165.140.238.132

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
26 reports
25 reporters · latest 3 hours ago
ISP
EliteWork LLC
Usage Type
Fixed Line ISP
ASN
AS397731
Domain Name
elitework.com
Country
🇺🇸 United States of America
City
Seattle, Washington
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
26 from 25 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 9 🇩🇪 Germany 5 🇺🇸 United States of America 3
Most common categories Web App Attack 24 Bad Web Bot 11 Hacking 7 Port Scan 4 Brute-Force 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 myip.foo
[myip.foo] 165.140.238.132 - - [07/Nov/2026:04:20:47 +0000] "GET /.git/config HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Scanner/1.0)"
Bad Web Bot Web App Attack
🇫🇷 Security_Whaller
Malicious activity detected on Honeypot.
Brute-Force Hacking Web App Attack
Anonymous
165.140.238.132 - - [07/Nov/2026:04:10:19 +0000] "GET /.git/config HTTP/1.1" 503 5350 "-" "Mozilla/5.0 (compatible; Scanner/1.0)" ...
Bad Web Bot Web App Attack
🇺🇸 HamSammich
Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-11-07T03:26Z).
Port Scan Web App Attack
🇫🇷 zulzeen
[incypit-web] Banned by Fail2ban (Jail: syswarden-secretshunter)
Hacking Web App Attack Bad Web Bot Port Scan
🇦🇺 AWW-Admin
(mod_security) mod_security triggered on hostname [redacted] 165.140.238.132 (US/United States/-)
SQL Injection
🇩🇪 Lino Project
165.140.238.132 - - [07/Nov/2026:03:03:27 +0100] "GET /.git/config HTTP/1.1" 404 360 "-" "Mozilla/5.0 (compatible; Scanner/1.0)" ...
Brute-Force Bad Web Bot Web App Attack
🇨🇦 Blinker73
165.140.238.132 - - [06/Nov/2026:20:57:34 -0500] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Scanner/1.0)"
Bad Web Bot Web App Attack
🇫🇷 Vaction
165.140.238.132 - - [07/Nov/2026:01:12:22 +0100] "GET /.git/config HTTP/1.1" 404 400 "-" "Mozilla/5.0 (compatible; Scanner/1.0)"
Hacking Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr
Web scan: request for a sensitive file (.env, .git, wp-config...)
Web App Attack Bad Web Bot
🇩🇪 quiescence.eu
Probing files/vulnerabilities (.env, .git) - Fail2ban @ quiescence.eu
Hacking Web App Attack
🇫🇷 Optimatiq (ThreatBite)
Probe for secrets or exploit paths (fail2ban)
Hacking Web App Attack
🇩🇪 Roper123
Web exploits
Web App Attack
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 6 application-level events across 2 target ports and 3 source port(s). Ports: 80/HTTP, 443/HTTPS. Sensors: H0neytr4p, Tanner.
Port Scan
Anonymous
host=- server=- ip=165.140.238.132 method=GET req=/.git/config uri=/.git/config status=301 bytes=162 rt=0.000 urt=- lr=- ref="-" ua="Mozilla/5.0 (compatible; Scanner/1.0)"
Web App Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.68.175.114
🇺🇸 147.185.132.111
🇨🇳 113.137.46.19
🇳🇬 102.90.124.119
🇷🇺 88.206.83.170
🇳🇱 45.156.128.72
🇳🇱 45.148.10.152
🇰🇷 218.238.5.110
🇧🇷 186.235.186.218
🇨🇳 124.64.61.121
🇨🇳 121.46.244.19
🇺🇸 108.165.95.10
🇮🇳 104.211.223.234
🇺🇸 100.29.192.100
🇷🇺 93.177.126.187
🇨🇦 4.239.196.57
🇹🇼 1.173.89.48
🇧🇷 201.86.42.211
🇫🇮 147.185.133.29
🇨🇳 125.84.250.232
feedback