JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.158.131.125

82.158.131.125 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 60%: ?

60%

ISP	PT Indonesia Comnet Plus
Usage Type	Fixed Line ISP
ASN	AS9341
Domain Name	iconpln.net.id
Country	🇮🇩 Indonesia
City	Depok, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.158.131.125

Whois 82.158.131.125

IP Abuse Reports for 82.158.131.125:

This IP address has been reported a total of 22 times from 15 distinct sources. 82.158.131.125 was first reported on August 25th 2026, and the most recent report was 46 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-23 03:30:43 (46 minutes ago)	WordPress login brute force \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/ ... show more WordPress login brute force \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 \| 2026-10-23 03:30 UTC show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 11:04:45 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 82.158.131.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 82.158.131.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 07:04:41.289215 2026] [security2:error] [pid 12635:tid 12635] [client 82.158.131.125:52788] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|fusteriafontane.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fusteriafontane.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aticSZWS13pIv2YGVtf9ZAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2026-10-21 10:35:02 (1 day ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇩🇪 Tsumugi Kotobuki	2026-10-21 06:35:31 (1 day ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 45 \| Len: 60B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 45 \| Len: 60B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-10-21T06:35:31Z show less	Port Scan Hacking
🇩🇪 LRob	2026-10-20 10:21:23 (2 days ago)	Not following 301 redirects — wasted requests \| host: terravox.fr \| method: POST \| path: /wp-login.p ... show more Not following 301 redirects — wasted requests \| host: terravox.fr \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| src_port: 43462 \| 2026-10-20 10:21 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-10-20 04:08:11 (3 days ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-17 08:56:29 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 82.158.131.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 82.158.131.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 04:56:24.347117 2026] [security2:error] [pid 2577:tid 2577] [client 82.158.131.125:38910] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|arriagarealestate.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arriagarealestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atM4OCJnodOrY-mP4ISyHQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 DocNetzwerk	2026-10-15 00:44:17 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 82.158.131.125 (ID/Indonesia/-)	SQL Injection
🇩🇪 Da_tschek	2026-10-10 18:53:30 (1 week ago)	Port scanning	Port Scan Hacking
🇺🇸 RAP	2026-10-03 09:44:11 (2 weeks ago)	2026-10-03 09:44:11 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-09-30 09:20:08 (3 weeks ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
Anonymous	2026-09-27 10:46:25 (3 weeks ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇺🇸 鬼影233	2026-09-24 17:18:42 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇧🇪 taivas.nl	2026-09-18 04:32:53 (1 month ago)	Many_bad_calls	Web App Attack
🇧🇪 taivas.nl	2026-09-17 14:02:18 (1 month ago)	Bad_requests	Bad Web Bot

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.147

🇲🇽 201.171.220.16

🇹🇳 197.14.57.27

🇬🇧 195.96.139.214

🇵🇱 194.180.49.217

🇧🇷 192.141.227.249

🇺🇸 166.1.56.202

🇺🇸 2001:470:1:fb5:a295:d31f:781f:1728

🇻🇳 203.29.18.160

🇩🇪 196.251.121.220

🇹🇿 196.41.46.194

🇿🇼 196.29.38.218

🇺🇦 193.151.14.25

🇵🇹 188.81.109.75

🇳🇱 185.4.112.59

🇫🇷 172.71.135.52

🇻🇳 125.253.123.34

🇸🇬 104.64.221.104

🇧🇷 205.210.31.151

🇦🇷 201.177.145.70