JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.165.85.15

82.165.85.15 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 27%: ?

27%

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	infongp-fr28.clienthosting.eu
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Karlsruhe, Baden-Wurttemberg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.165.85.15

Whois 82.165.85.15

IP Abuse Reports for 82.165.85.15:

This IP address has been reported a total of 52 times from 32 distinct sources. 82.165.85.15 was first reported on April 4th 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-06-11 07:49:06 (3 weeks ago)	82.165.85.15 - - [11/Jun/2026:09:49:06 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux ... show more 82.165.85.15 - - [11/Jun/2026:09:49:06 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-06-05 06:49:08 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 82.165.85.15 (infongp-fr28.clienthosting.eu): 1 ... show more (mod_security) mod_security (id:225170) triggered by 82.165.85.15 (infongp-fr28.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 02:49:05.310581 2026] [security2:error] [pid 17761:tid 17855] [client 82.165.85.15:45888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|grupojdg.neotienda.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grupojdg.neotienda.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiJxYSZ5sNx6NEL6CvewFQAAAgk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 06:30:09 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 82.165.85.15 (infongp-fr28.clienthosting.eu): 1 ... show more (mod_security) mod_security (id:225170) triggered by 82.165.85.15 (infongp-fr28.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 02:30:00.961068 2026] [security2:error] [pid 18767:tid 18767] [client 82.165.85.15:46236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|exhaustthelimits.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "exhaustthelimits.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiJs6CLD5SPGtYZ86L3ZcgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-02 04:26:34 (1 month ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 82.165.85.15 (DE/Germany/infongp-fr28.clienth ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 82.165.85.15 (DE/Germany/infongp-fr28.clienthosting.eu): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 solution.it	2026-06-01 00:03:36 (1 month ago)	[Mon Jun 01 02:03:35.958191 2026] [php7:error] [pid 65404:tid 65404] [client 82.165.85.15:44746] scr ... show more [Mon Jun 01 02:03:35.958191 2026] [php7:error] [pid 65404:tid 65404] [client 82.165.85.15:44746] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇩🇪 FeG Deutschland	2026-05-30 17:48:58 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇲🇹 Malta	2026-05-26 21:53:44 (1 month ago)	82.165.85.15 - - [26/May/2026:23:53:43 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux ... show more 82.165.85.15 - - [26/May/2026:23:53:43 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 nationaleventpros.com	2026-05-26 18:12:17 (1 month ago)	WordPress login attempt	Brute-Force
🇺🇸 lostswordfish.com	2026-05-22 19:26:03 (1 month ago)	Wordfence waf block on wp20190711M4	Web App Attack
🇫🇷 tecnicorioja	2026-05-21 22:00:46 (1 month ago)	wp-login attack [21/May/2026:13:27:49	Brute-Force Web App Attack
🇲🇹 Malta	2026-05-17 00:21:33 (1 month ago)	82.165.85.15 - - [17/May/2026:02:21:33 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 82.165.85.15 - - [17/May/2026:02:21:33 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 octageeks.com	2026-04-15 04:08:02 (2 months ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇳🇱 BlueWire Hosting	2025-08-11 20:10:24 (10 months ago)	Probing for application vulnerabilities	Brute-Force Web App Attack
🇩🇪 LRob	2025-08-11 08:45:11 (10 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2025-08-02 14:15:23 (11 months ago)	2025-08-02T16:15:22.319743+02:00 ipoac.nl wordpress(*)[228534]: Authentication failure forfrom ... show more 2025-08-02T16:15:22.319743+02:00 ipoac.nl wordpress()[228534]: Authentication failure for*from 82.165.85.15 show less	Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4864:20::24e

🇬🇧 195.140.214.20

🇺🇸 65.49.20.99

🇱🇻 45.85.105.22

🇧🇷 187.58.66.231

🇮🇳 157.119.227.28

🇨🇴 153.67.112.104

🇺🇸 144.129.185.98

🇫🇷 91.196.152.177

🇺🇸 65.49.1.173

🇩🇪 2620:171:ab:f003:9999::242

🇨🇳 139.199.228.228

🇧🇷 137.131.139.230

🇰🇷 118.220.149.121

🇫🇷 85.217.140.30

🇺🇸 20.169.106.171

🇫🇮 2a00:1450:4010:c02::12e

🇸🇳 160.0.130.104

🇺🇸 135.18.128.209

🇱🇰 124.43.80.167