82.165.10.79

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
115 reports
92 reporters · latest 33 minutes ago
ISP
IONOS SE
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8560
Hostname(s)
ip82-165-10-79.pbiaas.com
Domain Name
ionos.com
Country
🇪🇸 Spain
City
Logrono, La Rioja
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
115 from 92 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 19 🇫🇷 France 17 🇺🇸 United States of America 12
Most common categories Web App Attack 81 Hacking 34 Port Scan 25 Bad Web Bot 24 Brute-Force 14
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 Peregrine
Fail2Ban Jail: tomcat-honeypot | Evidence: - 82.165.10.79 - - [06/Nov/2026:15:58:55 -0300] "GET /.env HTTP/1.1" 404 414
Bad Web Bot
🇧🇷 diego
[probe-44-49] 2026-11-06 08:43:49, Client: 82.165.10.79, Protocol: 6, Unauthorized activity to HTTP: GET /.env
Web App Attack
🇺🇸 its101
Automated detection by LockdownAccess security system. Attack type(s): env_grab. Reason: Nginx: env_grab attack. Path targeted: unknown. Blocked in Cloudflare.
Web App Attack
🇩🇪 AetherFox
Bad Web Bot Web App Attack
🇫🇷 EDSL
[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 80)
Port Scan Hacking Web App Attack
🇳🇱 VMHeaven.io
Blocked by UFW [80/tcp] Source port: 63655 TTL: 113 Packet length: 52
Port Scan Web App Attack
🇺🇸 anon333
Invalid probes to web server T2006
Hacking Exploited Host
🇦🇺 foff
Source IP: 82.165.10.79 (ES/IONOS SE). Web application attack detected by OWASP CRS (local file inclusion). Attack observed 2026-11-06T12:00:23+11:00.
Web App Attack
🇫🇷 LRob
Secret file probe | method: GET | path: /.env | ua: Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
Hacking Web App Attack
🇫🇷 pm33
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇫🇷 EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Web Attack)
Hacking Port Scan Web App Attack
🇧🇷 ufn.edu.br
Exploited Host Web App Attack
🇪🇸 elcruzado.es
(pop3d) Failed POP3 login from 82.165.10.79 (ES/Spain/ip82-165-10-79.pbiaas.com)
Brute-Force
Anonymous
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=ES; ASN=8560 IONOS SE
Hacking
🇸🇪 KIDOS
IIS malicious activity: high_400_error_rate (60% of requests are 400 errors)
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇸 213.96.9.204
🇺🇸 198.74.56.135
🇧🇷 181.233.2.97
🇮🇩 163.7.1.218
🇹🇼 114.32.19.171
🇨🇳 110.81.23.87
🇵🇰 103.151.46.248
🇷🇺 91.244.254.217
🇮🇹 83.224.157.121
🇦🇱 79.174.27.146
🇱🇹 62.60.130.57
🇺🇸 38.128.95.110
🇩🇪 3.77.24.41
🇷🇴 2.57.121.25
🇰🇷 218.149.228.149
🇹🇼 198.235.24.78
🇹🇼 198.235.24.74
🇹🇼 198.235.24.73
🇷🇴 193.32.162.15
🇪🇨 190.11.3.42
feedback