JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.33

203.25.124.33 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.33

Whois 203.25.124.33

IP Abuse Reports for 203.25.124.33:

This IP address has been reported a total of 136 times from 60 distinct sources. 203.25.124.33 was first reported on March 16th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 antlac1	2026-06-19 06:20:09 (3 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇩🇪 todix	2026-06-19 00:56:57 (8 hours ago)	Web App Attack Exploid from 203.25.124.33	Web App Attack
🇩🇪 FeG Deutschland	2026-06-18 20:21:31 (13 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇬🇧 poundawebsiteltd	2026-06-18 19:03:11 (14 hours ago)	Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 203.25.124.33 - - [18/Jun/2026:20:03:08 ... show more Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 203.25.124.33 - - [18/Jun/2026:20:03:08 +0100] GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1 403 158 - Go-http-client/1.1 show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-18 14:55:11 (18 hours ago)	203.25.124.33 - - [18/Jun/2026:17:55:10 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 708 ... show more 203.25.124.33 - - [18/Jun/2026:17:55:10 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.25.124.33 - - [18/Jun/2026:17:55:10 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
Anonymous	2026-06-17 22:41:49 (1 day ago)	Banned by Fail2Ban on server	Web App Attack
🇦🇺 2000cn.com.au	2026-06-17 18:23:57 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇬🇧 relianoid.com	2026-06-17 16:41:07 (1 day ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇩🇪 4server	2026-06-17 10:16:36 (1 day ago)	[WedJun1712:16:32.5397262026][security2:error][pid2757569:tid2757686][client203.25.124.33:0]ModSecur ... show more [WedJun1712:16:32.5397262026][security2:error][pid2757569:tid2757686][client203.25.124.33:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"mail.feldenkraisticino.ch\"][uri\"/wp-content/uploads/wp-config.php\"][unique_id\"ajJ0AE_XfNvyJ12ajyCE4AAAAE4\"] show less	Port Scan Brute-Force Web App Attack
🇬🇷 setupgr	2026-06-17 08:34:12 (2 days ago)	(mod_security) mod_security (id:1000001) triggered by 203.25.124.33 (JP/Japan/Osaka/Osaka/-/[AS13740 ... show more (mod_security) mod_security (id:1000001) triggered by 203.25.124.33 (JP/Japan/Osaka/Osaka/-/[AS137409 GSLNETWORKS-AS-AP GSL Networks Pty LTD]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 11:34:08.186759 2026] [security2:error] [pid 2210295:tid 2210445] [client 203.25.124.33:59715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /wp-includes/blocks/comment-author-name/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.fashionfragonard.gr"] [uri "/wp-includes/blocks/comment-author-name/about.php"] [unique_id "ajJcAIHi3fYqxwKQHNYSEgAAAdM"] show less	Port Scan
🇫🇷 LRob.fr	2026-06-17 04:30:05 (2 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇳🇱 Site.eu	2026-06-17 01:43:24 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇦 URAN Publishing Service	2026-06-16 06:01:49 (3 days ago)	203.25.124.33 - - [16/Jun/2026:09:01:48 +0300] "GET /wp-content/plugins/ HTTP/1.1" 404 708 "-" "Go-h ... show more 203.25.124.33 - - [16/Jun/2026:09:01:48 +0300] "GET /wp-content/plugins/ HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-16 04:21:20 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197) show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-06-16 01:22:46 (3 days ago)	203.25.124.33 - - [16/Jun/2026:04:22:45 +0300] "GET /wp-includes/css/ HTTP/1.1" 404 706 "-" "Go-http ... show more 203.25.124.33 - - [16/Jun/2026:04:22:45 +0300] "GET /wp-includes/css/ HTTP/1.1" 404 706 "-" "Go-http-client/1.1" ... show less	Web App Attack

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.204.110.224

🇪🇹 196.191.151.172

🇺🇸 192.253.209.48

🇧🇷 189.50.142.82

🇬🇧 188.240.59.7

🇺🇸 143.198.153.185

🇻🇳 118.70.179.210

🇺🇸 103.203.57.3

🇸🇬 101.47.156.21

🇳🇱 86.54.31.44

🇳🇱 45.148.10.151

🇺🇸 148.153.193.88

🇬🇧 139.59.183.60

🇩🇪 116.202.162.93

🇫🇷 85.217.140.35

🇨🇳 58.209.82.167

🇧🇷 45.164.39.253

🇧🇪 34.140.76.89

🇺🇸 2001:19f0:6001:30ab:5400:5ff:fe87:2a5e

🇺🇸 162.216.149.30