JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.191

203.25.124.191 was found in our database!

This IP was reported 96 times. Confidence of Abuse is 88%: ?

88%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.191

Whois 203.25.124.191

IP Abuse Reports for 203.25.124.191:

This IP address has been reported a total of 96 times from 40 distinct sources. 203.25.124.191 was first reported on April 7th 2025, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-18 18:24:51 (19 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-17 01:00:51 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 FeG Deutschland	2026-06-16 21:24:04 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
Anonymous	2026-06-16 21:12:51 (2 days ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-16 20:10:43 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 203.25.124.191 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.25.124.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 16:10:40.150609 2026] [security2:error] [pid 6064:tid 6064] [client 203.25.124.191:46197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pcga.golf"] [uri "/wp-includes/images/wp-config.php"] [unique_id "ajGtwISj8_G1FTs2LVLuHAAAAAQ"], referer: http://pcga.golf/wp-includes/images/wp-config.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 19:03:25 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 203.25.124.191 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.25.124.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 15:03:20.477944 2026] [security2:error] [pid 2243:tid 2243] [client 203.25.124.191:50731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marinestorage.com"] [uri "/wp-includes/js/wp-config.php"] [unique_id "ajGd-EaiBb0gAeGIUJxtmwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Admin-Gito	2026-06-16 17:29:45 (2 days ago)	203.25.124.191 - - [16/Jun/2026:19:18:58 +0200] "GET /wp-includes/block-supports/222.php HTTP/1.1" 4 ... show more 203.25.124.191 - - [16/Jun/2026:19:18:58 +0200] "GET /wp-includes/block-supports/222.php HTTP/1.1" 404 290747 "-" "Go-http-client/1.1" 203.25.124.191 - - [16/Jun/2026:19:19:03 +0200] "GET /wp-includes/ID3/module.tag.lyrics3-class.php HTTP/1.1" 404 290719 "-" "Go-http-client/1.1" 203.25.124.191 - - [16/Jun/2026:19:19:20 +0200] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 404 290727 "-" "Go-http-client/1.1" 203.25.124.191 - - [16/Jun/2026:19:19:23 +0200] "GET /wp-includes/customize/222.php HTTP/1.1" 404 290704 "-" "Go-http-client/1.1" 203.25.124.191 - - [16/Jun/2026:19:19:30 +0200] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 404 290728 "-" "Go-http-client/1.1" 203.25.124.191 - - [16/Jun/2026:19:19:33 +0200] "GET /wp-includes/class-wp-site-edit.php HTTP/1.1" 404 290709 "-" "Go-http-client/1.1" 203.25.124.191 - - [16/Jun/2026:19:19:41 +0200] "GET /wp-includes/system.php HTTP/1.1" 404 290704 "-" "Go-http-client/1.1" 203.25.124.191 - - [16/Jun/ ... show less	Web App Attack
🇳🇱 BlueWire Hosting	2026-06-16 15:55:35 (2 days ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 14:18:45 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 203.25.124.191 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.25.124.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 10:18:41.960712 2026] [security2:error] [pid 9219:tid 9219] [client 203.25.124.191:20785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mosheimlib.org"] [uri "/wp-includes/images/wp-config.php"] [unique_id "ajFbQdFSdmVvZUps2SX1kgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-16 12:10:09 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-16 11:31:16 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 203.25.124.191 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.25.124.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 07:31:10.305462 2026] [security2:error] [pid 20378:tid 20378] [client 203.25.124.191:57699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mariettacaseyclub.org"] [uri "/wp-content/wp-config.php"] [unique_id "ajEz_uvOyTmz8NCpcoSmnAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-06-16 09:31:20 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇫🇷 masterguru	2026-06-16 03:50:55 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-193) show less	Bad Web Bot
🇫🇷 masterguru	2026-06-16 01:51:41 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇫🇷 masterguru	2026-06-16 00:49:48 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197) show less	Bad Web Bot

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇪 197.248.8.33

🇨🇴 186.169.41.205

🇩🇪 172.71.172.135

🇺🇸 103.143.10.140

🇬🇧 35.203.211.197

🇧🇪 34.79.151.47

🇺🇸 207.90.244.13

🇺🇸 195.184.76.180

🇦🇷 179.62.46.59

🇺🇸 174.138.87.36

🇩🇪 167.94.145.27

🇮🇳 103.123.226.138

🇩🇪 64.89.163.156

🇧🇷 43.164.197.97

🇬🇧 35.203.211.20

🇺🇸 20.163.74.20

🇹🇷 213.142.156.145

🇧🇷 205.210.31.243

🇵🇪 200.121.142.194

🇸🇪 193.31.126.158