JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.72

203.25.124.72 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.72

Whois 203.25.124.72

IP Abuse Reports for 203.25.124.72:

This IP address has been reported a total of 111 times from 57 distinct sources. 203.25.124.72 was first reported on March 16th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-13 13:50:31 (3 hours ago)	Banned by Fail2Ban on server	Web App Attack
🇩🇪 LRob.fr	2026-06-13 07:15:05 (10 hours ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇫🇷 masterguru	2026-06-13 06:14:03 (11 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-196) show less	Bad Web Bot
🇬🇷 setupgr	2026-06-12 22:52:49 (18 hours ago)	(mod_security) mod_security (id:1000001) triggered by 203.25.124.72: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:1000001) triggered by 203.25.124.72: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 01:52:45.264120 2026] [security2:error] [pid 351315:tid 351376] [client 203.25.124.72:52683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-load.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "92"] [id "1000001"] [msg "Bad file blocked: /wp-includes/images/wp-load.php"] [severity "CRITICAL"] [tag "security"] [hostname "www.pankoskal.gr"] [uri "/wp-includes/images/wp-load.php"] [unique_id "aiyNvS1k1uOF-ho73ActOwAAAAQ"] show less	Port Scan
🇩🇪 BlueWire Hosting	2026-06-12 19:32:31 (22 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 ghostwarriors	2026-06-12 17:50:28 (23 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-12 10:43:27 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-193) show less	Bad Web Bot
🇫🇮 6kilowatti	2026-06-12 09:20:19 (1 day ago)	2026/06/12 12:20:19 [error] 1589241#1589241: 37305 FastCGI sent in stderr: "Primary script unknown" ... show more 2026/06/12 12:20:19 [error] 1589241#1589241: 37305 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 203.25.124.72, server: oh6ah.fi, request: "GET /wp-content/config.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "www.oh6ah.fi" 2026/06/12 12:20:19 [error] 1589241#1589241: *37305 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 203.25.124.72, server: oh6ah.fi, request: "GET /wp-includes/login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "www.oh6ah.fi" ... show less	Web App Attack
Anonymous	2026-06-12 09:09:03 (1 day ago)	Bot / scanning and/or hacking attempts: GET /wp-content/languages/wp-content/ HTTP/1.1, GET /cgi-bin ... show more Bot / scanning and/or hacking attempts: GET /wp-content/languages/wp-content/ HTTP/1.1, GET /cgi-bin/wp-conflg.php HTTP/1.1, GET /wp-includes/PHPMailer/Newspaper/includes/ HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 LRob.fr	2026-06-10 12:00:15 (3 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇩🇪 LRob.fr	2026-06-08 05:30:08 (5 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇫🇮 6kilowatti	2026-06-07 04:05:11 (6 days ago)	2026/06/07 07:05:11 [error] 3756464#3756464: 525918 FastCGI sent in stderr: "Primary script unknown ... show more 2026/06/07 07:05:11 [error] 3756464#3756464: 525918 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 203.25.124.72, server: oh6ah.fi, request: "GET /filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi" 2026/06/07 07:05:11 [error] 3756464#3756464: *525918 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 203.25.124.72, server: oh6ah.fi, request: "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi" ... show less	Web App Attack
🇫🇷 AGEPCom	2026-06-06 05:50:37 (1 week ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-06-06 01:43:36 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 andypiper	2026-06-06 01:01:03 (1 week ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 125.212.223.168

🇰🇷 61.43.121.132

🇳🇱 45.148.10.183

🇧🇷 45.5.102.93

🇩🇿 41.111.178.165

🇨🇦 20.151.217.54

🇹🇭 202.29.220.6

🇳🇱 194.48.251.105

🇨🇳 171.114.224.201

🇨🇳 101.126.64.76

🇦🇺 54.252.252.43

🇫🇷 5.189.154.64

🇮🇷 217.218.39.19

🇧🇷 168.228.42.241

🇧🇷 129.121.33.174

🇨🇳 113.135.194.36

🇬🇧 35.203.210.162

🇺🇸 35.202.9.133

🇮🇳 13.207.192.243

🇺🇸 2602:fb54:1400::27