JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.223.50.213

82.223.50.213 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 0%: ?

ISP	arsys.es
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Domain Name	arsys.es
Country	🇪🇸 Spain
City	Logrono, La Rioja

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.223.50.213

Whois 82.223.50.213

IP Abuse Reports for 82.223.50.213:

This IP address has been reported a total of 154 times from 97 distinct sources. 82.223.50.213 was first reported on October 5th 2025, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Selckie	2025-10-11 04:48:50 (11 months ago)	fail2ban: NGINX unusual impact	Port Scan
🇬🇧 myintarweb	2025-10-11 03:20:52 (11 months ago)	82.223.50.213 - - [09/Oct/2025:09:55:36 +0100] 443 "GET /.env HTTP/1.1" 301 5491 "-" "Mozilla/5.0 (X ... show more 82.223.50.213 - - [09/Oct/2025:09:55:36 +0100] 443 "GET /.env HTTP/1.1" 301 5491 "-" "Mozilla/5.0 (X11; Linux x86_64)" ... show less	Hacking Bad Web Bot Web App Attack
🇬🇧 Swiptly	2025-10-10 15:42:39 (11 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇫🇷 ingroscart.it	2025-10-10 15:18:19 (11 months ago)	(mod_security) mod_security triggered on hostname [redacted] 82.223.50.213 (-)	SQL Injection
Anonymous	2025-10-10 14:02:29 (11 months ago)	82.223.50.213 - - [10/Oct/2025:22:02:26 +0800] "GET /.env HTTP/1.1" 404 293 "-" "Mozilla/5.0 (X11; L ... show more 82.223.50.213 - - [10/Oct/2025:22:02:26 +0800] "GET /.env HTTP/1.1" 404 293 "-" "Mozilla/5.0 (X11; Linux x86_64)" "-" 82.223.50.213 - - [10/Oct/2025:22:02:26 +0800] "GET /app/.env HTTP/1.1" 404 293 "-" "Mozilla/5.0 (X11; Linux x86_64)" "-" 82.223.50.213 - - [10/Oct/2025:22:02:26 +0800] "GET /api/.env HTTP/1.1" 404 293 "-" "Mozilla/5.0 (X11; Linux x86_64)" "-" 82.223.50.213 - - [10/Oct/2025:22:02:26 +0800] "GET /.env HTTP/1.1" 404 293 "https://itdefence.asia/.env" "Mozilla/5.0 (X11; Linux x86_64)" "-" 82.223.50.213 - - [10/Oct/2025:22:02:26 +0800] "GET /app/.env HTTP/1.1" 404 293 "https://itdefence.asia/app/.env" "Mozilla/5.0 (X11; Linux x86_64)" "-" ... show less	Web App Attack
🇩🇪 bescared	2025-10-10 12:00:21 (11 months ago)	F2B - Malicious activity detected. Too many 403.	Hacking Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2025-10-10 10:37:55 (11 months ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 todix	2025-10-10 08:36:32 (11 months ago)	WebAttack or semilar from 82.223.50.213	Web App Attack
🇺🇸 juguemosalacarioca.com	2025-10-10 06:20:37 (11 months ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
Anonymous	2025-10-10 05:55:20 (11 months ago)	(mod_security) mod_security triggered on hostname [redacted] 82.223.50.213 (-)	SQL Injection
🇩🇪 macrob	2025-10-10 05:35:40 (11 months ago)	2025/10/10 05:35:39 [error] 971402#971402: 17385477 access forbidden by rule, client: 82.223.50.213 ... show more 2025/10/10 05:35:39 [error] 971402#971402: 17385477 access forbidden by rule, client: 82.223.50.213, server: finami.mx, request: "GET /.env HTTP/2.0", host: "finami.mx" 2025/10/10 05:35:39 [error] 971400#971400: 17385662 access forbidden by rule, client: 82.223.50.213, server: finami.mx, request: "GET /api/.env HTTP/2.0", host: "finami.mx" 2025/10/10 05:35:39 [error] 971402#971402: 17386912 access forbidden by rule, client: 82.223.50.213, server: finami.mx, request: "GET /api/.env HTTP/2.0", host: "www.finami.mx" ... show less	Web App Attack
🇫🇷 dynamix	2025-10-10 04:30:48 (11 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-10-10 04:06:23 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 82.223.50.213 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.223.50.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 00:06:18.565572 2025] [security2:error] [pid 5450:tid 5450] [client 82.223.50.213:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hondabvi.com"] [uri "/app/.env"] [unique_id "aOiGOjc6qvGdjAoFC9hTsgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 alph44	2025-10-10 03:42:18 (11 months ago)	(mod_security) mod_security (id:949110) triggered by 82.223.50.213 (ES/Spain/-): 5 in the last 3600 ... show more (mod_security) mod_security (id:949110) triggered by 82.223.50.213 (ES/Spain/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: show less	Web App Attack
🇮🇩 Burayot	2025-10-10 01:28:21 (11 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 82.223.50.213 (-): 2 in the last 360 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 82.223.50.213 (-): 2 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.250.177.185

🇺🇦 46.150.65.184

🇺🇸 23.94.102.136

🇧🇷 190.89.55.250

🇧🇩 150.228.135.20

🇫🇮 144.31.126.189

🇺🇸 107.150.97.10

🇺🇸 70.166.134.214

🇯🇵 220.219.55.24

🇩🇪 165.154.164.112

🇦🇺 115.129.111.109

🇫🇷 109.199.114.146

🇺🇸 68.5.2.254

🇷🇴 2.57.121.112

🇬🇧 213.166.84.40

🇫🇷 212.18.127.45

🇳🇱 195.178.110.30

🇮🇳 157.48.88.38

🇺🇸 135.129.163.50

🇸🇪 94.255.246.207