JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.165.2.98

82.165.2.98 was found in our database!

This IP was reported 786 times. Confidence of Abuse is 100%: ?

100%

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Domain Name	ionos.com
Country	🇪🇸 Spain
City	Logrono, La Rioja

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.165.2.98

Whois 82.165.2.98

IP Abuse Reports for 82.165.2.98:

This IP address has been reported a total of 786 times from 178 distinct sources. 82.165.2.98 was first reported on June 1st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-24 01:01:45 (1 day ago)	Attack detected: 82.165.2.98 [2026-07-24] Categories: 18 --- wp-login brute force (47 hits) --- 82.1 ... show more Attack detected: 82.165.2.98 [2026-07-24] Categories: 18 --- wp-login brute force (47 hits) --- 82.165.2.98 - - [06/Jun/2026:09:03:49 +0000] "POST /wp-login.php HTTP/2.0" 200 4417 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 82.165.2.98 - - [15/Jun/2026:18:03:20 +0000] "POST /wp-login.php HTTP/2.0" 200 4417 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 82.165.2.98 - - [17/Jun/2026:04:06:08 +0000] "POST /wp-login.php HTTP/2.0" 200 4417 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 82.165.2.98 - - [19/Jun/2026:02:52:19 +0000] "POST /wp-login.php HTTP/2.0" 200 4394 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" 82.165.2.98 - - [21/Jun/2026:13:48:22 +0000] "POST /wp-login.php HTTP/2.0" 200 4416 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebK show less	Brute-Force
🇩🇪 FeG Deutschland	2026-06-28 18:36:07 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 LRob	2026-06-28 12:45:10 (3 weeks ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-06-28 07:13:12 (3 weeks ago)	[Sun Jun 28 07:27:59.063271 2026] [authz_core:error] [pid 44947:tid 44976] [client 82.165.2.98:39316 ... show more [Sun Jun 28 07:27:59.063271 2026] [authz_core:error] [pid 44947:tid 44976] [client 82.165.2.98:39316] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Sun Jun 28 07:27:59.175871 2026] [authz_core:error] [pid 44947:tid 44984] [client 82.165.2.98:39316] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://cimt-precision.de/wp-login.php [Sun Jun 28 09:13:10.098676 2026] [authz_core:error] [pid 44947:tid 44981] [client 82.165.2.98:42452] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Sun Jun 28 09:13:10.223831 2026] [authz_core:error] [pid 44947:tid 44985] [client 82.165.2.98:42452] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://cimt-precision.de/wp-login.php ... show less	Brute-Force Web App Attack
🇩🇪 wpadm4	2026-06-28 07:12:25 (3 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 masterguru	2026-06-28 06:46:56 (3 weeks ago)	(wordpress) Apache: Failed WordPress login from 82.165.2.98 (ES/Spain/-): 10 in the last 3600 secs ( ... show more (wordpress) Apache: Failed WordPress login from 82.165.2.98 (ES/Spain/-): 10 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 FeG Deutschland	2026-06-28 06:27:56 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇺🇸 jormaster3k	2026-06-28 06:17:46 (3 weeks ago)	Attack against WordPress	Web App Attack
🇺🇸 Victor López	2026-06-28 05:25:10 (3 weeks ago)	s8.digitalhypepro.com 82.165.2.98 - - [28/Jun/2026:00:21:21 -0500] "GET /wp-login.php HTTP/2.0" 200 ... show more s8.digitalhypepro.com 82.165.2.98 - - [28/Jun/2026:00:21:21 -0500] "GET /wp-login.php HTTP/2.0" 200 3232 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" s8.digitalhypepro.com 82.165.2.98 - - [28/Jun/2026:00:21:23 -0500] "POST /wp-login.php HTTP/2.0" 200 3404 "https://s8.digitalhypepro.com/wp-login.php" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.longfisolutions.com 82.165.2.98 - - [28/Jun/2026:00:25:09 -0500] "GET /wp-login.php HTTP/2.0" 404 7543 "https://longfisolutions.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇷🇴 SpamStopper	2026-06-27 23:32:35 (3 weeks ago)	Fail2Ban - WP Spoofing	Port Scan Brute-Force Web App Attack
🇫🇷 tecnicorioja	2026-06-27 22:01:27 (3 weeks ago)	wp-login attack [27/Jun/2026:20:31:19	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 18:33:46 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 82.165.2.98 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 82.165.2.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 14:33:42.374203 2026] [security2:error] [pid 26984:tid 27006] [client 82.165.2.98:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.mindgardens.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mindgardens.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akAXhsL_A_RDEisRFfIZ9AAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-27 18:25:11 (3 weeks ago)	Brute forcing Wordpress login	Hacking Web App Attack
🇩🇪 LRob	2026-06-27 18:15:04 (3 weeks ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇩🇪 london2038.com	2026-06-27 18:07:50 (3 weeks ago)	Attacking WordPress 82.165.2.98 - - [27/Jun/2026:20:07:47 +0200] "POST /wp-login.php HTTP/2.0" 503 1 ... show more Attacking WordPress 82.165.2.98 - - [27/Jun/2026:20:07:47 +0200] "POST /wp-login.php HTTP/2.0" 503 19291 "https://<REDACTED>/wp-login.php" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack

Showing 1 to 15 of 786 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 194.165.16.122

🇺🇸 162.216.149.16

🇺🇸 135.119.74.228

🇮🇩 125.167.23.17

🇫🇷 85.217.140.29

🇲🇾 49.124.149.47

🇭🇰 43.132.141.236

🇬🇧 35.203.211.93

🇺🇸 216.73.216.141

🇷🇺 213.180.203.239

🇺🇸 206.189.66.174

🇺🇸 195.184.76.17

🇬🇧 193.46.0.93

🇧🇷 177.11.17.179

🇮🇹 172.213.208.20

🇺🇸 159.89.49.171

🇫🇮 147.185.133.75

🇧🇬 79.124.49.70

🇦🇷 45.238.106.159

🇺🇸 45.194.67.66