JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.37

203.25.124.37 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.37

Whois 203.25.124.37

IP Abuse Reports for 203.25.124.37:

This IP address has been reported a total of 129 times from 68 distinct sources. 203.25.124.37 was first reported on March 16th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-16 08:54:21 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇬🇷 setupgr	2026-06-16 08:20:04 (1 day ago)	(mod_security) mod_security (id:1000001) triggered by 203.25.124.37: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:1000001) triggered by 203.25.124.37: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 11:20:03.184127 2026] [security2:error] [pid 2210175:tid 2210260] [client 203.25.124.37:51685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /wp-content/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.cpanagiotou.gr"] [uri "/wp-content/about.php"] [unique_id "ajEHM39oGssBgNwsPFt1LgAAAFc"] show less	Port Scan
🇺🇦 URAN Publishing Service	2026-06-16 06:03:32 (1 day ago)	203.25.124.37 - - [16/Jun/2026:09:03:32 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1 ... show more 203.25.124.37 - - [16/Jun/2026:09:03:32 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-16 04:33:33 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197) show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-06-16 01:24:16 (1 day ago)	203.25.124.37 - - [16/Jun/2026:04:24:15 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1 ... show more 203.25.124.37 - - [16/Jun/2026:04:24:15 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-15 19:10:20 (1 day ago)	203.25.124.37 - - [15/Jun/2026:22:10:19 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 404 716 "-" "Mozil ... show more 203.25.124.37 - - [15/Jun/2026:22:10:19 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 404 716 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.25.124.37 - - [15/Jun/2026:22:10:19 +0300] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 404 716 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
🇬🇷 setupgr	2026-06-15 12:05:19 (2 days ago)	(mod_security) mod_security (id:1000001) triggered by 203.25.124.37: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:1000001) triggered by 203.25.124.37: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 15:05:18.021687 2026] [security2:error] [pid 1709592:tid 1709644] [client 203.25.124.37:62407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-load.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "92"] [id "1000001"] [msg "Bad file blocked: /wp-includes/images/wp-load.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.ftiaxtomonosou.gr"] [uri "/wp-includes/images/wp-load.php"] [unique_id "ai_qfqWBS8mxmEE23cCcOgAAARc"] show less	Port Scan
Anonymous	2026-06-15 10:30:51 (2 days ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 masterguru	2026-06-15 09:28:46 (2 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇩🇪 paissangroup	2026-06-15 05:24:53 (2 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 FeG Deutschland	2026-06-14 05:09:48 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇳🇱 Site.eu	2026-06-14 02:00:34 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇦🇹 Pingger Shikkoken	2026-06-14 01:22:35 (3 days ago)	2026-06-14T01:22:35+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-06-14T01:22:35+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=203.25.124.37 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x60 TTL=53 ID=21351 DF PROTO=TCP SPT=55049 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-14T01:22:36+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=203.25.124.37 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x60 TTL=53 ID=21352 DF PROTO=TCP SPT=55049 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-14T01:22:38+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=203.25.124.37 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x60 TTL=53 ID=21353 DF PROTO=TCP SPT=55049 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇩🇪 iNetWorker	2026-06-13 23:05:54 (3 days ago)	trolling for resource vulnerabilities	Web App Attack
🇩🇪 LRob.fr	2026-06-13 20:15:13 (3 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.225

🇨🇳 203.76.241.18

🇲🇦 196.64.218.194

🇺🇸 192.119.161.64

🇸🇬 188.166.251.103

🇲🇽 187.230.121.176

🇺🇸 138.197.210.44

🇺🇸 44.30.51.245

🇻🇳 14.169.99.58

🇧🇷 189.8.5.118

🇿🇦 102.220.85.131

🇫🇷 85.217.140.43

🇳🇱 80.82.77.139

🇳🇱 45.148.10.157

🇭🇰 45.142.154.108

🇨🇦 45.38.84.124

🇺🇸 44.205.74.196

🇺🇸 44.8.175.10

🇮🇩 43.165.194.10

🇳🇬 143.105.174.152