24.1.94.140

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
20 reports
17 reporters Β· latest 3 months ago
ISP
Comcast Cable Communications, LLC
Usage Type
Fixed Line ISP
ASN
AS33491
Domain Name
comcast.net
Country
πŸ‡ΊπŸ‡Έ United States of America
City
Joliet, Illinois
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

24.1.94.140 has been reported 20 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
20 from 17 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡«πŸ‡· EvoX
πŸ›‘οΈ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH β€’ Credential used: root:930920 β€’ Number of login attempts: 1 β€’ Client: SSH-2.0-PuTTY_Local:_May_14_2009_21:12:18
SSH
πŸ‡ΊπŸ‡Έ HamSammich
Automated sensor: 5 SSH brute-force attempts over the last 24h (latest 2026-08-07T15:22Z). Usernames tried: root.
Brute-Force SSH
πŸ‡©πŸ‡ͺ FD-IX
Fail2Ban: SSH brute-force attack detected.
Brute-Force SSH
πŸ‡ΈπŸ‡ͺ sa0azs
Brute-Force SSH
πŸ‡ΊπŸ‡Έ HamSammich
Automated sensor: 1 SSH connection/probe attempts over the last 24h (latest 2026-08-03T08:39Z).
Brute-Force SSH
πŸ‡ΊπŸ‡Έ HamSammich
Automated sensor: 5 SSH brute-force attempts over the last 24h (latest 2026-08-01T14:18Z). Usernames tried: root.
Brute-Force SSH
πŸ‡΅πŸ‡± sefinek.net
Honeypot hit: Brute-force attack detected on 22/SSH β€’ Credential used: admin:admin β€’ Number of login attempts: 1 β€’ Client: SSH-2.0-PuTTY_Local:_May_14_2009_21:12:18 Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
SSH
πŸ‡«πŸ‡· maxxsense
(sshd) Failed SSH login from 24.1.94.140 (US/United States/c-24-1-94-140.hsd1.il.comcast.net)
Brute-Force SSH
πŸ‡¬πŸ‡§ adnscom.net
IPS trigger: Brute force SSH scanning/attack
Brute-Force SSH
πŸ‡©πŸ‡ͺ formality
Invalid user linaro from 24.1.94.140 port 58142
Brute-Force SSH
πŸ‡©πŸ‡ͺ ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
πŸ‡ΊπŸ‡Έ SANYALnet Labs
Brute-Force
πŸ‡©πŸ‡ͺ ISPLtd
Jul 16 00:14:23 24.1.94.140 TCP SPT=60616 DPT=143 SYN Jul 16 00:14:24 24.1.94.140 TCP SPT=60616 DPT=143 SYN Jul 16 00:14:26 24.1.94.140 TCP SPT=60616 DPT=143 ...
Port Scan
πŸ‡ΊπŸ‡Έ cwytech
Fleet-wide ban from the Ghostfleet πŸ‘». Triggered by scenario: cwy/tpot-ssh-high.
Brute-Force SSH
πŸ‡¨πŸ‡¦ dpinse
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH β€’ Credential used: admin:<empty> β€’ Number of login attempts: 1 β€’ Client: SSH-2.0-PuTTY_Local:_May_14_2009_21:12:18
SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡ΉπŸ‡³ 196.203.231.220
πŸ‡³πŸ‡± 193.47.62.69
πŸ‡°πŸ‡· 115.160.97.208
πŸ‡ΊπŸ‡Έ 107.13.129.205
πŸ‡³πŸ‡± 77.239.124.46
πŸ‡ΈπŸ‡¬ 47.82.8.189
πŸ‡³πŸ‡± 45.148.10.141
πŸ‡ΊπŸ‡Έ 24.234.239.46
πŸ‡©πŸ‡ͺ 17.250.86.41
πŸ‡©πŸ‡ͺ 17.250.86.38
πŸ‡ΈπŸ‡¬ 201.79.114.123
πŸ‡«πŸ‡· 162.159.124.43
πŸ‡§πŸ‡· 128.201.207.110
πŸ‡ΊπŸ‡Έ 107.13.100.210
πŸ‡©πŸ‡ͺ 69.5.169.71
πŸ‡¬πŸ‡§ 35.203.211.58
πŸ‡©πŸ‡ͺ 17.250.86.13
πŸ‡©πŸ‡ͺ 17.248.248.82
πŸ‡³πŸ‡΄ 193.200.221.85
feedback