74.130.128.255

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
142 reports
77 reporters · latest 3 hours ago
ISP
Charter Communications Inc
Usage Type
Fixed Line ISP
ASN
AS10796
Hostname(s)
syn-074-130-128-255.res.spectrum.com
Domain Name
charter.com
Country
🇺🇸 United States of America
City
Jeffersonville, Indiana
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
142 from 77 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 27 🇫🇷 France 21 🇧🇷 Brazil 11
Most common categories Port Scan 85 SSH 44 Brute-Force 40 Hacking 38 Web App Attack 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2026-11-15 02:16:05 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸 3rdKey
OpenCanary honeypot hit on port 22 (no legitimate service runs there); logtype 4000. Automated report.
Port Scan Brute-Force SSH
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
Anonymous
2026-11-14T02:05:27.324016+00:00 HongKong1 sshd-session[2333662]: Connection closed by 74.130.128.255 port 60469 [preauth] 2026-11-14T02:10:43.106080+00:00 HongKong1 sshd-session[2355039]: Connection closed by 74.130.128.255 port 56710 [preauth] ...
Brute-Force SSH
🇫🇷 cityhunter_rhone
Connection attempts on sensitive port(s) 22 (1) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.
Port Scan Hacking
🇬🇧 andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
🇪🇸 el-brujo
T-Pot Honeypot (Cowrie): Automated attack on port 22/SSH
Brute-Force SSH
🇺🇸 Phil Schuyler
Repeated probing against public honeypot services: 4 observed events targeting exposed network services.
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target ports and 3 source port(s). Ports: 23/Telnet, 22/SSH. Sensors: Cowrie.
Port Scan
🇺🇸 wbsouza
CrowdSec: infra/ssh22-probe — automated firewall drops on self-hosted IDS sensor
SSH Brute-Force
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇹🇷 SeczarSecureOps
Seczar SecureOps — SSH Brute Force (6 events) — quarantined 43200m
SSH Brute-Force
🇩🇪 bescared
F2B - Malicious activity detected. Unauthorized connection attempt: SSH. -151302cd-
Port Scan SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 186.130.88.164
🇰🇷 180.182.236.146
🇺🇸 153.66.121.192
🇺🇸 130.49.77.175
🇨🇳 118.212.121.204
🇩🇪 69.5.169.68
🇺🇸 34.34.253.83
🇺🇸 12.5.181.107
🇺🇸 143.198.15.223
🇨🇳 59.61.184.101
🇺🇸 45.156.131.7
🇫🇮 45.147.10.136
🇨🇳 221.228.203.3
🇳🇱 200.138.46.102
🇳🇱 193.47.62.69
🇨🇳 183.223.133.127
feedback