IP address

Passive DNS

Tags: IP in hostname Login attempts Scanner

IP blacklists

blocklist.de SSH

82.165.219.0 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-06-13 04:05:00.312000
Was present on blacklist at: 2026-06-01 22:05, 2026-06-02 10:05, 2026-06-02 16:05, 2026-06-02 22:05, 2026-06-03 04:05, 2026-06-03 10:05, 2026-06-03 16:05, 2026-06-03 22:05, 2026-06-04 04:05, 2026-06-04 10:05, 2026-06-04 16:05, 2026-06-04 22:05, 2026-06-05 04:05, 2026-06-10 10:05, 2026-06-10 16:05, 2026-06-10 22:05, 2026-06-11 04:05, 2026-06-11 10:05, 2026-06-11 16:05, 2026-06-11 22:05, 2026-06-12 04:05, 2026-06-12 10:05, 2026-06-12 16:05, 2026-06-12 22:05, 2026-06-13 04:05

blocklist.de FTP

82.165.219.0 is listed on the blocklist.de FTP blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the Service FTP.
Type of feed: primary (feed detail page)

Last checked at: 2026-06-02 04:05:00.106000
Was present on blacklist at: 2026-06-02 04:05

Echelon SSH connection attempt

82.165.219.0 is listed on the Echelon SSH connection attempt blacklist.

Description: SSH connection attempt detected on port 22 or 2222
Type of feed: primary (feed detail page)

Last checked at: 2026-06-08 09:35:00.337000
Was present on blacklist at: 2026-06-02 09:35, 2026-06-03 09:35, 2026-06-04 09:35, 2026-06-05 09:35, 2026-06-06 09:35, 2026-06-07 09:35, 2026-06-08 09:35

Echelon SSH bruteforce

82.165.219.0 is listed on the Echelon SSH bruteforce blacklist.

Description: Multiple SSH authentication attempts detected
Type of feed: primary (feed detail page)

Last checked at: 2026-06-08 09:35:00.975000
Was present on blacklist at: 2026-06-02 09:35, 2026-06-03 09:35, 2026-06-04 09:35, 2026-06-05 09:35, 2026-06-06 09:35, 2026-06-07 09:35, 2026-06-08 09:35

CI Army

82.165.219.0 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence database that provides scores for IPs. Source of unspecified malicious attacks most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-06-14 02:50:00.820000
Was present on blacklist at: 2026-06-14 02:50

AbuseIPDB

82.165.219.0 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-06-14 04:00:00.705000
Was present on blacklist at: 2026-06-14 04:00

Threat categories

TL	Role	Category	Details
50	src	scan	port: 23, 81, 554, 2323, 3001, 5000
38	src	—
25	src	login	protocol: ssh

Warden events (75)

2026-06-14: ReconScanning (node.4dc198): 13; ReconScanning (node.9c1411): 4; ReconScanning (node.368407): 15
2026-06-13: ReconScanning (node.ce2b59): 13; ReconScanning (node.9c1411): 5
2026-06-11: ReconScanning (node.ce2b59): 14; ReconScanning (node.9c1411): 2
2026-06-02: AttemptLogin (node.ce2b59): 2
2026-06-01: AttemptLogin (node.ce2b59): 2; AttemptLogin (node.03e7a9): 5

Origin AS: AS8560 - ONEANDONE-AS
BGP Prefix: 82.165.216.0/22
geo: France; 🕑 Europe/Paris
hostname: ip82-165-219-0.pbiaas.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 82.165.0.0 - 82.165.255.255
last_activity: 2026-06-14 15:11:06
last_warden_event: 2026-06-14 15:11:06
rep: 0.014367760089989079
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80, 443; Tags: eol-product; CPEs: cpe:/o:linux:linux_kernel, cpe:/a:nodejs:node.js, cpe:/a:expressjs:express, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:f5:nginx:1.18.0
ts_added: 2026-06-01 12:20:21.388000
ts_last_update: 2026-06-26 12:20:30.157000

Warden event timeline

DShield event timeline

Presence on blacklists