JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.189

203.25.124.189 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 75%: ?

75%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.189

Whois 203.25.124.189

IP Abuse Reports for 203.25.124.189:

This IP address has been reported a total of 76 times from 39 distinct sources. 203.25.124.189 was first reported on March 3rd 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-16 11:54:33 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 203.25.124.189 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.25.124.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 07:54:25.979973 2026] [security2:error] [pid 6615:tid 6621] [client 203.25.124.189:48437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.maroontribe.com"] [uri "/wp-includes/images/wp-config.php"] [unique_id "ajE5cdznRFgcZpuhfKYX0AAAAAQ"], referer: http://maroontribe.com/wp-includes/images/wp-config.php show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-06-16 09:22:55 (6 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇩🇪 LRob.fr	2026-06-16 06:15:10 (9 hours ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇫🇷 masterguru	2026-06-16 03:52:16 (12 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-193) show less	Bad Web Bot
🇫🇷 masterguru	2026-06-16 01:48:45 (14 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇧🇪 cmbplf	2026-06-12 11:47:58 (4 days ago)	171 requests with url.path *config.php	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-06-10 13:56:06 (6 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇦🇺 2000cn.com.au	2026-06-07 20:28:44 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
🇩🇪 ghostwarriors	2026-06-07 03:20:43 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-06-05 21:30:44 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-05-26 23:57:15 (2 weeks ago)	203.25.124.189 - - [27/May/2026:02:57:14 +0300] "GET /wp-content/plugins/advanced-product-fields-for ... show more 203.25.124.189 - - [27/May/2026:02:57:14 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 404 710 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 club77	2026-05-26 19:58:09 (2 weeks ago)	203.25.124.189 - - [27/May/2026:03:58:08 +0800] "GET /wp-admin/geck.php HTTP/2.0" 404 101340 "http:/ ... show more 203.25.124.189 - - [27/May/2026:03:58:08 +0800] "GET /wp-admin/geck.php HTTP/2.0" 404 101340 "http://vicinity.live/wp-admin/geck.php" "Go-http-client/2.0" ... show less	Web App Attack
🇧🇪 Saec	2026-05-26 19:45:01 (2 weeks ago)	Jarvis auto-ban: CF top attacker on saec.me (55 hits, JP)	Port Scan Web App Attack
🇺🇦 URAN Publishing Service	2026-05-26 18:09:48 (2 weeks ago)	203.25.124.189 - - [26/May/2026:21:09:48 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 404 708 ... show more 203.25.124.189 - - [26/May/2026:21:09:48 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-26 12:34:34 (3 weeks ago)	203.25.124.189 - - [26/May/2026:15:34:33 +0300] "GET /wp-content/plugins/vpihdxu/wp-loader.php HTTP/ ... show more 203.25.124.189 - - [26/May/2026:15:34:33 +0300] "GET /wp-content/plugins/vpihdxu/wp-loader.php HTTP/1.1" 404 707 "-" "Go-http-client/1.1" 203.25.124.189 - - [26/May/2026:15:34:33 +0300] "GET /wp-content/plugins/dxkmb/ HTTP/1.1" 404 707 "-" "Go-http-client/1.1" ... show less	Web App Attack

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a09:bac5:55fb:1d05::2e4:e7

🇺🇸 154.17.11.84

🇺🇸 149.18.166.190

🇧🇪 146.148.117.29

🇹🇼 128.14.239.38

🇻🇳 116.99.173.101

🇰🇷 112.219.151.50

🇺🇸 107.175.156.152

🇳🇱 91.92.42.211

🇩🇪 87.106.239.41

🇫🇷 45.95.233.88

🇺🇸 35.212.142.4

🇺🇸 15.204.184.105

🇹🇭 202.29.235.12

🇩🇪 158.94.208.56

🇲🇾 103.187.26.126

🇮🇳 74.225.240.196

🇭🇰 58.176.236.64

🇭🇰 45.207.156.159

🇺🇸 2620:171:f0:f0::228