JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.165.15.106

82.165.15.106 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 100%: ?

100%

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	ip82-165-15-106.pbiaas.com
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.165.15.106

Whois 82.165.15.106

IP Abuse Reports for 82.165.15.106:

This IP address has been reported a total of 146 times from 66 distinct sources. 82.165.15.106 was first reported on June 5th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 EDSL	2026-06-19 03:35:59 (2 hours ago)	[mail.edsl.fr] Blocked by SysWarden Firewall (Web Attack)	Web App Attack Hacking Port Scan
🇧🇪 voormedia	2026-06-19 02:49:23 (3 hours ago)	Accessed trap at '/.env'	Web App Attack
🇫🇷 Baking333	2026-06-19 02:31:15 (3 hours ago)	[redacted] 82.165.15.106 - - [19/Jun/2026:03:31:13 +0100] "GET /.env HTTP/1.1" 302 5263 0/52900 "-" ... show more [redacted] 82.165.15.106 - - [19/Jun/2026:03:31:13 +0100] "GET /.env HTTP/1.1" 302 5263 0/52900 "-" "Mozilla/5.0 (X11; Linux x86_64)" [redacted] 82.165.15.106 - - [19/Jun/2026:03:31:13 +0100] "GET / HTTP/1.1" 206 9006 0/152332 "https://[redacted]/.env" "Mozilla/5.0 (X11; Linux x86_64)" show less	Bad Web Bot Web App Attack
🇺🇸 TNZ	2026-06-19 02:26:56 (3 hours ago)	Automated honeypot: fake_env_accessed \| Path: /.env \| ISP: AS8560 IONOS SE \| ASN: AS8560 IONOS SE [H ... show more Automated honeypot: fake_env_accessed \| Path: /.env \| ISP: AS8560 IONOS SE \| ASN: AS8560 IONOS SE [HOSTING] \| Abuse score: 100 \| Open ports: [443] \| UA: Mozilla/5.0 (X11; Linux x86_64) show less	Web App Attack
🇫🇷 Baking333	2026-06-18 23:53:06 (6 hours ago)	[redacted] 82.165.15.106 - - [19/Jun/2026:00:53:04 +0100] "GET /.env HTTP/1.1" 302 5273 0/61371 "-" ... show more [redacted] 82.165.15.106 - - [19/Jun/2026:00:53:04 +0100] "GET /.env HTTP/1.1" 302 5273 0/61371 "-" "Mozilla/5.0 (X11; Linux x86_64)" [redacted] 82.165.15.106 - - [19/Jun/2026:00:53:04 +0100] "GET / HTTP/1.1" 206 5277 0/166940 "https://[redacted]/.env" "Mozilla/5.0 (X11; Linux x86_64)" show less	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-06-18 23:22:47 (6 hours ago)	(mod_security) mod_security (id:11000011) triggered by 82.165.15.106 (FR/France/Ãle-de-France/Paris ... show more (mod_security) mod_security (id:11000011) triggered by 82.165.15.106 (FR/France/Ãle-de-France/Paris/-/[AS8560 IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 02:22:42.931432 2026] [security2:error] [pid 2284:tid 2505] [client 82.165.15.106:49862] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "pbiaas.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: ip82-165-15-106.pbiaas.com"] [severity "CRITICAL"] [hostname "pankoskal.gr"] [uri "/.env"] [unique_id "ajR9wrCXX3cFyBc7x7QUngAAANA"] show less	Port Scan
🇨🇭 lufi	2026-06-18 22:30:11 (7 hours ago)	2026-06-19T00:30:10+02:00 lufischer04 ids442 2026-06-19 00:30:10 82.165.15.106: blacklistedPath: /.e ... show more 2026-06-19T00:30:10+02:00 lufischer04 ids442 2026-06-19 00:30:10 82.165.15.106: blacklistedPath: /.env ... show less	Web Spam Brute-Force Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 22:01:09 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.165.15.106 (ip82-165-15-106.pbiaas.com): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 82.165.15.106 (ip82-165-15-106.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 18:01:03.153967 2026] [security2:error] [pid 2559:tid 2559] [client 82.165.15.106:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "antitribu.com"] [uri "/.env"] [unique_id "ajRqn1s-HMuR8qO4mUCfOwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Jimbo67	2026-06-18 21:11:29 (8 hours ago)	Cloudflare WAF: 1 hits in 30s \| action=block \| abuse=confirmed_abuse \| categories=21 \| rule_id=a8325 ... show more Cloudflare WAF: 1 hits in 30s \| action=block \| abuse=confirmed_abuse \| categories=21 \| rule_id=a8325d956f104d2194269f1386e09ef1 \| URIs=/.env \| confidence=0.95 show less	Web App Attack
🇳🇱 oisecnet	2026-06-18 21:03:04 (8 hours ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-06-18. 1 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-06-18. 1 requests from this IP. show less	Brute-Force Web App Attack SSH
🇬🇷 setupgr	2026-06-18 20:38:35 (9 hours ago)	(mod_security) mod_security (id:11000011) triggered by 82.165.15.106 (FR/France/Ãle-de-France/Paris ... show more (mod_security) mod_security (id:11000011) triggered by 82.165.15.106 (FR/France/Ãle-de-France/Paris/-/[AS8560 IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 23:38:31.281832 2026] [security2:error] [pid 3299841:tid 3299991] [client 82.165.15.106:21226] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "pbiaas.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: ip82-165-15-106.pbiaas.com"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/.env"] [unique_id "ajRXR-gpCrSMSCd7XgcogwAAAdM"] show less	Port Scan
🇫🇷 Baking333	2026-06-18 20:38:03 (9 hours ago)	[redacted] 82.165.15.106 - - [18/Jun/2026:21:38:01 +0100] "GET /.env HTTP/1.1" 302 5308 0/77953 "-" ... show more [redacted] 82.165.15.106 - - [18/Jun/2026:21:38:01 +0100] "GET /.env HTTP/1.1" 302 5308 0/77953 "-" "Mozilla/5.0 (X11; Linux x86_64)" [redacted] 82.165.15.106 - - [18/Jun/2026:21:38:01 +0100] "GET / HTTP/1.1" 206 9006 0/218777 "https://[redacted]/.env" "Mozilla/5.0 (X11; Linux x86_64)" show less	Bad Web Bot Web App Attack
🇺🇸 interbiznw.com	2026-06-18 19:30:16 (10 hours ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇦🇺 paulshipley.com.au	2026-06-18 13:28:13 (16 hours ago)	[Thu Jun 18 23:28:12.863223 2026] [security2:error] [pid 499964] [client 82.165.15.106:38240] [clien ... show more [Thu Jun 18 23:28:12.863223 2026] [security2:error] [pid 499964] [client 82.165.15.106:38240] [client 82.165.15.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/.env"] [unique_id "ajPybJTc4gyK1GYJxqRPvAAAAAQ"] ... show less	Web App Attack
🇺🇸 Lezetho	2026-06-18 12:00:44 (17 hours ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.222.71.218

🇺🇸 143.42.164.204

🇷🇺 178.176.186.158

🇧🇷 129.121.54.208

🇩🇪 94.26.106.80

🇺🇸 65.49.20.92

🇸🇬 47.236.159.215

🇺🇸 2604:a940:300:5b6:0:2b::

🇰🇷 2406:da12:c4c:af01:5636:3b13:59b2:9e92

🇵🇭 180.191.124.238

🇷🇺 176.210.121.154

🇮🇳 139.59.59.165

🇰🇷 119.200.229.33

🇬🇧 118.26.104.78

🇺🇸 71.203.182.141

🇨🇳 47.112.97.49

🇮🇩 36.79.238.140

🇧🇷 2804:1b3:a301:5911:b86a:ebf0:854c:3599

🇺🇸 205.210.31.53

🇺🇸 192.250.227.24