73.206.209.249

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
89 reports
61 reporters · latest 1 hour ago
ISP
Comcast IP Services, L.L.C.
Usage Type
Fixed Line ISP
ASN
AS7922
Hostname(s)
c-73-206-209-249.hsd1.tx.comcast.net
Domain Name
comcast.net
Country
🇺🇸 United States of America
City
Houston, Texas
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
89 from 61 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 23 🇫🇷 France 10 🇹🇷 Turkey 7
Most common categories Port Scan 53 Brute-Force 27 SSH 25 Hacking 20 Web App Attack 7
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 jkhorvath
Missing identification String for SSH from 73.206.209.249
Brute-Force SSH
🇺🇸 xmission.com
Blocked by UFW (TCP on 22) Source port: 39148 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 73.206.209.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH Brute-Force
🇹🇷 SeczarSecureOps
Seczar SecureOps — SSH Brute Force (6 events) — quarantined 43200m
SSH Brute-Force
🇷🇺 Panamaaa
Port scan detected; Brute-force attack detected
Port Scan Brute-Force
🇮🇩 FallingGong2833
tcp/23
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:45152 dst:23
Port Scan
🇺🇸 uwu-sec
Observed connection on ssh/22.
Port Scan SSH
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 59858 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 73.206.209.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇫🇷 noi
honeypot proto=TCP dpt=23 flags=SYN hits=1 window=1h
Port Scan
🇹🇷 savasboluk
Auto-blocked by Seczar SecureOps — SSH Brute Force (5 events in 5min) at 2026-11-06 09:03
SSH Brute-Force
🇹🇷 SeczarSecureOps
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5min) at 2026-11-06 08:10
Hacking
🇹🇷 SeczarSecureOps
Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-11-05 23:28
SSH Brute-Force
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-11-05 18:17:12 | LAST=2026-11-05 18:17:12. Last seen 2026-11-05 18:17:12.
Port Scan
🇮🇪 wiredalter
Blocked by UFW on vhVPS [23/tcp] Source Port: 33296 TTL: 43 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com
Port Scan Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 157.20.144.241
🇫🇮 147.185.133.33
🇺🇸 216.25.89.123
🇮🇳 203.76.188.121
🇲🇽 177.227.31.109
🇺🇸 172.177.73.48
🇨🇦 104.194.37.176
🇳🇱 93.123.109.95
🇫🇷 91.231.89.88
🇳🇱 77.239.124.146
🇮🇪 54.75.61.184
🇳🇱 31.21.176.231
feedback