JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.11

203.25.124.11 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.11

Whois 203.25.124.11

IP Abuse Reports for 203.25.124.11:

This IP address has been reported a total of 134 times from 62 distinct sources. 203.25.124.11 was first reported on August 21st 2024, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-07 05:50:58 (12 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-07 03:20:26 (15 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-196) show less	Bad Web Bot
🇩🇪 SiyCah	2026-07-07 03:00:01 (15 hours ago)	IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
Anonymous	2026-07-06 10:48:51 (1 day ago)	203.25.124.11 - - [06/Jul/2026:18:48:32 +0800] "GET /wp-content/themes/twentytwentyfive/ HTTP/1.1" 4 ... show more 203.25.124.11 - - [06/Jul/2026:18:48:32 +0800] "GET /wp-content/themes/twentytwentyfive/ HTTP/1.1" 403 199 "http://outfieldasia.com/wp-content/themes/twentytwentyfive/" "Go-http-client/1.1" 203.25.124.11 - - [06/Jul/2026:18:48:37 +0800] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 403 199 "http://outfieldasia.com/wp-includes/blocks/comments-pagination-numbers/" "Go-http-client/1.1" 203.25.124.11 - - [06/Jul/2026:18:48:41 +0800] "GET /wp-includes/block-bindings/ HTTP/1.1" 403 199 "http://outfieldasia.com/wp-includes/block-bindings/" "Go-http-client/1.1" 203.25.124.11 - - [06/Jul/2026:18:48:42 +0800] "GET /wp-admin/css/colors/ HTTP/1.1" 403 199 "http://outfieldasia.com/wp-admin/css/colors/" "Go-http-client/1.1" 203.25.124.11 - - [06/Jul/2026:18:48:44 +0800] "GET /wp-includes/users.php HTTP/1.1" 404 360 "https://outfieldasia.com/wp-includes/users.php" "Go-http-client/1.1" 203.25.124.11 - - [06/Jul/2026:18:48:45 +0800] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 404 60 ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-05 22:20:27 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 4server	2026-07-05 21:12:26 (1 day ago)	[SunJul0523:12:24.0644892026][security2:error][pid3327000:tid3327098][client203.25.124.11:0]ModSecur ... show more [SunJul0523:12:24.0644892026][security2:error][pid3327000:tid3327098][client203.25.124.11:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"\^/wp-content/uploads/.\*\\\\\\\\.$php\\|phtml\\|phar\\|php3\\|php4\\|php5\\|php7$\$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"395\"][id\"1101018\"][msg\"PHPexecutionfromuploads\"][hostname\"sisuconsulting.net\"][uri\"/wp-content/uploads/config.php\"][unique_id\"akrIuNuSvfWd02OMzWjNwgAAAQU\"] show less	Port Scan Brute-Force Web App Attack
🇷🇺 DZBOT	2026-07-05 10:19:52 (2 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-07-05 02:44:28 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-04 22:43:25 (2 days ago)	203.25.124.11 - - [05/Jul/2026:01:43:25 +0300] "GET /wp-content/themes/twentytwentyfive/styles/typog ... show more 203.25.124.11 - - [05/Jul/2026:01:43:25 +0300] "GET /wp-content/themes/twentytwentyfive/styles/typography/ HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇧🇪 cmbplf	2026-07-04 22:41:56 (2 days ago)	413 requests with url.path *config.php	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-07-03 17:45:09 (4 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
Anonymous	2026-07-03 05:02:03 (4 days ago)	Bot / scanning and/or hacking attempts: GET /wp-includes/js/tinymce/plugins/wp-load.php HTTP/2.0, GE ... show more Bot / scanning and/or hacking attempts: GET /wp-includes/js/tinymce/plugins/wp-load.php HTTP/2.0, GET /wp-content/themes/twentytwentyfive/parts/ HTTP/2.0, GET /wp-content/uploads/wp-file-manager-pro/ HTTP/2.0, [30/30] read: stream 0, , [47/47] read: stream 0, , GET /xxx.php HTTP/2.0, GET /we.php HTTP/2.0, GET /wp-content/themes/about.php HTTP/2.0, GET /wp-admin/admin.php HTTP/2.0, GET /wp-login.php?redirect_to=https%3A%2F%2Fjaapbeunder.nl%2Fwp show less	Hacking Web App Attack
🇩🇰 ScamAware	2026-07-03 04:20:44 (4 days ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 2. Unique request paths counted internally: 2. Cloudflare action: block. Cloudflare source: firewallCustom. show less	Web App Attack
🇩🇪 4server	2026-07-02 21:43:07 (4 days ago)	[ThuJul0223:43:02.4698582026][security2:error][pid3505615:tid3505735][client203.25.124.11:0]ModSecur ... show more [ThuJul0223:43:02.4698582026][security2:error][pid3505615:tid3505735][client203.25.124.11:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"\^/wp-content/uploads/.\*\\\\\\\\.$php\\|phtml\\|phar\\|php3\\|php4\\|php5\\|php7$\$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"395\"][id\"1101018\"][msg\"PHPexecutionfromuploads\"][hostname\"mail.giuseppeasaro.com\"][uri\"/wp-content/uploads/upload.php\"][unique_id\"akbbZoKvkZUe778maQcwAAAAARA\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-02 20:50:37 (4 days ago)	203.25.124.11 - - [02/Jul/2026:22:50:31 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 61108 ... show more 203.25.124.11 - - [02/Jul/2026:22:50:31 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 61108 "-" "Go-http-client/1.1" 203.25.124.11 - - [02/Jul/2026:22:50:32 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 14036 "-" "Go-http-client/1.1" 203.25.124.11 - - [02/Jul/2026:22:50:33 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1" 404 61108 "-" "Go-http-client/1.1" 203.25.124.11 - - [02/Jul/2026:22:50:34 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1" 404 14036 "-" "Go-http-client/1.1" 203.25.124.11 - - [02/Jul/2026:22:50:36 +0200] "GET /wp-content/plugins/ssss/src.php HTTP/1.1" 404 61108 "-" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a0d:3344:503c:2608:b4ce:4f71:53cc:aa05

🇺🇸 104.207.37.11

🇸🇬 47.237.70.125

🇺🇸 209.50.167.226

🇧🇪 198.235.24.218

🇧🇪 198.235.24.217

🇧🇪 198.235.24.213

🇺🇸 162.216.150.56

🇮🇳 122.168.123.73

🇰🇷 112.216.108.62

🇳🇱 104.248.197.3

🇺🇸 104.248.52.131

🇦🇹 104.23.162.135

🇰🇿 38.180.36.24

🇧🇷 205.210.31.167

🇧🇪 198.235.24.201

🇧🇪 198.235.24.199

🇵🇱 172.253.255.58

🇺🇸 129.121.102.3

🇺🇸 104.131.22.162