JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.213

203.25.124.213 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.213

Whois 203.25.124.213

IP Abuse Reports for 203.25.124.213:

This IP address has been reported a total of 111 times from 57 distinct sources. 203.25.124.213 was first reported on May 11th 2025, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-13 03:23:24 (3 minutes ago)	[Sat Jun 13 05:22:27.693173 2026] [authz_core:error] [pid 211788:tid 211913] [client 203.25.124.213: ... show more [Sat Jun 13 05:22:27.693173 2026] [authz_core:error] [pid 211788:tid 211913] [client 203.25.124.213:60541] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/IXR, referer: http://cimt-dental.com/wp-admin/IXR/met/uploads/ [Sat Jun 13 05:22:49.395797 2026] [authz_core:error] [pid 211788:tid 211914] [client 203.25.124.213:60541] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/mini-scannbro.php, referer: http://cimt-dental.com/wp-admin/mini-scannbro.php [Sat Jun 13 05:22:56.793272 2026] [authz_core:error] [pid 211788:tid 211920] [client 203.25.124.213:60541] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/link, referer: http://cimt-dental.com/wp-admin/link/ [Sat Jun 13 05:23:23.400292 2026] [authz_core:error] [pid 211788:tid 211912] [client 203.25.124.213:60541] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/admin-wolf.php, referer: http://cimt-dental.com/wp-adm ... show less	Brute-Force Web App Attack
🇬🇷 setupgr	2026-06-12 22:35:18 (4 hours ago)	(mod_security) mod_security (id:1000001) triggered by 203.25.124.213: 1 in the last 86400 secs; Port ... show more (mod_security) mod_security (id:1000001) triggered by 203.25.124.213: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 01:35:15.564759 2026] [security2:error] [pid 379042:tid 379091] [client 203.25.124.213:26067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/1.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "92"] [id "1000001"] [msg "Bad file blocked: /1.php"] [severity "CRITICAL"] [tag "security"] [hostname "www.pankoskal.gr"] [uri "/1.php"] [unique_id "aiyJo26KWXh6Y3bFiqkLzQAAAJY"] show less	Port Scan
🇩🇪 rh24	2026-06-12 20:17:24 (7 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 203.25.124.213 (JP/Japan/-)	SQL Injection
🇩🇪 BlueWire Hosting	2026-06-12 19:37:26 (7 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 ghostwarriors	2026-06-12 17:50:24 (9 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-12 10:50:39 (16 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-193) show less	Bad Web Bot
🇫🇮 6kilowatti	2026-06-12 09:21:49 (18 hours ago)	2026/06/12 12:21:47 [error] 1589241#1589241: 37331 FastCGI sent in stderr: "Primary script unknown" ... show more 2026/06/12 12:21:47 [error] 1589241#1589241: 37331 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 203.25.124.213, server: oh6ah.fi, request: "GET /wp-content/uploads/wp.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "www.oh6ah.fi" 2026/06/12 12:21:48 [error] 1589241#1589241: *37331 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 203.25.124.213, server: oh6ah.fi, request: "GET /wp-content/themes/news-portal/user-install.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "www.oh6ah.fi" ... show less	Web App Attack
🇩🇪 LRob.fr	2026-06-11 18:45:09 (1 day ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇳🇱 Site.eu	2026-06-10 12:53:39 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 LRob.fr	2026-06-08 05:00:11 (4 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-06-07 13:38:49 (5 days ago)	dlcarterauthor.com:443 203.25.124.213 - - [07/Jun/2026:23:38:48 +1000] "GET /adminfuns.php HTTP/1.1" ... show more dlcarterauthor.com:443 203.25.124.213 - - [07/Jun/2026:23:38:48 +1000] "GET /adminfuns.php HTTP/1.1" 404 67616 "http://dlcarterauthor.com/adminfuns.php" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇮 6kilowatti	2026-06-07 04:06:05 (5 days ago)	203.25.124.213 - - [07/Jun/2026:07:06:04 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 403 153 "- ... show more 203.25.124.213 - - [07/Jun/2026:07:06:04 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 403 153 "-" "Go-http-client/1.1" 203.25.124.213 - - [07/Jun/2026:07:06:04 +0300] "GET /wp-includes/css/ HTTP/1.1" 403 153 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 oralunal	2026-06-06 23:13:50 (6 days ago)	IP banned by Fail2Ban in jail its-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇫🇷 AGEPCom	2026-06-06 06:00:01 (6 days ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-05 22:38:01 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:fb54:9a3::

🇨🇳 223.88.143.53

🇵🇪 190.223.60.209

🇺🇸 147.185.132.177

🇺🇸 147.185.132.47

🇹🇯 109.75.55.224

🇧🇬 78.128.114.58

🇩🇪 69.5.169.36

🇺🇸 45.156.129.187

🇷🇴 2.57.122.177

🇰🇷 220.88.220.59

🇫🇷 178.238.236.80

🇳🇱 178.16.53.230

🇺🇸 172.93.106.153

🇧🇩 161.248.189.72

🇮🇳 152.52.236.122

🇮🇳 117.251.194.237

🇳🇱 91.92.42.19

🇩🇪 52.58.93.85

🇹🇭 49.49.44.140