73.2.159.206

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
97% Critical
23 reports
17 reporters · latest 3 hours ago
ISP
Comcast IP Services, L.L.C.
Usage Type
Fixed Line ISP
ASN
AS7922
Hostname(s)
c-73-2-159-206.hsd1.tn.comcast.net
Domain Name
comcast.net
Country
🇺🇸 United States of America
City
Memphis, Tennessee
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
23 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇷 Brazil 5 🇺🇸 United States of America 5 🇮🇩 Indonesia 4
Most common categories Port Scan 10 Hacking 8 Brute-Force 2 Web App Attack 2 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 KPS
Portscan-P
Port Scan
🇮🇩 leomardsy_
Port Scan
🇫🇷 Petre 21_ip
2026-11-10T09:23:18.631987+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=73.2.159.206 DST=155.133.26.57 LEN=124 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=42726 DPT=9034 LEN=104 ...
Port Scan
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇺🇸 anon333
Hacker syslog review 1794288851
Hacking
🇹🇼 kk_it_man
hack
Hacking
🇧🇷 diego
[rede-44-49] 11/09/2026-23:13:19.939438, 73.2.159.206, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇧🇷 noconex
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 73.2.159.206
Hacking IoT Targeted
🇺🇸 anon333
Hacker syslog review 1794245643
Hacking
🇺🇸 HamSammich
Automated sensor: 1 port 9034 connection/probe attempts over the last 24h (latest 2026-11-09T14:19Z).
Port Scan
Anonymous
Realtek Jungle SDK Command Injection (CVE-2021-35394).
Web App Attack
🇫🇷 uthul
T-Pot honeypot: 1 hits on ports [9034] (automated)
Port Scan
🇮🇪 RoboSOC
Realtek Jungle SDK Remote Code Execution Vulnerability, PTR: c-73-2-159-206.hsd1.tn.comcast.net.
Hacking
🇨🇿 0x44
Realtek SDK - Command Execution/Backdoor Access Inbound
Port Scan
🇮🇩 leomardsy_
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 159.224.231.178
🇫🇮 147.185.133.67
🇳🇱 109.160.32.104
🇸🇬 85.203.23.32
🇺🇸 46.173.252.34
🇵🇰 210.2.130.106
🇺🇸 74.249.131.228
🇨🇳 59.44.107.110
🇺🇸 34.82.211.214
🇦🇱 31.171.153.182
🇯🇵 212.32.76.30
🇮🇳 182.70.254.196
🇮🇳 182.69.178.123
🇨🇳 125.120.2.104
🇮🇩 101.255.111.209
🇦🇷 45.173.193.140
🇨🇳 183.230.54.87
🇺🇸 172.104.19.160
🇰🇪 102.204.199.175
🇺🇸 57.141.20.70
feedback