JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.37.32.25

193.37.32.25 was found in our database!

This IP was reported 541 times. Confidence of Abuse is 92%: ?

92%

ISP	VPN Consumer Singapore, Republic of Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.37.32.25

Whois 193.37.32.25

IP Abuse Reports for 193.37.32.25:

This IP address has been reported a total of 541 times from 182 distinct sources. 193.37.32.25 was first reported on February 4th 2022, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-06 00:57:30 (4 hours ago)	Banned by Fail2Ban on server	Web App Attack
🇳🇱 BlueWire Hosting	2026-07-05 06:09:53 (23 hours ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 ghostwarriors	2026-07-05 04:50:38 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 03:04:04 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 193.37.32.25 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 193.37.32.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 23:04:00.331051 2026] [security2:error] [pid 22097:tid 22097] [client 193.37.32.25:20803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oogeothermal.com"] [uri "/wp-content/wp-config.php"] [unique_id "aknJoBSHx_5MrkUVNFhmKQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Admin-Gito	2026-07-05 00:27:06 (1 day ago)	193.37.32.25 - - [05/Jul/2026:02:09:27 +0200] "GET /wp-includes/rest-api/config.php HTTP/1.1" 404 35 ... show more 193.37.32.25 - - [05/Jul/2026:02:09:27 +0200] "GET /wp-includes/rest-api/config.php HTTP/1.1" 404 355373 "-" "Go-http-client/1.1" 193.37.32.25 - - [05/Jul/2026:02:09:38 +0200] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 404 355334 "-" "Go-http-client/1.1" 193.37.32.25 - - [05/Jul/2026:02:09:43 +0200] "GET /wp-includes/Requests/Utility/config.php HTTP/1.1" 404 355343 "-" "Go-http-client/1.1" 193.37.32.25 - - [05/Jul/2026:02:09:45 +0200] "GET /wp-includes/Requests/config.php HTTP/1.1" 404 355335 "-" "Go-http-client/1.1" 193.37.32.25 - - [05/Jul/2026:02:09:47 +0200] "GET /wp-includes/widgets/config.php HTTP/1.1" 404 355334 "-" "Go-http-client/1.1" 193.37.32.25 - - [05/Jul/2026:02:09:52 +0200] "GET /wp-includes/js/wp-config.php HTTP/1.1" 404 355334 "-" "Go-http-client/1.1" 193.37.32.25 - - [05/Jul/2026:02:09:54 +0200] "GET /wp-includes/js/jcrop/admin.php HTTP/1.1" 404 355341 "-" "Go-http-client/1.1" 193.37.32.25 - - [05/Jul/2026:02:09:56 +0200] "GET /wp-includes/widgets/admin.php HTTP/1 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 20:49:09 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 193.37.32.25 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 193.37.32.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 16:49:05.422258 2026] [security2:error] [pid 23527:tid 23527] [client 193.37.32.25:42095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mtshastaconcerts.com"] [uri "/wp-includes/js/wp-config.php"] [unique_id "aklxwVSEfn4Kt7lrJ7j4JAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-04 20:37:31 (1 day ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 masterguru	2026-07-04 14:18:20 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-04 05:27:38 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 193.37.32.25 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 193.37.32.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:27:30.990984 2026] [security2:error] [pid 7924:tid 7924] [client 193.37.32.25:44327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "opticasprisma.com"] [uri "/wp-includes/js/wp-config.php"] [unique_id "akiZwsvihY5rPJoVjD9aJwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-04 04:19:04 (2 days ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-07-04 01:55:56 (2 days ago)	[ns41.kdns.gr] httpd-suspicious-path: sites=www.example.com; logs=/var/log/httpd/access_log; samples ... show more [ns41.kdns.gr] httpd-suspicious-path: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/wp-content/uploads/login.php \| /wp-content/gk.php \| /wp-content/themes/news-portal/admins-dir.php show less	Hacking Web App Attack
Anonymous	2026-07-04 00:11:07 (2 days ago)	193.37.32.25 - - [04/Jul/2026:02:11:02 +0200] "GET /wp-security.php HTTP/1.1" 403 12583 "-" "Go-http ... show more 193.37.32.25 - - [04/Jul/2026:02:11:02 +0200] "GET /wp-security.php HTTP/1.1" 403 12583 "-" "Go-http-client/1.1" 193.37.32.25 - - [04/Jul/2026:02:11:02 +0200] "GET /wp-admin/includes/user/ HTTP/1.1" 403 12583 "-" "Go-http-client/1.1" 193.37.32.25 - - [04/Jul/2026:02:11:02 +0200] "GET /wp-content/ai1wm-backups/chosen.php HTTP/1.1" 403 12583 "-" "Go-http-client/1.1" 193.37.32.25 - - [04/Jul/2026:02:11:03 +0200] "GET /wp-admin/images/upgrade-temp-backup/ HTTP/1.1" 403 12583 "-" "Go-http-client/1.1" 193.37.32.25 - - [04/Jul/2026:02:11:03 +0200] "GET /wp-includes/blocks/code/jquery/ HTTP/1.1" 403 12583 "-" "Go-http-client/1.1" 193.37.32.25 - - [04/Jul/2026:02:11:03 +0200] "GET /wp-includes/css/dist/commands/wp-cron.php HTTP/1.1" 403 12583 "-" "Go-http-client/1.1" 193.37.32.25 - - [04/Jul/2026:02:11:03 +0200] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 403 12583 "-" "Go-http-client/1.1" 193.37.32.25 - - [04/Jul/2026:02:11:04 +0200] "GET /wp-includes/IXR/customize/ HTTP/1.1" 403 12583 ... show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-07-03 23:40:32 (2 days ago)	674 requests with url.path *config.php	Brute-Force Bad Web Bot
🇳🇱 BlueWire Hosting	2026-07-03 14:19:06 (2 days ago)	Probing websites for vulnerabilities	Web App Attack
🇫🇷 masterguru	2026-07-02 12:29:07 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot

Showing 1 to 15 of 541 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 213.59.165.74

🇺🇸 172.234.218.22

🇺🇸 162.216.150.26

🇩🇪 118.193.59.10

🇲🇾 47.250.49.246

🇺🇸 20.169.105.213

🇯🇵 8.211.149.42

🇬🇧 2.57.17.112

🇹🇼 220.133.125.96

🇺🇸 205.210.31.57

🇲🇩 193.36.38.13

🇺🇸 172.191.239.155

🇺🇸 172.172.131.149

🇭🇰 165.154.62.11

🇮🇳 163.61.66.2

🇵🇭 161.49.89.39

🇳🇱 160.119.71.92

🇺🇸 147.185.132.63

🇮🇳 103.111.228.36

🇭🇰 47.239.3.173