JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.67

203.25.124.67 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.67

Whois 203.25.124.67

IP Abuse Reports for 203.25.124.67:

This IP address has been reported a total of 103 times from 53 distinct sources. 203.25.124.67 was first reported on March 16th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-07 16:06:58 (4 hours ago)	Banned by Fail2Ban on server	Web App Attack
🇩🇪 LRob.fr	2026-06-07 14:00:04 (6 hours ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇫🇮 6kilowatti	2026-06-07 04:05:33 (16 hours ago)	203.25.124.67 - - [07/Jun/2026:07:05:32 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 404 47 " ... show more 203.25.124.67 - - [07/Jun/2026:07:05:32 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 404 47 "-" "Go-http-client/1.1" 203.25.124.67 - [07/Jun/2026:07:05:32 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 404 4096 "-" "Go-http-client/1.1" ... show less	Web App Attack
Anonymous	2026-06-06 02:28:58 (1 day ago)	[da.kdns.gr] httpd-suspicious-path: sites=diadromi.com; logs=/var/log/httpd/domains/diadromi.com.log ... show more [da.kdns.gr] httpd-suspicious-path: sites=diadromi.com; logs=/var/log/httpd/domains/diadromi.com.log; samples=/wp-includes/random_compat/config.php \| /wp-includes/init.php \| /wp-content/uploads/redux/config.php show less	Hacking Web App Attack
🇮🇩 soc-yk	2026-06-06 02:18:16 (1 day ago)	Type: web_scanning Risk: 100 Events: 54 Evidence: - Automated hostile web probing detected - Repeat ... show more Type: web_scanning Risk: 100 Events: 54 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack
🇫🇷 masterguru	2026-06-05 22:34:50 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇸🇬 lancernz	2026-06-01 03:13:02 (6 days ago)	Auto-detected: 50 hits on poolsidechristchurch.co.nz within 100 log lines. Blocked by Cowork server ... show more Auto-detected: 50 hits on poolsidechristchurch.co.nz within 100 log lines. Blocked by Cowork server monitoring. show less	Web App Attack
Anonymous	2026-05-30 21:05:44 (1 week ago)	[ns31.kdns.gr] httpd-suspicious-path: sites=kypriotis-bathrooms.gr; logs=/var/log/httpd/domains/kypr ... show more [ns31.kdns.gr] httpd-suspicious-path: sites=kypriotis-bathrooms.gr; logs=/var/log/httpd/domains/kypriotis-bathrooms.gr.log; samples=/wp-admin/network/cache/ \| /wp-content/config.php \| /wp-includes/widgets/chosen.php show less	Hacking Web App Attack
🇪🇸 masterguru	2026-05-29 15:53:48 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
Anonymous	2026-05-29 13:01:51 (1 week ago)	Banned by Fail2Ban on server	Web App Attack
🇺🇸 Jason Howell	2026-05-29 02:56:29 (1 week ago)	203.25.124.67 - - [28/May/2026:21:52:09 -0500] "GET /xmlrpc.php HTTP/1.1" 301 535 "-" "Go-http-clien ... show more 203.25.124.67 - - [28/May/2026:21:52:09 -0500] "GET /xmlrpc.php HTTP/1.1" 301 535 "-" "Go-http-client/1.1" 203.25.124.67 - - [28/May/2026:21:56:17 -0500] "GET /wp-includes/Requests/src/Exception/wp-login.php HTTP/1.1" 404 25013 "http://www.qctree.com/wp-includes/Requests/src/Exception/wp-login.php" "Go-http-client/1.1" 203.25.124.67 - - [28/May/2026:21:56:20 -0500] "GET /wp-includes/sodium_compat/src/Core/wp-login.php HTTP/1.1" 404 25013 "http://www.qctree.com/wp-includes/sodium_compat/src/Core/wp-login.php" "Go-http-client/1.1" 203.25.124.67 - - [28/May/2026:21:56:24 -0500] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 404 25013 "http://www.qctree.com/wp-includes/sitemaps/wp-login.php" "Go-http-client/1.1" 203.25.124.67 - - [28/May/2026:21:56:27 -0500] "GET /wp-includes/blocks/pullquote/wp-login.php HTTP/1.1" 404 25013 "http://www.qctree.com/wp-includes/blocks/pullquote/wp-login.php" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 todix	2026-05-28 23:21:03 (1 week ago)	Web App Attack Exploid from 203.25.124.67	Web App Attack
🇩🇪 LRob.fr	2026-05-28 17:00:03 (1 week ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇫🇷 LRob.fr	2026-05-26 06:45:03 (1 week ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇧🇪 taivas.nl	2026-05-26 04:32:52 (1 week ago)	Many_bad_calls	Web App Attack

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 36.7.189.47

🇧🇪 198.235.24.154

🇬🇧 195.206.182.217

🇳🇱 172.235.190.157

🇫🇷 144.91.116.124

🇩🇪 130.61.190.249

🇮🇩 103.151.140.79

🇮🇶 65.20.251.170

🇱🇹 62.60.130.139

🇰🇷 59.16.212.232

🇦🇷 45.238.223.115

🇳🇱 45.148.10.240

🇳🇱 45.148.10.183

🇺🇸 45.79.5.120

🇨🇳 14.103.43.174

🇳🇱 213.218.243.59

🇳🇱 172.235.189.160

🇳🇱 172.235.168.35

🇺🇸 172.234.217.192

🇸🇬 143.198.87.38