JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.192

203.25.124.192 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 90%: ?

90%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.192

Whois 203.25.124.192

IP Abuse Reports for 203.25.124.192:

This IP address has been reported a total of 83 times from 45 distinct sources. 203.25.124.192 was first reported on March 3rd 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-06-16 06:15:14 (2 hours ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-16 06:13:31 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 203.25.124.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.25.124.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 02:13:23.245649 2026] [security2:error] [pid 26924:tid 26924] [client 203.25.124.192:46219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mariarozella.com"] [uri "/wp-includes/images/wp-config.php"] [unique_id "ajDpg9Ag6I8i-TaI5sy52wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-16 03:37:59 (4 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-193) show less	Bad Web Bot
🇫🇷 masterguru	2026-06-16 01:44:28 (6 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇧🇪 cmbplf	2026-06-13 00:39:08 (3 days ago)	115 requests with url.path *config.php	Brute-Force Bad Web Bot
🇦🇺 paulshipley.com.au	2026-06-12 23:40:45 (3 days ago)	balcomberetreat.com.au:443 203.25.124.192 - - [13/Jun/2026:09:40:43 +1000] "GET /bless.php HTTP/1.1" ... show more balcomberetreat.com.au:443 203.25.124.192 - - [13/Jun/2026:09:40:43 +1000] "GET /bless.php HTTP/1.1" 404 74997 "https://balcomberetreatmornington.com.au/bless.php" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-10 13:54:26 (5 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-06-10 13:47:05 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇦🇺 2000cn.com.au	2026-06-07 20:29:57 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
🇩🇪 ghostwarriors	2026-06-07 03:20:47 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-06-05 21:46:10 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
Anonymous	2026-05-30 21:47:02 (2 weeks ago)	...	Brute-Force
🇺🇦 URAN Publishing Service	2026-05-27 00:04:00 (2 weeks ago)	203.25.124.192 - - [27/May/2026:03:03:59 +0300] "GET /wp-includes/rest-api/search/just2.php HTTP/1.1 ... show more 203.25.124.192 - - [27/May/2026:03:03:59 +0300] "GET /wp-includes/rest-api/search/just2.php HTTP/1.1" 404 710 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇮🇹 Inartis	2026-05-26 20:26:33 (2 weeks ago)	[Tue May 26 22:26:28.838337 2026] [autoindex:error] [pid 972644:tid 972644] [client 203.25.124.192:3 ... show more [Tue May 26 22:26:28.838337 2026] [autoindex:error] [pid 972644:tid 972644] [client 203.25.124.192:32167] AH01276: Cannot serve directory /home/tizianobedetti.com/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.php4,index.php5,index.htm,index.html) found, and server-generated directory index forbidden by Options directive, referer: http://tizianobedetti.com/wp-includes/rest-api/fields/ [Tue May 26 22:26:29.418627 2026] [autoindex:error] [pid 972644:tid 972644] [client 203.25.124.192:32167] AH01276: Cannot serve directory /home/tizianobedetti.com/public_html/wp-includes/blocks/comment-date/: No matching DirectoryIndex (index.php,index.php4,index.php5,index.htm,index.html) found, and server-generated directory index forbidden by Options directive, referer: http://tizianobedetti.com/wp-includes/blocks/comment-date/ [Tue May 26 22:26:31.635108 2026] [autoindex:error] [pid 972644:tid 972644] [client 203.25.124.192:32167] AH01276: Cannot serve directory ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 club77	2026-05-26 19:51:30 (2 weeks ago)	203.25.124.192 - - [27/May/2026:03:51:25 +0800] "GET /wp-content.php HTTP/2.0" 404 101304 "http://vi ... show more 203.25.124.192 - - [27/May/2026:03:51:25 +0800] "GET /wp-content.php HTTP/2.0" 404 101304 "http://vicinity.life/wp-content.php" "Go-http-client/2.0" 203.25.124.192 - - [27/May/2026:03:51:25 +0800] "GET /wp-content.php HTTP/2.0" 404 101304 "http://vicinity.live/wp-content.php" "Go-http-client/2.0" 203.25.124.192 - - [27/May/2026:03:51:30 +0800] "GET /bolt.php HTTP/2.0" 404 101282 "http://vicinity.life/bolt.php" "Go-http-client/2.0" ... show less	Web App Attack

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 165.227.159.13

🇸🇬 152.42.219.80

🇵🇱 151.115.91.7

🇹🇭 113.53.251.101

🇷🇺 91.219.196.17

🇷🇴 80.94.92.165

🇬🇧 45.82.76.122

🇨🇲 41.204.82.238

🇸🇬 35.240.254.119

🇬🇧 35.203.210.253

🇬🇧 5.226.140.40

🇺🇸 209.172.2.130

🇷🇺 178.178.222.55

🇺🇸 162.243.138.30

🇸🇬 103.187.147.214

🇻🇳 103.186.101.237

🇨🇦 85.217.149.36

🇩🇪 69.5.169.246

🇺🇸 34.66.129.83

🇺🇸 2607:f8b0:4001:c34::12d