24.1.94.140
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Comcast Cable Communications, LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS33491
- Domain Name
- comcast.net
- Country
- πΊπΈ United States of America
- City
- Joliet, Illinois
No reports in the last 60 days
24.1.94.140 has been reported 20 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
20 from
17 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| π«π· EvoX |
π‘οΈ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH
β’ Credential used: root:930920
β’ Number of login attempts: 1
β’ Client: SSH-2.0-PuTTY_Local:_May_14_2009_21:12:18
|
SSH | |
| πΊπΈ HamSammich |
Automated sensor: 5 SSH brute-force attempts over the last 24h (latest 2026-08-07T15:22Z). Usernames tried: root.
|
Brute-Force SSH | |
| π©πͺ FD-IX |
Fail2Ban: SSH brute-force attack detected.
|
Brute-Force SSH | |
| πΈπͺ sa0azs |
|
Brute-Force SSH | |
| πΊπΈ HamSammich |
Automated sensor: 1 SSH connection/probe attempts over the last 24h (latest 2026-08-03T08:39Z).
|
Brute-Force SSH | |
| πΊπΈ HamSammich |
Automated sensor: 5 SSH brute-force attempts over the last 24h (latest 2026-08-01T14:18Z). Usernames tried: root.
|
Brute-Force SSH | |
| π΅π± sefinek.net |
Honeypot hit: Brute-force attack detected on 22/SSH
β’ Credential used: admin:admin
β’ Number of login attempts: 1
β’ Client: SSH-2.0-PuTTY_Local:_May_14_2009_21:12:18
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
SSH | |
| π«π· maxxsense |
(sshd) Failed SSH login from 24.1.94.140 (US/United States/c-24-1-94-140.hsd1.il.comcast.net)
|
Brute-Force SSH | |
| π¬π§ adnscom.net |
IPS trigger: Brute force SSH scanning/attack
|
Brute-Force SSH | |
| π©πͺ formality |
Invalid user linaro from 24.1.94.140 port 58142
|
Brute-Force SSH | |
| π©πͺ ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| πΊπΈ SANYALnet Labs |
|
Brute-Force | |
| π©πͺ ISPLtd |
Jul 16 00:14:23 24.1.94.140 TCP SPT=60616 DPT=143 SYN
Jul 16 00:14:24 24.1.94.140 TCP SPT=60616 DPT=143 SYN
Jul 16 00:14:26 24.1.94.140 TCP SPT=60616 DPT=143
...
|
Port Scan | |
| πΊπΈ cwytech |
Fleet-wide ban from the Ghostfleet π». Triggered by scenario: cwy/tpot-ssh-high.
|
Brute-Force SSH | |
| π¨π¦ dpinse |
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
β’ Credential used: admin:<empty>
β’ Number of login attempts: 1
β’ Client: SSH-2.0-PuTTY_Local:_May_14_2009_21:12:18
|
SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown