JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.125.37.111

82.125.37.111 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	Orange S.A.
Usage Type	Mobile ISP
ASN	AS3215
Hostname(s)	lfbn-poi-1-700-111.w82-125.abo.wanadoo.fr
Domain Name	orange.com
Country	🇫🇷 France
City	Limoges, New Aquitaine

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.125.37.111

Whois 82.125.37.111

IP Abuse Reports for 82.125.37.111:

This IP address has been reported a total of 17 times from 12 distinct sources. 82.125.37.111 was first reported on June 4th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 INTEQ	2025-06-14 15:37:28 (1 year ago)	Web attack from 82.125.37.111	Web App Attack
🇫🇷 conseilgouz	2025-06-11 23:26:20 (1 year ago)	fmw-Joomla User : try to access forms...	Hacking
Anonymous	2025-06-11 01:06:33 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 AF	2025-06-09 19:49:44 (1 year ago)	Activity: Attempted access to xmlrpc.php, potentially indicating hacking or web app attack activity ... show more Activity: Attempted access to xmlrpc.php, potentially indicating hacking or web app attack activity Action: Blocked by firewall Access Log Entries: • [09/Jun/2025:19:49:44 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" show less	Hacking
🇺🇸 TPI-Abuse	2025-06-08 23:53:52 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 82.125.37.111 (lfbn-poi-1-700-111.w82-125.abo.w ... show more (mod_security) mod_security (id:225170) triggered by 82.125.37.111 (lfbn-poi-1-700-111.w82-125.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 08 19:53:45.828307 2025] [security2:error] [pid 2512599:tid 2512599] [client 82.125.37.111:59926] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|londongroup.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "londongroup.info"] [uri "/wp-json/wp/v2/users"] [unique_id "aEYiiU9mJkJGI9c_zCGrFgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2025-06-08 21:20:10 (1 year ago)	(wordpress) Failed wordpress login from 82.125.37.111 (FR/France/lfbn-poi-1-700-111.w82-125.abo.wana ... show more (wordpress) Failed wordpress login from 82.125.37.111 (FR/France/lfbn-poi-1-700-111.w82-125.abo.wanadoo.fr) show less	Brute-Force
🇩🇪 Hazzard	2025-06-08 18:32:23 (1 year ago)	(wordpress) Failed wordpress login from 82.125.37.111 (FR/France/Haute-Vienne/Limoges/lfbn-poi-1-700 ... show more (wordpress) Failed wordpress login from 82.125.37.111 (FR/France/Haute-Vienne/Limoges/lfbn-poi-1-700-111.w82-125.abo.wanadoo.fr/[redacted]) show less	Brute-Force
🇩🇪 noxtec GmbH	2025-06-08 11:53:33 (1 year ago)	(wordpress) Failed wordpress login from 82.125.37.111 (FR/France/lfbn-poi-1-700-111.w82-125.abo.wana ... show more (wordpress) Failed wordpress login from 82.125.37.111 (FR/France/lfbn-poi-1-700-111.w82-125.abo.wanadoo.fr) show less	Brute-Force
🇩🇪 Ba-Yu	2025-06-07 23:25:57 (1 year ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
🇺🇸 Jason Howell	2025-06-07 12:14:54 (1 year ago)	82.125.37.111 - - [07/Jun/2025:06:42:42 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3021 "-" "Mozilla/5.0 ... show more 82.125.37.111 - - [07/Jun/2025:06:42:42 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 82.125.37.111 - - [07/Jun/2025:07:11:53 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 82.125.37.111 - - [07/Jun/2025:07:12:52 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 82.125.37.111 - - [07/Jun/2025:07:13:52 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 82.125.37.111 - - [07/Jun/2025:07:14:52 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ... show less	Web App Attack
🇺🇸 findlab	2025-06-06 23:20:05 (1 year ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2025-06-06 13:49:39 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 Brimello	2025-06-05 22:09:47 (1 year ago)	Triggered hidden honeypot link indicating hacking attempt	Hacking
🇺🇸 Brimello	2025-06-05 22:09:47 (1 year ago)	Triggered hidden honeypot link indicating hacking attempt	Hacking
🇺🇸 Brimello	2025-06-05 22:09:47 (1 year ago)	Triggered hidden honeypot link indicating hacking attempt	Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.223

🇳🇱 185.242.226.90

🇨🇳 180.138.194.82

🇨🇳 111.26.95.254

🇧🇼 168.167.72.132

🇩🇪 167.94.146.59

🇫🇮 147.185.133.188

🇨🇳 118.183.111.136

🇺🇸 104.238.36.1

🇸🇮 102.220.160.29

🇫🇷 91.196.152.121

🇮🇪 86.41.191.243

🇺🇸 66.132.172.148

🇨🇳 36.129.135.67

🇬🇧 35.203.211.25

🇺🇸 34.24.155.100

🇺🇸 2a04:4e40:4440:0:190:ae67:907f:755c

🇮🇳 2400:8904::2000:d9ff:fec5:4ec0

🇨🇳 183.200.96.181

🇻🇳 103.200.25.79