Substantial Risk
Threat level 8/10 for 82.165.166.246 based on 34 documented incidents.
Consistent suspicious behavior patterns. 95% confidence rating.
More threatening than 78% of monitored IPs
IP Address
82.165.166.246
IPv4
Public
DE
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Above Average Risk
DE
Location
IONOS SE
ASN 8560
34
Reports
Mixed
Data Source
Threat Categories
Hacking
27
Brute-Force
21
WP Login Brute Force
21
Port Scan
10
WP XML-RPC Brute Force
10
Bad Web Bot
6
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
26. April 2026
Last Activity
30. April 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 8560) with generally good reputation. The ISP IONOS SE maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
91%
Verified
Confidence History
20. Apr 2026 - 30. Apr 2026
95%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking DDoS Attack | Community | 75% | |
| Bad Web Bot WP Fake SEO Bot Hacking +2 | Honeypot x5 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot x2 | 75% | |
| Bad Web Bot WP Fake SEO Bot Brute-Force +1 | Honeypot x3 | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Bad Web Bot WP Fake SEO Bot Hacking +2 | Honeypot x3 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot x2 | 75% | |
| Port Scan WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force +2 | Honeypot x2 | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking Bad Web Bot +2 | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking Bad Web Bot +2 | Honeypot x2 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Bad Web Bot WP Fake SEO Bot Hacking +2 | Honeypot x2 | 75% | |
| Hacking Brute-Force WP Login Brute Force +2 | Honeypot x2 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot x2 | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 82.165.166.246
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS8560
- ISP
- IONOS SE
DNS Information
- Reverse DNS
- mail.icca-reims.fr
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 34
- First Reported
- 19 Apr 2026
- Last Reported
- 30 Apr 2026, 08:08
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8560
IONOS SE
US
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
398
Total IPs Monitored
27,221
Total Reports
68.4
Reports per IP
Network Context
This IP address belongs to IONOS SE (AS8560), which manages 398 IP addresses in our monitoring system. Out of these, 27,221 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
78
%
Global Threat Ranking
This IP is more threatening than 78% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 153,858 reported IPs worldwide
Threat Level
8/10
avg: 4.8
++
Total Reports
34
avg: 28
+
Network Comparison
Compared against 448 IPs in ASN 8560
Threat Level
8/10
network avg: 5.2
++
Total Reports
34
network avg: 64
-
Network IONOS SE has overall threat level 2/10
Geographic Comparison
Compared against 6,143 IPs in DE
Threat Level
8/10
country avg: 5.3
++
Total Reports
34
country avg: 68
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 Apr 2026
3 reports
Daily Average
0.1
reports/day
Most Active
Saturday
17 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
31
Brute-Force
22
WP Login Brute Force
22
Port Scan
13
WP XML-RPC Brute Force
13
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
145,363 threat incidents tracked globally • Last 24h: 19,391 Logs
FEED
Top Threat Sources
-
01
United States32,793 22.6%
-
02
China23,511 16.2% -
03
India15,734 10.8% -
04
Brazil7,030 4.8% -
05
Germany6,143 4.2%
-
06
Singapore5,764 4% -
07
Indonesia4,031 2.8% -
08
Netherlands3,758 2.6% -
09
Russia3,704 2.5% -
10
United Kingdom3,678 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.3/10
Avg Threat
97%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
185.249.74.198
10/10
Confidence
100%
Reports
41
Location
AT
AT
217.160.226.51
10/10
Confidence
100%
Reports
32
Location
ES
ES
77.68.30.172
10/10
Confidence
100%
Reports
17
Location
GB
GB
198.251.71.113
8/10
Confidence
99%
Reports
57
Location
US
US
185.230.219.29
10/10
Confidence
99%
Reports
42
Location
AT
AT
109.228.50.118
8/10
Confidence
99%
Reports
34
Location
GB
GB
94.143.141.37
10/10
Confidence
99%
Reports
29
Location
ES
ES
87.106.29.151
8/10
Confidence
97%
Reports
34
Location
FR
FR
212.227.80.34
8/10
Confidence
97%
Reports
30
Location
FR
FR
74.208.113.217
8/10
Confidence
97%
Reports
20
Location
US
US
82.165.2.172
8/10
Confidence
97%
Reports
14
Location
ES
ES
217.154.38.181
10/10
Confidence
95%
Reports
101
Location
GB
GB
217.154.35.203
10/10
Confidence
95%
Reports
71
Location
GB
GB
85.215.109.45
10/10
Confidence
94%
Reports
706
Location
DE
DE
212.132.127.66
10/10
Confidence
94%
Reports
354
Location
DE
DE
217.154.106.153
10/10
Confidence
94%
Reports
104
Location
ES
ES
217.154.52.201
10/10
Confidence
94%
Reports
61
Location
GB
GB
217.154.34.142
10/10
Confidence
94%
Reports
49
Location
GB
GB
212.132.108.100
10/10
Confidence
94%
Reports
37
Location
DE
DE
31.70.69.187
8/10
Confidence
94%
Reports
14
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
118.193.59.142
7/10
Confidence
100%
Reports
72
ISP
UCLOUD INFORMAT...
95.89.149.179
10/10
Confidence
100%
Reports
67
ISP
Vodafone GmbH
80.158.109.51
10/10
Confidence
100%
Reports
61
ISP
T-Systems Inter...
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
213.209.159.151
10/10
Confidence
100%
Reports
28
ISP
Dgn Teknoloji A.s.
207.154.230.149
10/10
Confidence
100%
Reports
25
ISP
DigitalOcean, LLC
84.233.216.142
8/10
Confidence
100%
Reports
16
ISP
Datacamp Limited
83.97.23.180
8/10
Confidence
100%
Reports
14
ISP
M247 Europe SRL
89.163.151.66
8/10
Confidence
100%
Reports
14
ISP
WIIT AG
130.12.181.102
8/10
Confidence
99%
Reports
1,225
ISP
Netiface LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
167.94.146.50
8/10
Confidence
95%
Reports
425
Location
US
US
167.94.146.54
8/10
Confidence
95%
Reports
403
Location
US
US
167.94.146.58
10/10
Confidence
95%
Reports
369
Location
US
US
185.242.226.81
10/10
Confidence
95%
Reports
316
Location
US
US
207.90.244.6
10/10
Confidence
95%
Reports
286
Location
US
US
102.88.137.213
10/10
Confidence
95%
Reports
247
Location
NG
NG
185.242.226.85
10/10
Confidence
95%
Reports
203
Location
US
US
20.220.148.239
10/10
Confidence
95%
Reports
190
Location
CA
CA
148.153.56.170
10/10
Confidence
95%
Reports
164
Location
US
US
86.54.31.32
8/10
Confidence
95%
Reports
151
Location
CA
CA
91.196.152.39
10/10
Confidence
95%
Reports
150
Location
FR
FR
195.184.76.204
10/10
Confidence
95%
Reports
148
Location
US
US
54.38.52.18
10/10
Confidence
95%
Reports
142
Location
PL
PL
91.230.168.0
10/10
Confidence
95%
Reports
141
Location
US
US
195.184.76.165
10/10
Confidence
95%
Reports
137
Location
US
US