71.226.49.239

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
66% Elevated
51 reports
42 reporters · latest 4 weeks ago
ISP
Comcast Cable Communications, Inc.
Usage Type
Fixed Line ISP
ASN
AS33653
Hostname(s)
c-71-226-49-239.hsd1.az.comcast.net
Domain Name
comcast.net
Country
🇺🇸 United States of America
City
Oro Valley, Arizona
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
51 from 42 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 15 🇩🇪 Germany 8 🇫🇷 France 6
Most common categories Port Scan 31 Brute-Force 20 SSH 18 Hacking 16 IoT Targeted 4
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 nfsec.pl
Detected: TCP scan on port: 23 with flags: SYN
Port Scan
Anonymous
[TCP/23] Unsolicited connection attempt on a port with no legitimate public service.
Port Scan Hacking
🇺🇸 donarev419
Port scan detected on port 23 (connection without data transfer)
Port Scan
🇹🇷 trakyabirlik
Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-10-13 23:03
Web App Attack
🇺🇸 HamSammich
Automated sensor: 2 telnet connection/probe attempts over the last 24h (latest 2026-10-13T13:53Z).
Brute-Force IoT Targeted
Anonymous
SSH tarpit (endlessh) connection from 71.226.49.239
Brute-Force SSH
🇬🇧 KTSTechnology
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇨🇦 bdonvr
Brute-Force SSH
🇵🇱 Tankudoraiba
Unauthorized connection attempts on port 22
SSH Hacking Port Scan
🇫🇷 bgg
Oct 11 03:16:46 nanopirate sshd[1353530]: refused connect from c-71-226-49-239.hsd1.az.comcast.net (71.226.49.239) ...
Brute-Force SSH
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
Port Scan
🇦🇺 FEWA
Fail2Ban Ban Triggered
Hacking Brute-Force
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇵🇱 pshost.pl
2026-10-10T00:01:13.174Z, an unauthorized SSH access attempt was detected from source IP address 71.226.49.239 by our NetFlow-based intrusion detection.
Port Scan Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇾 113.211.126.122
🇺🇸 70.183.235.24
🇳🇱 45.148.10.238
🇧🇪 35.210.38.107
🇨🇳 120.203.25.201
🇸🇬 47.128.60.115
🇧🇪 35.210.218.50
🇧🇪 35.210.156.191
🇧🇪 34.156.229.26
🇺🇸 20.98.153.153
🇨🇦 216.232.226.40
🇺🇸 199.165.159.42
🇦🇷 186.57.79.218
🇨🇦 149.22.95.134
🇨🇦 144.217.61.131
🇳🇱 109.160.32.158
feedback