|
Port Scan | |
| 🇺🇸 3rdKey |
OpenCanary honeypot hit on port 3389 (no legitimate service runs there); logtype 14001. Automated report.
|
Port Scan Brute-Force Exploited Host | |
| 🇺🇸 knock |
Knock-Knock honeypot brute-force: RDP (677 total hits)
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown