JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.140.216.245

165.140.216.245 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 29%: ?

29%

ISP	XICOMM LLC
Usage Type	Fixed Line ISP
ASN	AS400341
Domain Name	xicomm.com
Country	🇺🇸 United States of America
City	Stewart, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.140.216.245

Whois 165.140.216.245

IP Abuse Reports for 165.140.216.245:

This IP address has been reported a total of 27 times from 18 distinct sources. 165.140.216.245 was first reported on January 14th 2022, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 sid3windr	2026-06-25 03:17:57 (4 days ago)	GET /config/config.yaml (Tarpitted for 1d15h8m27s, wasted 8.06MB)	Web App Attack
🇮🇹 VHosting	2026-06-21 20:35:14 (1 week ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇬🇧 gbzret4d	2026-05-10 06:52:12 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (X11; U; Linux i ... show more Honeypot [uk-production01]: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (X11; U; Linux i586; de; rv:5.0) Gecko/20100101 Firefox/5.0 Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8000 [1] TCP show less	Hacking Bad Web Bot
🇷🇴 iulianh	2026-05-09 18:44:06 (1 month ago)	25,465,587	Brute-Force SSH
🇦🇺 LiftUp Hosting	2026-05-09 10:46:04 (1 month ago)	Honeypot hit: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (X11; U; Linux i586; de; rv:5. ... show more Honeypot hit: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (X11; U; Linux i586; de; rv:5.0) Gecko/20100101 Firefox/5.0 Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8000 [1] TCP show less	Hacking Bad Web Bot
🇧🇷 LWSA	2026-05-08 19:40:57 (1 month ago)	Attack detected by Infra LWSA. Total hits: 999. Ports: 85, 8086, 88, 82, 84. Sensors: P0f, Suricata, ... show more Attack detected by Infra LWSA. Total hits: 999. Ports: 85, 8086, 88, 82, 84. Sensors: P0f, Suricata, Honeytrap, ConPot, Dionaea. Samples: [2026-05-06T14:20:26.015Z] Suricata na porta 10000 \| [2026-05-06T14:20:26.015Z] Suricata na porta 10000 show less	Hacking Port Scan
🇷🇴 iulianh	2026-05-07 00:38:05 (1 month ago)	25,465,587	Brute-Force SSH
🇬🇧 gbzret4d	2026-05-06 17:49:25 (1 month ago)	Honeypot [uk-production01]: Incoming HTTP traffic on port 81	Hacking Bad Web Bot
🇩🇪 NxtGenIT	2026-05-06 16:56:28 (1 month ago)	ConPot Honeypot hit, Event Type: NEW_CONNECTION.	FTP Brute-Force
🇦🇺 LiftUp Hosting	2026-05-05 22:38:12 (1 month ago)	Honeypot hit: HTTP/1.1 request on 38000 GET / User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; ... show more Honeypot hit: HTTP/1.1 request on 38000 GET / User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; nl-nl) AppleWebKit/416.12 (KHTML, like Gecko) Safari/416.13 Accept: / Accept-Encoding: gzip, deflate, br, zstd; 38000 [3], 9000 [2], 2051 [1], 49152 [1] TCP show less	Hacking Bad Web Bot
🇹🇷 0xi	2026-05-05 09:00:49 (1 month ago)	Malicious scanning and attack activity detected (109 attempts). Targeted ports: 83, 84, 8086, 9000, ... show more Malicious scanning and attack activity detected (109 attempts). Targeted ports: 83, 84, 8086, 9000, 37777. Triggered sensors: P0f, Suricata, Honeytrap. Observed via distributed honeypot network. show less	Port Scan
🇬🇧 gbzret4d	2026-05-05 06:28:37 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 8081 GET / User-Agent: Mozilla/5.0 (Linux 2.4.18-lt ... show more Honeypot [uk-production01]: HTTP/1.1 request on 8081 GET / User-Agent: Mozilla/5.0 (Linux 2.4.18-ltsp-1 i686; U) Opera 6.1 [en] Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8081 [2], 8000 [1] TCP show less	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-05-04 20:51:58 (1 month ago)	Honeypot hit: HTTP/1.1 request on 8081 GET /favicon.ico User-Agent: Mozilla/5.0 (Linux 2.4.18-ltsp- ... show more Honeypot hit: HTTP/1.1 request on 8081 GET /favicon.ico User-Agent: Mozilla/5.0 (Linux 2.4.18-ltsp-1 i686; U) Opera 6.1 [en] Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8081 [2], 8001 [1], 8085 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-05-04 04:45:40 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 8001 GET / User-Agent: Mozilla/5.0 (Windows NT 5.1; ... show more Honeypot [uk-production01]: HTTP/1.1 request on 8001 GET / User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:15.0) Gecko/20100101 Firefox/13.0.1 Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8001 [1], 8081 [1] TCP show less	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-05-03 05:51:54 (1 month ago)	Honeypot hit: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:15.0) Geck ... show more Honeypot hit: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:15.0) Gecko/20100101 Firefox/13.0.1 Accept: / Accept-Encoding: gzip, deflate, br, zstd; 8000 [1], 8001 [1], 8086 [1] TCP show less	Hacking Bad Web Bot

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 40.71.90.11

🇳🇱 195.178.110.30

🇷🇴 193.46.255.86

🇵🇾 181.123.136.11

🇺🇸 170.254.178.93

🇦🇴 154.71.221.45

🇺🇸 104.192.205.181

🇧🇩 103.137.231.240

🇲🇲 103.81.113.10

🇨🇬 102.129.81.40

🇳🇱 84.80.92.113

🇹🇷 81.214.105.132

🇺🇸 44.215.219.236

🇪🇬 41.232.219.18

🇧🇪 34.62.155.84

🇮🇩 34.34.223.108

🇧🇷 191.6.81.140

🇲🇽 187.191.33.216

🇬🇧 178.79.131.86

🇧🇷 177.159.150.111