JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:8d8:5ff:5f:82:165:89:239

2001:8d8:5ff:5f:82:165:89:239 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 5%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	1&1 IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	infong-eu-pu0014.clienthosting.eu
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Karlsruhe, Baden-Wurttemberg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:8d8:5ff:5f:82:165:89:239

Whois 2001:8d8:5ff:5f:82:165:89:239

IP Abuse Reports for 2001:8d8:5ff:5f:82:165:89:239:

This IP address has been reported a total of 58 times from 3 distinct sources. 2001:8d8:5ff:5f:82:165:89:239 was first reported on April 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-22 23:42:35 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 19:42:30.893142 2026] [security2:error] [pid 18766:tid 18766] [client 2001:8d8:5ff:5f:82:165:89:239:44962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "debradamico.com"] [uri "/wp-config.php.bak"] [unique_id "arMSZmvLmKuvNfappRCTmgAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 22:18:27 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 18:18:20.275546 2026] [security2:error] [pid 12017:tid 12017] [client 2001:8d8:5ff:5f:82:165:89:239:51556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stagemadrid.com"] [uri "/wp-config.php.bak"] [unique_id "arL-rJOsAx9sS4cnq-aaJAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 21:09:41 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:09:36.476302 2026] [security2:error] [pid 14172:tid 14172] [client 2001:8d8:5ff:5f:82:165:89:239:50598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rallyegroup.com"] [uri "/wp-config.php.bak"] [unique_id "arLukN_S9jYO7GZZihNOBAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 20:05:47 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:949110) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:05:39.288074 2026] [security2:error] [pid 3492:tid 3492] [client 2001:8d8:5ff:5f:82:165:89:239:37208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runningsaluki.com"] [uri "/wp-config.php.bak"] [unique_id "arLfkzqfQT0ROPl8_c-SMgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 18:19:28 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:19:20.706951 2026] [security2:error] [pid 29851:tid 29851] [client 2001:8d8:5ff:5f:82:165:89:239:39792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.animz.com"] [uri "/wp-config.php.bak"] [unique_id "arLGqM0WkWOManS8mWi5UwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 17:20:57 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:20:53.653040 2026] [security2:error] [pid 10078:tid 10078] [client 2001:8d8:5ff:5f:82:165:89:239:35632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mystudioinparis.com"] [uri "/wp-config.php.bak"] [unique_id "arK49TjtEnrbbWWwZoir2gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 16:34:31 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:34:27.991641 2026] [security2:error] [pid 12753:tid 12753] [client 2001:8d8:5ff:5f:82:165:89:239:38932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.acquivest.net"] [uri "/wp-config.php.bak"] [unique_id "arKuE0_mjobgeWfpZVfGFwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 16:17:31 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:17:24.885809 2026] [security2:error] [pid 2366:tid 2366] [client 2001:8d8:5ff:5f:82:165:89:239:56430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vincetronics.com"] [uri "/wp-config.php.bak"] [unique_id "arKqFADwPtTB7lE1v3ez4AAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 14:23:16 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:23:13.425954 2026] [security2:error] [pid 9708:tid 9708] [client 2001:8d8:5ff:5f:82:165:89:239:47862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ambarsolar.com"] [uri "/wp-config.php.bak"] [unique_id "arKPUUezI4Ssiy6ckKY2zwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 13:18:01 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:17:57.860249 2026] [security2:error] [pid 23092:tid 23092] [client 2001:8d8:5ff:5f:82:165:89:239:40146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gunningphysio.com"] [uri "/wp-config.php.bak"] [unique_id "arKABe5-7AGliSvbE9c49AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 11:36:54 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:36:51.523507 2026] [security2:error] [pid 10355:tid 10372] [client 2001:8d8:5ff:5f:82:165:89:239:56818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "petrovicimagery.com"] [uri "/wp-config.php.bak"] [unique_id "arJoU0uhmVvAkx9VhaLwDQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 René Hickersberger	2025-08-02 23:59:07 (1 year ago)	[2025-08-02T23:57:41Z] Malicious request to /wordpress.zip	Hacking Bad Web Bot Web App Attack
🇩🇪 ps-center	2025-07-17 18:10:29 (1 year ago)	C1: Web Attack GET /wp-config.php.save	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-15 07:19:27 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 03:19:20.472984 2025] [security2:error] [pid 14394:tid 14437] [client 2001:8d8:5ff:5f:82:165:89:239:50656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradosellers.com"] [uri "/wp-config.php.old"] [unique_id "aHYA-CEWzee5cqloIwQmHwAAAc4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-14 05:41:58 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014 ... show more (mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:89:239 (infong-eu-pu0014.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 01:41:52.863392 2025] [security2:error] [pid 23609:tid 23609] [client 2001:8d8:5ff:5f:82:165:89:239:52036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frantzdabady.com"] [uri "/wp-config.php.old"] [unique_id "aHSYoL2Z3Dd9MPNzZOV3mAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇨🇳 113.45.246.94

🇺🇸 20.163.12.208

🇫🇷 5.189.148.134

🇧🇬 217.79.37.82

🇨🇱 190.5.34.230

🇧🇷 187.84.44.194

🇧🇷 186.216.254.127

🇩🇪 139.59.133.58

🇺🇸 136.67.111.159

🇨🇳 120.48.171.123

🇻🇳 113.164.66.10

🇺🇸 69.49.246.176

🇺🇸 67.175.13.42

🇲🇾 49.125.201.65

🇭🇰 45.207.209.16

🇸🇪 45.130.200.131

🇹🇼 203.217.113.92

🇧🇷 201.32.18.101

🇨🇳 120.246.123.50