71.231.21.18
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Comcast Cable Communications, Inc.
- Usage Type
- Fixed Line ISP
- ASN
- AS7922
- Domain Name
- comcast.net
- Country
- 🇺🇸 United States of America
- City
- Spokane Valley, Washington
Abuse Reports
Total reports
37 from
22 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
|
Hacking Bad Web Bot | |
| 🇺🇸 MPL |
tcp ports: 22,23 (12 or more attempts)
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:60236 dst:23
|
Port Scan | |
| Anonymous |
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 71.231.21.18
|
Port Scan Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp ports: 22,23 (12 or more attempts)
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 71.231.21.18
|
Port Scan Brute-Force SSH | |
| 🇺🇸 Choice Tech LLC |
Blocked by OPNsense firewall; 12 hits, proto=tcp, ports=22,23
|
Port Scan Hacking | |
| 🇫🇷 Entalpi.net |
Tried to hit sensible closed port commonly used in attacks
|
Port Scan Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:58246 dst:23
|
Port Scan | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| 🇩🇪 von44bis33 |
Cowrie SSH honeypot: unauthorized login attempts/commands observed.
|
Brute-Force SSH | |
| 🇺🇸 johuang92 |
Cowrie SSH honeypot: session 3fad1e679f51
|
SSH | |
| 🇹🇷 SeczarSecureOps |
Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-08-20 12:50
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown