66.245.172.13

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
361 reports
221 reporters · latest 26 minutes ago
ISP
EliteWork LLC
Usage Type
Fixed Line ISP
ASN
AS397731
Domain Name
elitework.com
Country
🇺🇸 United States of America
City
Seattle, Washington
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
361 from 221 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 14 🇩🇪 Germany 13 🇳🇱 Netherlands 8
Most common categories Web App Attack 49 Hacking 17 Port Scan 17 Brute-Force 14 Bad Web Bot 7
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Hary74656
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1. [client 66.245.172.13] [realclient 66.245.172.13] [07/Nov/2026:02:33:14 +0100] [vhost schani.hostmi.at] 403 "GET /.git/config HTTP/1.1"
Web App Attack
Anonymous
automatically banned
Brute-Force Web App Attack
🇩🇪 ut-addicted.com
Brute-Force Web App Attack
🇺🇸 mcp-log-sentinel
Port Scan Hacking Web App Attack
🇳🇱 wlt-blocker
Unauthorized access to webpage admin
Web App Attack
🇧🇪 voormedia
Accessed trap at '/.git/config'
Web App Attack
🇩🇪 D3vNu11
Level: (LOW): Service Abuse via CitrixHoneypot IOC Country: United States 1x -> Target Country: Finnland HTTPS
Hacking Web App Attack
Anonymous
66.245.172.13 - - [06/Nov/2026:20:05:14 +0000] "GET /.git/config HTTP/1.1" 404 6815 "-" "Mozilla/5.0 (compatible; Scanner/1.0)" ...
Brute-Force Web App Attack
🇩🇪 Progetto1
Detected via HAProxyScanner at 2026-11-06 19:57:01 UTC on destination port WEB (80/443). Repeated scan / connection.
Port Scan Hacking Brute-Force
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇫🇷 uthul
T-Pot honeypot: 12 hits on ports [80, 443] (automated)
Port Scan Web App Attack
Anonymous
66.245.172.13 - [CN: USA] [06/Nov/2026:16:10:22 -0300] "GET /.git/config HTTP/1.1" Dest:Port 80 HTTP_Status: 301 ...
Web App Attack
🇫🇷 vtchost.com
portscan 80/443 on honeypot system ...
Port Scan
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git)
Hacking Brute-Force Web App Attack
Anonymous
Unauthorized access (80/tcp/http)
Port Scan Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 154.202.99.61
🇰🇷 119.204.122.94
🇺🇸 65.111.8.252
🇧🇷 201.15.149.254
🇳🇱 193.47.62.69
🇪🇨 186.66.200.19
🇨🇿 185.87.121.1
🇺🇸 156.242.2.13
🇺🇸 154.198.18.22
🇺🇸 154.94.43.110
🇺🇸 154.85.6.72
🇵🇰 137.59.230.31
🇮🇳 103.55.89.5
🇬🇧 87.106.65.126
🇳🇱 45.148.10.233
🇧🇷 200.189.22.209
🇺🇸 198.20.168.228
🇷🇴 193.32.162.84
🇳🇱 185.242.226.98
🇺🇸 156.233.41.38
feedback