JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.201

203.25.124.201 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.201

Whois 203.25.124.201

IP Abuse Reports for 203.25.124.201:

This IP address has been reported a total of 154 times from 65 distinct sources. 203.25.124.201 was first reported on May 7th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-07-14 09:47:33 (2 days ago)	CrowdSec: crowdsecurity/http-probing \| req: /inc.php \| 11 distinct paths \| UA: Go-http-client/2.0	Port Scan Web App Attack
🇩🇪 ghostwarriors	2026-07-13 15:20:26 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-07-13 01:01:54 (3 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-07-13 00:13:46 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-12 00:54:57 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇦🇺 2000cn.com.au	2026-07-11 11:25:47 (5 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
Anonymous	2026-07-11 04:56:28 (5 days ago)	203.25.124.201 - - [11/Jul/2026:01:56:11 -0300] "GET /wp-content/themes/fukasawa/inc/classes/403x.ph ... show more 203.25.124.201 - - [11/Jul/2026:01:56:11 -0300] "GET /wp-content/themes/fukasawa/inc/classes/403x.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 203.25.124.201 - - [11/Jul/2026:01:56:21 -0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 203.25.124.201 - - [11/Jul/2026:01:56:28 -0300] "GET /wp-includes/interactivity-api/wp-conflg.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" ... show less	Port Scan
🇩🇪 LRob	2026-07-10 17:49:44 (5 days ago)	CrowdSec: crowdsecurity/http-wordpress-scan \| req: ["/wp-includes/widgets/config.php","/wp-content/u ... show more CrowdSec: crowdsecurity/http-wordpress-scan \| req: ["/wp-includes/widgets/config.php","/wp-content/uploads/wp-config.php","/wp-includes/js/wp-config.php","/wp-includes/js/jcrop/admin.php"] \| UA: ["Go-http-client/2.0"] show less	Web App Attack
🇪🇸 masterguru	2026-07-10 02:38:20 (6 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇫🇮 YF	2026-07-09 20:00:41 (6 days ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇺🇸 antlac1	2026-07-09 09:36:37 (1 week ago)	crowdsecurity/http-wordpress-scan	Brute-Force Web App Attack
🇫🇷 Campus France	2026-07-09 09:08:28 (1 week ago)	[Thu Jul 09 11:08:23.524813 2026] [php:error] [pid 3067899] [client 203.25.124.201:40609] script '/v ... show more [Thu Jul 09 11:08:23.524813 2026] [php:error] [pid 3067899] [client 203.25.124.201:40609] script '/var/www/html/campus-perpignan/wp-includes/js/dist/vendor/about.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.org/wp-includes/js/dist/vendor/about.php [Thu Jul 09 11:08:24.120023 2026] [php:error] [pid 3067899] [client 203.25.124.201:40609] script '/var/www/html/campus-perpignan/ws.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.org/ws.php [Thu Jul 09 11:08:24.715579 2026] [php:error] [pid 3067899] [client 203.25.124.201:40609] script '/var/www/html/campus-perpignan/ab.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.org/ab.php [Thu Jul 09 11:08:27.114130 2026] [php:error] [pid 3067899] [client 203.25.124.201:40609] script '/var/www/html/campus-perpignan/database.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.org/database.php [Thu Jul 09 11:08:28.295676 2026] [php:error] [pid 3 ... show less	Brute-Force Web App Attack
🇩🇪 netclix.gr	2026-07-08 19:47:28 (1 week ago)	(aggressive_scan) Aggressive Web Exploit Scan 203.25.124.201 (JP/Japan/-): 5 in the last 4600 secs; ... show more (aggressive_scan) Aggressive Web Exploit Scan 203.25.124.201 (JP/Japan/-): 5 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 203.25.124.201 - - [08/Jul/2026:22:46:44 +0300] "GET /wp-config-sample.php HTTP/2.0" 403 146 "http://voulelikas.gr/wp-config-sample.php" "Go-http-client/2.0" 203.25.124.201 - - [08/Jul/2026:22:46:46 +0300] "GET /wp-includes/speculative8.php HTTP/2.0" 403 146 "http://voulelikas.gr/wp-includes/speculative8.php" "Go-http-client/2.0" 203.25.124.201 - - [08/Jul/2026:22:46:47 +0300] "GET /wp-content/uploads/admin.php HTTP/2.0" 403 146 "http://voulelikas.gr/wp-content/uploads/admin.php" "Go-http-client/2.0" 203.25.124.201 - - [08/Jul/2026:22:47:06 +0300] "GET /wp-includes/admin.php HTTP/2.0" 403 146 "http://voulelikas.gr/wp-includes/admin.php" "Go-http-client/2.0" 203.25.124.201 - - [08/Jul/2026:22:47:23 +0300] "GET /xmlrpc.php HTTP/2.0" 403 146 "http://voulelikas.gr/xmlrpc.php" "Go-http-client/2.0" show less	Port Scan
🇫🇷 LRob	2026-07-08 18:51:19 (1 week ago)	CrowdSec: crowdsecurity/http-wordpress-scan \| req: ["/wp-includes/theme-compat/chosen.php","/wp-cont ... show more CrowdSec: crowdsecurity/http-wordpress-scan \| req: ["/wp-includes/theme-compat/chosen.php","/wp-content/uploads/upload.php","/wp-includes/js/tinymce/plugins/wp-load.php","/wp-includes/sodium_compat/wp-conflg.php"] \| UA: ["Go-http-client/2.0"] show less	Web App Attack
🇳🇱 Site.eu	2026-07-08 15:52:22 (1 week ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 148.153.56.170

🇺🇿 84.54.72.62

🇱🇹 62.60.130.219

🇺🇸 44.91.58.178

🇨🇭 209.99.184.143

🇺🇸 209.38.74.64

🇳🇱 176.65.149.236

🇺🇸 162.216.150.202

🇭🇰 156.251.179.157

🇭🇰 150.5.141.198

🇨🇭 45.143.200.246

🇨🇳 14.17.126.136

🇹🇷 185.117.121.160

🇵🇱 178.43.172.154

🇺🇾 167.57.60.174

🇺🇸 162.216.149.254

🇺🇸 162.216.149.202

🇨🇳 134.175.222.132

🇨🇳 120.52.18.116

🇬🇧 86.150.162.185