JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.32

203.25.124.32 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.32

Whois 203.25.124.32

IP Abuse Reports for 203.25.124.32:

This IP address has been reported a total of 131 times from 61 distinct sources. 203.25.124.32 was first reported on March 16th 2025, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 jbouwh	2026-06-19 11:09:01 (6 hours ago)	[Fri Jun 19 13:08:25.847570 2026] [authz_core:error] [pid 545627:tid 545627] [client 203.25.124.32:6 ... show more [Fri Jun 19 13:08:25.847570 2026] [authz_core:error] [pid 545627:tid 545627] [client 203.25.124.32:62257] AH01630: client denied by server configuration: /data/srv/[redacted]/wp-content/uploads/wp_footer_loader.php [Fri Jun 19 13:08:26.188435 2026] [authz_core:error] [pid 545627:tid 545627] [client 203.25.124.32:62257] AH01630: client denied by server configuration: /data/srv/[redacted]/wp-content/uploads/system.php [Fri Jun 19 13:09:01.771417 2026] [authz_core:error] [pid 545627:tid 545627] [client 203.25.124.32:62257] AH01630: client denied by server configuration: /data/srv/[redacted]/wp-content/plugins/akismet/wp-xme.php show less	Web App Attack
🇩🇪 ghostwarriors	2026-06-19 08:20:37 (9 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 antlac1	2026-06-19 06:15:09 (11 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-06-18 20:23:33 (21 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇬🇧 poundawebsiteltd	2026-06-18 19:05:18 (22 hours ago)	Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 203.25.124.32 - - [18/Jun/2026:20:05:17 ... show more Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 203.25.124.32 - - [18/Jun/2026:20:05:17 +0100] GET /licenses/images/widgets/ HTTP/1.1 403 158 - Go-http-client/1.1 show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-18 14:55:34 (1 day ago)	203.25.124.32 - - [18/Jun/2026:17:55:33 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-saran ... show more 203.25.124.32 - - [18/Jun/2026:17:55:33 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 404 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
🇺🇸 CBJ	2026-06-18 09:44:31 (1 day ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-18 08:41:49 (1 day ago)	203.25.124.32 - - [18/Jun/2026:11:41:46 +0300] "GET /wp-includes/header.php HTTP/1.1" 404 3300 "http ... show more 203.25.124.32 - - [18/Jun/2026:11:41:46 +0300] "GET /wp-includes/header.php HTTP/1.1" 404 3300 "http://journal.sops.gov.ua/wp-includes/header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-18 07:17:07 (1 day ago)	203.25.124.32 - - [18/Jun/2026:10:17:01 +0300] "GET /wp-content/users.php HTTP/1.1" 404 708 "-" "Moz ... show more 203.25.124.32 - - [18/Jun/2026:10:17:01 +0300] "GET /wp-content/users.php HTTP/1.1" 404 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.25.124.32 - - [18/Jun/2026:10:17:05 +0300] "GET /wp-content/wp-activate.php HTTP/1.1" 404 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
Anonymous	2026-06-17 22:38:30 (1 day ago)	Banned by Fail2Ban on server	Web App Attack
🇦🇺 2000cn.com.au	2026-06-17 18:25:53 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
🇩🇪 paissangroup	2026-06-17 12:36:02 (2 days ago)	Multiple WAF Violations	Web App Attack
🇬🇷 setupgr	2026-06-17 08:31:12 (2 days ago)	(mod_security) mod_security (id:1000001) triggered by 203.25.124.32 (JP/Japan/Osaka/Osaka/-/[AS13740 ... show more (mod_security) mod_security (id:1000001) triggered by 203.25.124.32 (JP/Japan/Osaka/Osaka/-/[AS137409 GSLNETWORKS-AS-AP GSL Networks Pty LTD]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 11:31:10.411275 2026] [security2:error] [pid 2210175:tid 2210239] [client 203.25.124.32:37375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-load.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /wp-includes/wp-load.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.fashionfragonard.gr"] [uri "/wp-includes/wp-load.php"] [unique_id "ajJbTn9oGssBgNwsPFtRGAAAAEs"] show less	Port Scan
🇩🇪 maxpower	2026-06-16 21:43:33 (2 days ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 203.25.124.32 (JP/Japan/-): 1 in the last 360 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 203.25.124.32 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 203.25.124.32 - - [16/Jun/2026:23:43:25 +0200] "GET /wp-content/plugins/file-upload-types/assets/css/403.php HTTP/1.1" 404 157598 "-" "Go-http-client/1.1" "-" host=ramsesconsulting.it show less	Port Scan
🇩🇪 maxpower	2026-06-16 21:27:06 (2 days ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 203.25.124.32 (JP/Japan/-): 1 in the last 360 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 203.25.124.32 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 203.25.124.32 - - [16/Jun/2026:23:26:58 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403.php HTTP/1.1" 404 157075 "-" "Go-http-client/1.1" "-" host=ramsesconsulting.it show less	Port Scan

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1008::53

🇨🇳 211.97.69.110

🇳🇱 185.213.174.141

🇹🇷 185.153.231.45

🇨🇦 168.138.90.7

🇷🇴 141.98.83.240

🇳🇱 91.92.40.8

🇰🇷 59.21.37.60

🇳🇱 45.156.128.64

🇨🇴 45.81.106.19

🇻🇳 27.79.7.135

🇷🇴 2.57.122.177

🇷🇴 2.57.121.25

🇨🇳 180.76.134.6

🇮🇷 151.233.132.25

🇨🇳 106.36.193.42

🇧🇩 103.238.115.144

🇨🇱 45.230.39.166

🇳🇱 45.156.128.62

🇩🇪 43.228.157.8