73.207.202.166

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
34 reports
28 reporters · latest 4 hours ago
ISP
Comcast IP Services, L.L.C.
Usage Type
Fixed Line ISP
ASN
AS7922
Domain Name
comcast.net
Country
🇺🇸 United States of America
City
Atlanta, Georgia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
34 from 28 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 8 🇺🇸 United States of America 7 🇵🇱 Poland 4
Most common categories Port Scan 28 Hacking 9 Brute-Force 9 SSH 7 IoT Targeted 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2026-11-12 01:37:26 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇷🇴 firmadeit
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=22,23
Port Scan Hacking
🇧🇬 Ilcheff
SSH tarpit hit: connection from 73.207.202.166 [US/United States, AS7922] to SSH accepted.
Port Scan Brute-Force SSH
🇩🇪 shr4pnel
SSH login attempts (endlessh): 2026-11-10T21:22:28.328Z ACCEPT host=::ffff:73.207.202.166 port=57663 fd=4 n=2/4096
Brute-Force SSH
🇩🇪 Kitki30.com
Entered SSH Tarpit (endlessh, server 3). Log: 2026-11-10T20:08:26.800Z ACCEPT host=::ffff:73.207.202.166 port=56619 fd=5 n=2/4096
Brute-Force SSH Port Scan
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 43 | Len: 60B | Win: 65535(1) | F2B/ufw-honeypot@2026-11-10T17:17:05Z
Port Scan Hacking
🇺🇸 scharsey
Honeypot: 1 TELNET events
Port Scan IoT Targeted
🇵🇱 pshost.pl
2026-11-10T13:10:01.436Z, an unauthorized SSH access attempt was detected from source IP address 73.207.202.166 by our NetFlow-based intrusion detection.
Port Scan Brute-Force SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇩🇪 _ArminS_
Bad SSHAUTH 2026.11.09 03:52:52 blocked until 2026.11.12 03:52:52 by HoneyPot DE_State of Berlin01
SSH Brute-Force Hacking
🇺🇸 RAP
2026-11-09 02:22:15 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇮 dnsbd.tech
nftables: Port scan (TCP:23) [srv2]
Port Scan Hacking
🇬🇧 KTSTechnology
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
Port Scan
🇦🇷 Bruno
Port Scanner: 73.207.202.166
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 118.70.182.193
🇩🇪 104.23.239.101
🇻🇳 103.1.210.25
🇦🇺 45.132.225.172
🇦🇺 45.132.225.162
🇸🇬 45.78.204.254
🇩🇪 23.132.164.185
🇳🇱 185.107.56.127
🇺🇸 172.237.155.240
🇪🇨 149.50.200.7
🇺🇸 137.184.108.15
🇷🇴 92.118.39.75
🇷🇴 80.94.95.115
🇷🇺 78.36.166.0
🇺🇸 64.62.197.106
🇦🇺 45.132.225.204
feedback