JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.52

203.25.124.52 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.52

Whois 203.25.124.52

IP Abuse Reports for 203.25.124.52:

This IP address has been reported a total of 141 times from 66 distinct sources. 203.25.124.52 was first reported on March 16th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-06-18 20:18:00 (8 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇬🇧 poundawebsiteltd	2026-06-18 19:04:42 (10 hours ago)	Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 203.25.124.52 - - [18/Jun/2026:20:04:40 ... show more Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 203.25.124.52 - - [18/Jun/2026:20:04:40 +0100] GET /wp-content/languages/autoload_classmap.php HTTP/1.1 403 158 - Go-http-client/1.1 show less	Web App Attack
🇩🇪 paissangroup	2026-06-18 18:21:39 (10 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-18 14:56:01 (14 hours ago)	203.25.124.52 - - [18/Jun/2026:17:56:00 +0300] "GET /wp-content/admin.php HTTP/1.1" 404 708 "-" "Moz ... show more 203.25.124.52 - - [18/Jun/2026:17:56:00 +0300] "GET /wp-content/admin.php HTTP/1.1" 404 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.25.124.52 - - [18/Jun/2026:17:56:00 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 404 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
🇫🇷 LRob.fr	2026-06-18 01:00:03 (1 day ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-06-17 22:43:35 (1 day ago)	Banned by Fail2Ban on server	Web App Attack
🇦🇺 2000cn.com.au	2026-06-17 18:17:31 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇬🇧 relianoid.com	2026-06-17 16:29:11 (1 day ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇩🇪 4server	2026-06-17 10:16:16 (1 day ago)	[WedJun1712:16:13.8824982026][security2:error][pid2757574:tid2757732][client203.25.124.52:0]ModSecur ... show more [WedJun1712:16:13.8824982026][security2:error][pid2757574:tid2757732][client203.25.124.52:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(/wp-content/backup-\\|/wp-content/backups/\\|/wp-content/uploads/backups/\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"22\"][id\"200110\"][msg\"WordPressbackupdownloadattempt\"][hostname\"mail.feldenkraisticino.ch\"][uri\"/wp-content/backup-migration/admin.php\"][unique_id\"ajJz7YcRbfUGGPB3lw5ofgAAAMs\"] show less	Port Scan Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-06-16 06:04:09 (2 days ago)	203.25.124.52 - - [16/Jun/2026:09:04:08 +0300] "GET /wp-includes/css/dist/edit-post/ HTTP/1.1" 404 7 ... show more 203.25.124.52 - - [16/Jun/2026:09:04:08 +0300] "GET /wp-includes/css/dist/edit-post/ HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇧🇷 SOC PR	2026-06-16 05:42:58 (2 days ago)	IPS: WordPress File Manager Plugin Remote Code Execution (CVE-2020-25213).	Web App Attack
🇫🇷 masterguru	2026-06-16 04:32:00 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197) show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-06-16 01:24:08 (3 days ago)	203.25.124.52 - - [16/Jun/2026:04:24:07 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 4 ... show more 203.25.124.52 - - [16/Jun/2026:04:24:07 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 404 706 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇨🇦 1gz	2026-06-16 00:58:17 (3 days ago)	Triggered Cloudflare WAF (firewallManaged) from JP. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from JP. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Lino Project	2026-06-15 21:58:32 (3 days ago)	203.25.124.52 - - [15/Jun/2026:23:58:28 +0200] "GET /222.php HTTP/1.1" 302 415 "-" "Go-http-client/1 ... show more 203.25.124.52 - - [15/Jun/2026:23:58:28 +0200] "GET /222.php HTTP/1.1" 302 415 "-" "Go-http-client/1.1" ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.63.52.54

🇮🇩 114.10.47.235

🇩🇪 213.209.159.56

🇺🇸 205.210.31.60

🇬🇧 188.240.59.16

🇺🇸 159.65.225.222

🇺🇸 158.94.187.14

🇫🇮 147.185.133.5

🇹🇼 128.14.227.52

🇭🇰 123.58.210.86

🇸🇪 31.134.3.212

🇳🇱 188.227.84.5

🇺🇸 162.216.149.13

🇱🇾 102.211.7.162

🇷🇺 82.204.185.138

🇺🇸 64.62.197.75

🇺🇸 52.165.81.92

🇧🇪 34.156.226.226

🇺🇸 172.217.107.25

🇺🇸 172.56.167.14