AbuseIPDB » 201.25.168.111
201.25.168.111
This IP was reported 4 times. Confidence of
Abuse
is 15% : ?
ISP
Ace Data Centers II, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
acedatacenter.com
Country
🇯🇵
Japan
City
Tokyo, Tokyo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 201.25.168.111 :
This IP address has been reported a total of
4
times from
2 distinct
sources.
201.25.168.111 was first reported on
October 16th 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇳🇱
BlueWire Hosting
2026-10-20 09:21:29
(2 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 21:25:42
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 201.25.168.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 201.25.168.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 17:25:34.333295 2026] [security2:error] [pid 4990:tid 4990] [client 201.25.168.111:25378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swindon-itf.com"] [uri "/sftp-config.json"] [unique_id "atU5Tsnd5ZYecgNfU-0vowAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 08:03:04
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 201.25.168.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 201.25.168.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:02:58.055633 2026] [security2:error] [pid 16565:tid 16565] [client 201.25.168.111:58442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abq4you.com"] [uri "/sftp-config.json"] [unique_id "atR9MoQceNo3YQZUKbN5HQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 19:08:36
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 201.25.168.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 201.25.168.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 15:08:30.509715 2026] [security2:error] [pid 2040:tid 2040] [client 201.25.168.111:50056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quincysheetmetal.com"] [uri "/sftp-config.json"] [unique_id "atJ2Lh-vsKlhf9wP3XTm-AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: