JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.25.124.71

203.25.124.71 was found in our database!

This IP was reported 214 times. Confidence of Abuse is 48%: ?

48%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.25.124.71

Whois 203.25.124.71

IP Abuse Reports for 203.25.124.71:

This IP address has been reported a total of 214 times from 80 distinct sources. 203.25.124.71 was first reported on March 16th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-24 01:10:14 (1 week ago)	Attack detected: 203.25.124.71 [2026-08-24] Categories: 21 --- webshell/admin probe (9 hits) --- 203 ... show more Attack detected: 203.25.124.71 [2026-08-24] Categories: 21 --- webshell/admin probe (9 hits) --- 203.25.124.71 - - [24/Jul/2026:21:11:35 +0000] "GET /wp-content/uploads/2021/file.php HTTP/1.1" 404 72817 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:11:41 +0000] "GET /wp-conflg/function.php HTTP/1.1" 404 72790 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:11:54 +0000] "GET /wp-content/wp-conflg.php HTTP/1.1" 404 72794 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:12:00 +0000] "GET /wp-content/uploads/about.php HTTP/1.1" 404 72809 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:12:06 +0000] "GET /wp-admin/user/wp-conflg.php HTTP/1.1" 404 72807 "-" "Go-http-client/1.1" show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-22 21:13:57 (1 week ago)	[23/Aug/2026:00:13:57 +0300] -- 203.25.124.71 Ban reason: User-Agent Go-http-client	Bad Web Bot Web App Attack
🇹🇷 neron	2026-08-14 09:06:48 (2 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-09 16:29:21 (3 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-08-09 01:03:56 (3 weeks ago)	Attack detected: 203.25.124.71 [2026-08-09] Categories: 21 --- webshell/admin probe (9 hits) --- 203 ... show more Attack detected: 203.25.124.71 [2026-08-09] Categories: 21 --- webshell/admin probe (9 hits) --- 203.25.124.71 - - [24/Jul/2026:21:11:35 +0000] "GET /wp-content/uploads/2021/file.php HTTP/1.1" 404 72817 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:11:41 +0000] "GET /wp-conflg/function.php HTTP/1.1" 404 72790 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:11:54 +0000] "GET /wp-content/wp-conflg.php HTTP/1.1" 404 72794 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:12:00 +0000] "GET /wp-content/uploads/about.php HTTP/1.1" 404 72809 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:12:06 +0000] "GET /wp-admin/user/wp-conflg.php HTTP/1.1" 404 72807 "-" "Go-http-client/1.1" show less	Web App Attack
🇹🇷 neron	2026-07-30 11:06:18 (1 month ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-26 11:20:47 (1 month ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 Ba-Yu	2026-07-25 10:03:29 (1 month ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 CBJ	2026-07-25 06:56:50 (1 month ago)	fail2ban: apache-random-recon ...	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-25 01:31:54 (1 month ago)	Multiple unauthorized connection attempts	Web App Attack
Anonymous	2026-07-25 00:42:12 (1 month ago)	Attack detected: 203.25.124.71 [2026-07-25] Categories: 21 --- webshell/admin probe (9 hits) --- 203 ... show more Attack detected: 203.25.124.71 [2026-07-25] Categories: 21 --- webshell/admin probe (9 hits) --- 203.25.124.71 - - [24/Jul/2026:21:11:35 +0000] "GET /wp-content/uploads/2021/file.php HTTP/1.1" 404 72817 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:11:41 +0000] "GET /wp-conflg/function.php HTTP/1.1" 404 72790 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:11:54 +0000] "GET /wp-content/wp-conflg.php HTTP/1.1" 404 72794 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:12:00 +0000] "GET /wp-content/uploads/about.php HTTP/1.1" 404 72809 "-" "Go-http-client/1.1" 203.25.124.71 - - [24/Jul/2026:21:12:06 +0000] "GET /wp-admin/user/wp-conflg.php HTTP/1.1" 404 72807 "-" "Go-http-client/1.1" show less	Web App Attack
🇳🇱 Site.eu	2026-07-24 18:03:55 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 4server	2026-07-24 13:41:36 (1 month ago)	[FriJul2415:41:33.6776292026][security2:error][pid2771133:tid2771466][client203.25.124.71:0]ModSecur ... show more [FriJul2415:41:33.6776292026][security2:error][pid2771133:tid2771466][client203.25.124.71:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"\^/wp-content/uploads/.\*\\\\\\\\.$php\\|phtml\\|phar\\|php3\\|php4\\|php5\\|php7$\$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"395\"][id\"1101018\"][msg\"PHPexecutionfromuploads\"][hostname\"mgevents.ch\"][uri\"/wp-content/uploads/wp.php\"][unique_id\"amNrjYuUfqLBB2JDD-bfuAAAAAk\"] show less	Port Scan Brute-Force Web App Attack
🇫🇮 6kilowatti	2026-07-24 04:06:13 (1 month ago)	2026/07/24 07:06:12 [error] 4060105#4060105: 62487 FastCGI sent in stderr: "Primary script unknown" ... show more 2026/07/24 07:06:12 [error] 4060105#4060105: 62487 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 203.25.124.71, server: oh6ah.fi, request: "GET /radio.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi" 2026/07/24 07:06:12 [error] 4060105#4060105: *62487 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 203.25.124.71, server: oh6ah.fi, request: "GET /wp-content/updates.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-24 00:22:44 (1 month ago)	Multiple unauthorized connection attempts	Web App Attack

Showing 1 to 15 of 214 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.117.132.229

🇺🇸 73.36.37.138

🇰🇷 220.119.37.141

🇨🇴 186.180.130.170

🇸🇮 185.97.52.101

🇳🇱 160.119.71.9

🇮🇹 151.21.130.143

🇺🇸 129.146.60.77

🇸🇬 114.119.159.226

🇺🇸 66.132.172.123

🇩🇪 64.89.163.80

🇸🇬 43.156.33.17

🇴🇲 37.40.41.186

🇮🇳 2401:4900:1c5e:c698:1c22:aae1:cca3:13f9

🇻🇪 190.97.240.61

🇭🇰 172.253.5.24

🇷🇺 95.84.192.53

🇰🇿 82.200.226.226

🇭🇰 43.129.193.109

🇨🇭 34.65.77.95