JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.31

203.25.124.31 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.31

Whois 203.25.124.31

IP Abuse Reports for 203.25.124.31:

This IP address has been reported a total of 127 times from 56 distinct sources. 203.25.124.31 was first reported on March 16th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-06-18 16:09:16 (1 hour ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-06-17 22:38:50 (19 hours ago)	Banned by Fail2Ban on server	Web App Attack
🇦🇺 2000cn.com.au	2026-06-17 18:23:30 (23 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇬🇧 relianoid.com	2026-06-17 16:25:58 (1 day ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇬🇷 setupgr	2026-06-16 08:22:45 (2 days ago)	(mod_security) mod_security (id:1000001) triggered by 203.25.124.31: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:1000001) triggered by 203.25.124.31: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 11:22:40.060300 2026] [security2:error] [pid 2210175:tid 2210218] [client 203.25.124.31:37789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/66.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /66.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.cpanagiotou.gr"] [uri "/66.php"] [unique_id "ajEH0H9oGssBgNwsPFt23AAAAEI"] show less	Port Scan
🇺🇦 URAN Publishing Service	2026-06-16 06:03:10 (2 days ago)	203.25.124.31 - - [16/Jun/2026:09:03:09 +0300] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1. ... show more 203.25.124.31 - - [16/Jun/2026:09:03:09 +0300] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-16 04:39:00 (2 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197) show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-06-16 01:22:19 (2 days ago)	203.25.124.31 - - [16/Jun/2026:04:22:18 +0300] "GET /wp-content/themes/news-portal/sitebar.php HTTP/ ... show more 203.25.124.31 - - [16/Jun/2026:04:22:18 +0300] "GET /wp-content/themes/news-portal/sitebar.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1" 203.25.124.31 - - [16/Jun/2026:04:22:18 +0300] "GET /wp-content/updates.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇬🇷 setupgr	2026-06-15 20:02:04 (2 days ago)	(mod_security) mod_security (id:1000001) triggered by 203.25.124.31: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:1000001) triggered by 203.25.124.31: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 23:02:00.920358 2026] [security2:error] [pid 1965768:tid 1965813] [client 203.25.124.31:27009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-load.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "92"] [id "1000001"] [msg "Bad file blocked: /wp-content/plugins/plugins/wp-load.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.doityourself.gr"] [uri "/wp-content/plugins/plugins/wp-load.php"] [unique_id "ajBaOJhSggell5vQAURQQQAAAVI"] show less	Port Scan
🇩🇰 ScamAware	2026-06-15 14:05:26 (3 days ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom. show less	Web App Attack
Anonymous	2026-06-15 10:19:22 (3 days ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 masterguru	2026-06-15 09:25:20 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇩🇪 todix	2026-06-14 23:37:23 (3 days ago)	Web App Attack Exploid from 203.25.124.31	Web App Attack
🇩🇪 iNetWorker	2026-06-13 23:07:19 (4 days ago)	trolling for resource vulnerabilities	Web App Attack
🇲🇾 Rizzy	2026-06-13 19:12:47 (4 days ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 127 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.213

🇳🇱 172.94.9.75

🇫🇷 155.117.6.32

🇧🇷 131.196.29.48

🇫🇷 91.196.152.90

🇨🇳 14.103.112.116

🇨🇳 14.103.84.166

🇺🇸 9.234.8.125

🇸🇪 9.223.176.221

🇷🇺 212.113.244.10

🇳🇱 204.76.203.15

🇳🇱 193.25.217.68

🇩🇪 188.166.164.48

🇧🇷 143.95.209.223

🇰🇷 140.238.9.246

🇨🇳 120.48.72.181

🇺🇸 66.132.195.98

🇺🇸 66.132.186.218

🇧🇷 45.233.177.87

🇱🇹 45.227.254.170