JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

165.140.216.199

Neutral Activity

Abuse confidence score ?

0% Low Risk

26 reports

16 reporters · latest 3 months ago

ISP	XICOMM LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS400341
Domain Name	xicomm.com
Country	🇺🇸 United States of America
City	San Francisco, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

165.140.216.199 has been reported 26 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 165.140.216.199

Export CSV

This IP address has been reported a total of 26 times from 16 distinct sources. 165.140.216.199 was first reported on April 7th 2022, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 sid3windr	2026-06-26 23:00:52 (3 months ago)	GET /.bash_history (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇮🇹 VHosting	2026-05-29 21:23:19 (4 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇬🇧 gbzret4d	2026-05-10 06:39:32 (5 months ago)	Honeypot [uk-production01]: Incoming HTTP traffic on port 81	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-05-09 10:52:00 (5 months ago)	Honeypot hit: HTTP/1.1 request on 8081 GET / User-Agent: Mozilla/5.0 (X11; U; Linux i586; de; rv:5. ... show more Honeypot hit: HTTP/1.1 request on 8081 GET / User-Agent: Mozilla/5.0 (X11; U; Linux i586; de; rv:5.0) Gecko/20100101 Firefox/5.0 Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8081 [1] TCP show less	Hacking Bad Web Bot
🇧🇷 LWSA	2026-05-08 19:40:57 (5 months ago)	Attack detected by Infra LWSA. Total hits: 1256. Ports: 88, 84, 83, 10000, 8554. Sensors: P0f, Suric ... show more Attack detected by Infra LWSA. Total hits: 1256. Ports: 88, 84, 83, 10000, 8554. Sensors: P0f, Suricata, Honeytrap, ConPot, Dionaea. Samples: [2026-05-06T14:30:23.748Z] Suricata na porta 8444 \| [2026-05-06T14:30:23.748Z] Suricata na porta 8444 show less	Hacking Port Scan
🇬🇧 gbzret4d	2026-05-06 18:03:44 (5 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 8001 GET /favicon.ico User-Agent: Mozilla/5.0 (Maci ... show more Honeypot [uk-production01]: HTTP/1.1 request on 8001 GET /favicon.ico User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; nl-nl) AppleWebKit/416.12 (KHTML, like Gecko) Safari/416.13 Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8001 [1], 8081 [1] TCP show less	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-05-05 22:30:40 (5 months ago)	Honeypot hit: HTTP/1.1 request on 8088 GET /nobody/favicon.ico User-Agent: Mozilla/5.0 (Macintosh; ... show more Honeypot hit: HTTP/1.1 request on 8088 GET /nobody/favicon.ico User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; nl-nl) AppleWebKit/416.12 (KHTML, like Gecko) Safari/416.13 Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8088 [3], 8086 [1] TCP show less	Hacking Bad Web Bot
🇹🇷 0xi	2026-05-05 07:00:39 (5 months ago)	Malicious scanning and attack activity detected (196 attempts). Targeted ports: 88, 82, 83, 84, 2051 ... show more Malicious scanning and attack activity detected (196 attempts). Targeted ports: 88, 82, 83, 84, 2051. Triggered sensors: P0f, Suricata, Honeytrap. Observed via distributed honeypot network. show less	Port Scan
🇬🇧 gbzret4d	2026-05-05 06:28:38 (5 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 8000 GET /nobody/favicon.ico User-Agent: Mozilla/5. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 8000 GET /nobody/favicon.ico User-Agent: Mozilla/5.0 (Linux 2.4.18-ltsp-1 i686; U) Opera 6.1 [en] Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8000 [1], 8001 [1], 8081 [1], 8085 [1] TCP show less	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-05-04 20:37:39 (5 months ago)	Honeypot hit: Incoming HTTP traffic on port 81	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-05-04 04:51:33 (5 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 8085 GET / User-Agent: Mozilla/5.0 (Windows NT 5.1; ... show more Honeypot [uk-production01]: HTTP/1.1 request on 8085 GET / User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:15.0) Gecko/20100101 Firefox/13.0.1 Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8085 [1], 8088 [1], 8090 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-05-03 12:21:34 (5 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 9000 GET /onvif-http/snapshot?auth=YWRtaW46MTEKd Us ... show more Honeypot [uk-production01]: HTTP/1.1 request on 9000 GET /onvif-http/snapshot?auth=YWRtaW46MTEKd User-Agent: python-requests/2.32.4 Accept: / Accept-Encoding: gzip, deflate, br, zstd; 9000 [1] TCP show less	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-05-03 05:37:10 (5 months ago)	Honeypot hit: Incoming HTTP traffic on port 81	Hacking Bad Web Bot
🇮🇹 VHosting	2026-04-29 11:49:02 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 Bankbook8585	2026-04-23 21:08:47 (5 months ago)	T-Pot honeypot \| Honeytrap: port 8081	Port Scan Hacking

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.195.114.14

🇺🇸 167.99.12.102

🇨🇳 115.190.184.184

🇳🇱 109.37.153.55

🇰🇷 106.244.120.37

🇩🇪 91.92.41.82

🇺🇸 76.181.155.182

🇮🇳 49.36.57.219

🇺🇸 47.90.137.149

🇰🇷 211.114.30.9

🇲🇽 177.241.165.158

🇺🇸 170.106.73.254

🇸🇬 152.42.175.110

🇺🇸 152.32.235.36

🇵🇪 149.34.48.31

🇧🇩 103.161.107.131

🇨🇦 85.217.149.71

🇹🇷 78.180.119.139

🇳🇱 34.187.88.97

🇮🇩 202.158.36.50