JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.204

203.25.124.204 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 93%: ?

93%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.204

Whois 203.25.124.204

IP Abuse Reports for 203.25.124.204:

This IP address has been reported a total of 81 times from 43 distinct sources. 203.25.124.204 was first reported on March 21st 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Apache	2026-06-16 16:15:42 (5 hours ago)	(mod_security) mod_security (id:20000010) triggered by 203.25.124.204 (JP/Japan/-): 5 in the last 30 ... show more (mod_security) mod_security (id:20000010) triggered by 203.25.124.204 (JP/Japan/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇳🇱 BlueWire Hosting	2026-06-16 15:50:59 (5 hours ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 13:30:40 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 203.25.124.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.25.124.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 09:30:36.887895 2026] [security2:error] [pid 11357:tid 11395] [client 203.25.124.204:55031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marilynoakes.com"] [uri "/wp-includes/images/wp-config.php"] [unique_id "ajFP_Fa1UK2CsFzKPHewhwAAAMU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 11:52:32 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 203.25.124.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.25.124.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 07:52:25.302366 2026] [security2:error] [pid 5591:tid 5706] [client 203.25.124.204:25085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.maroontribe.com"] [uri "/wp-content/uploads/wp-config.php"] [unique_id "ajE4-fAXJqr8qQOVzOXdIQAAAUE"], referer: http://maroontribe.com/wp-content/uploads/wp-config.php show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 middelkoopcc	2026-06-16 11:10:05 (10 hours ago)	2026-06-16 13:00:10 [remote 203.25.124.204:32545] AH01276: Cannot serve directory /<redacted>/wp-adm ... show more 2026-06-16 13:00:10 [remote 203.25.124.204:32545] AH01276: Cannot serve directory /<redacted>/wp-admin/css/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 2026-06-16 13:00:16 [remote 203.25.124.204:32545] AH01276: Cannot serve directory /<redacted>/wp-content/uploads/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 2026-06-16 13:00:34 [remote 203.25.124.204:32545] AH01276: Cannot serve directory /<redacted>/wp-admin/js/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 77 more within 20 minutes show less	Web App Attack
🇪🇸 masterguru	2026-06-16 09:25:26 (11 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇫🇷 masterguru	2026-06-16 03:38:37 (17 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-193) show less	Bad Web Bot
🇫🇷 LRob.fr	2026-06-16 03:00:07 (18 hours ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇫🇷 masterguru	2026-06-16 01:51:11 (19 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-06-12 23:37:11 (3 days ago)	balcomberetreat.com.au:443 203.25.124.204 - - [13/Jun/2026:09:37:09 +1000] "GET /about.php HTTP/1.1" ... show more balcomberetreat.com.au:443 203.25.124.204 - - [13/Jun/2026:09:37:09 +1000] "GET /about.php HTTP/1.1" 404 75056 "http://balcomberetreat.com.au/about.php" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 Ba-Yu	2026-06-12 17:08:08 (4 days ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 ghostwarriors	2026-06-11 01:50:31 (5 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-10 13:58:43 (6 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇦🇺 2000cn.com.au	2026-06-07 20:27:48 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
🇩🇪 ghostwarriors	2026-06-07 03:20:49 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 200.121.220.87

🇺🇸 198.62.1.126

🇩🇪 164.92.161.148

🇩🇪 45.43.62.37

🇫🇮 178.20.210.208

🇺🇸 162.216.149.43

🇸🇬 138.2.104.225

🇺🇸 137.155.11.57

🇨🇳 120.133.60.156

🇮🇩 114.10.12.148

🇧🇩 103.183.62.2

🇧🇩 45.120.115.150

🇿🇦 41.193.55.216

🇺🇸 23.144.124.41

🇫🇷 178.33.72.144

🇺🇸 173.239.224.97

🇨🇦 167.99.182.39

🇺🇸 164.68.165.52

🇩🇪 158.176.13.154

🇨🇳 116.177.172.94