JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.165.185.56

82.165.185.56 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 100%: ?

100%

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.165.185.56

Whois 82.165.185.56

IP Abuse Reports for 82.165.185.56:

This IP address has been reported a total of 63 times from 42 distinct sources. 82.165.185.56 was first reported on July 1st 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 integrantservices.com	2026-07-03 00:07:20 (1 minute ago)	(wordpress) Failed wordpress login from 82.165.185.56 (DE/Germany/-)	Brute-Force
🇫🇷 tecnicorioja	2026-07-02 22:00:54 (2 hours ago)	wp-login attack [02/Jul/2026:21:49:29	Brute-Force Web App Attack
🇺🇸 factor1	2026-07-02 21:06:50 (3 hours ago)	Fail2ban at churndash Reports Abuse.	Brute-Force Web App Attack
🇩🇪 nyt	2026-07-02 19:46:12 (4 hours ago)	Brute-Force, Web App Attack, suspicious: WP login POST blocked by WAF	Brute-Force Web App Attack
🇺🇸 ambor	2026-07-02 18:15:08 (5 hours ago)	L0ss Honeypot: WordPress login access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-02 17:53:47 (6 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 london2038.com	2026-07-02 17:52:42 (6 hours ago)	Attacking WordPress 82.165.185.56 - - [02/Jul/2026:19:52:38 +0200] "POST /wp-login.php HTTP/2.0" 503 ... show more Attacking WordPress 82.165.185.56 - - [02/Jul/2026:19:52:38 +0200] "POST /wp-login.php HTTP/2.0" 503 19289 "https://<REDACTED>/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-07-02 17:47:20 (6 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 Victor López	2026-07-02 15:50:35 (8 hours ago)	s8.digitalhypepro.com 82.165.185.56 - - [02/Jul/2026:10:47:53 -0500] "GET /wp-login.php HTTP/2.0" 20 ... show more s8.digitalhypepro.com 82.165.185.56 - - [02/Jul/2026:10:47:53 -0500] "GET /wp-login.php HTTP/2.0" 200 3233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" s8.digitalhypepro.com 82.165.185.56 - - [02/Jul/2026:10:47:54 -0500] "POST /wp-login.php HTTP/2.0" 200 3403 "https://s8.digitalhypepro.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" vpardilalaw.com 82.165.185.56 - - [02/Jul/2026:10:50:35 -0500] "GET /wp-login.php HTTP/2.0" 200 1918 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-02 13:45:12 (10 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 nationaleventpros.com	2026-07-02 13:36:30 (10 hours ago)	WordPress login attempt	Brute-Force
🇫🇷 ELYAZ	2026-07-02 13:23:27 (10 hours ago)	(y4) Failed scan -byebye- from 82.165.185.56 (DE/Germany/-): (CF_ENABLE)	Hacking
🇺🇸 TAY	2026-07-02 12:32:36 (11 hours ago)	82.165.185.56 - - [02/Jul/2026:20:24:45 +0800] "POST /wp-login.php HTTP/1.1" 200 2645 "https://mail. ... show more 82.165.185.56 - - [02/Jul/2026:20:24:45 +0800] "POST /wp-login.php HTTP/1.1" 200 2645 "https://mail.littleprairie.com.my/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 82.165.185.56 - - [02/Jul/2026:20:27:04 +0800] "POST /wp-login.php HTTP/1.1" 200 2973 "https://mail.autism-cvc.org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 82.165.185.56 - - [02/Jul/2026:20:32:35 +0800] "POST /wp-login.php HTTP/1.1" 200 2676 "https://littleprairie.com.my/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Brute-Force
🇩🇪 Marc	2026-07-02 12:12:11 (11 hours ago)	82.165.185.56 - - [02/Jul/2026:12:40:56 +0200] "GET /wp-login.php HTTP/2.0" 200 16040 "https://wasch ... show more 82.165.185.56 - - [02/Jul/2026:12:40:56 +0200] "GET /wp-login.php HTTP/2.0" 200 16040 "https://wasch-arena.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 82.165.185.56 - - [02/Jul/2026:12:40:58 +0200] "GET /wp-login.php HTTP/2.0" 200 15734 "https://wasch-arena.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 82.165.185.56 - - [02/Jul/2026:13:05:01 +0200] "GET /wp-login.php HTTP/2.0" 200 3456 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 82.165.185.56 - - [02/Jul/2026:13:05:03 +0200] "POST /wp-login.php HTTP/2.0" 200 3293 "https://alsarnsberg.eu/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 82.165.185.56 - - [02/Jul/2026:14:12:10 +0200] "GET /wp-login.php HTTP/2.0" 200 3455 "https://als-arnsberg.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.3 show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 10:57:14 (13 hours ago)	(mod_security) mod_security (id:225170) triggered by 82.165.185.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 82.165.185.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 06:57:06.802565 2026] [security2:error] [pid 28507:tid 28507] [client 82.165.185.56:35044] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rimaine.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rimaine.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akZEAg4l_uBU_UCq91T-KQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 184.22.106.168

🇮🇳 125.20.210.182

🇨🇳 123.123.204.158

🇸🇬 103.187.146.107

🇱🇹 81.30.98.26

🇱🇹 62.60.130.169

🇮🇱 2a06:c701:4174:9b00:600e:c122:4449:3e8e

🇫🇷 2a01:e0a:f12:15b0:4c54:bf99:40b9:1fb4

🇮🇳 2404:7c80:85:4e0f:3c5d:2988:7d58:5b9e

🇫🇷 2001:41d0:367:cab::1

🇸🇦 2001:16a2:67c6:ee00:7471:1f97:c8e1:cd0e

🇮🇹 213.215.209.101

🇹🇳 196.203.231.220

🇳🇱 195.26.87.217

🇲🇽 187.216.224.85

🇨🇱 186.189.90.236

🇬🇧 185.247.137.2

🇮🇶 185.136.148.68

🇨🇴 185.28.217.179

🇵🇰 182.184.213.37