JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.25.248.203

116.25.248.203 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.25.248.203

Whois 116.25.248.203

IP Abuse Reports for 116.25.248.203:

This IP address has been reported a total of 74 times from 42 distinct sources. 116.25.248.203 was first reported on October 10th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-21 16:32:55 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2026-06-20 12:04:46 (2 days ago)	SMTP AUTH 116.25.248.203 (116.25.248.203)	Brute-Force
Anonymous	2026-06-20 11:02:13 (2 days ago)	6x Postfix SASL LOGIN authentication failed	Brute-Force
🇹🇷 ferique	2026-06-20 10:01:34 (2 days ago)	Real-time Intercept: SMTP attack. Reference: 2026-06-20 13:01:24.5801 Login failure: 116.25.248.203 ... show more Real-time Intercept: SMTP attack. Reference: 2026-06-20 13:01:24.5801 Login failure: 116.25.248.203 SMTP show less	Brute-Force Email Spam
🇩🇪 EGP Abuse Dept	2026-06-20 07:48:24 (3 days ago)	SMTP AUTH attack	Brute-Force
🇫🇷 dwmp	2026-06-20 07:14:10 (3 days ago)	Jun 20 06:36:07 webcore postfix/smtpd[3598209]: warning: unknown[116.25.248.203]: SASL LOGIN authent ... show more Jun 20 06:36:07 webcore postfix/smtpd[3598209]: warning: unknown[116.25.248.203]: SASL LOGIN authentication failed: authentication failure Jun 20 07:00:36 webcore postfix/smtpd[3677190]: warning: unknown[116.25.248.203]: SASL LOGIN authentication failed: authentication failure Jun 20 09:14:09 webcore postfix/smtpd[3996662]: warning: unknown[116.25.248.203]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇭🇺 Lacika555	2026-06-20 07:01:21 (3 days ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇮🇩 xveil	2026-06-20 04:52:27 (3 days ago)	2026-06-20T11:52:24.882255 mail-honeypot postfix/submission/smtpd[5453]: warning: unknown[116.25.248 ... show more 2026-06-20T11:52:24.882255 mail-honeypot postfix/submission/smtpd[5453]: warning: unknown[116.25.248.203]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇦 MakselPr	2026-06-19 21:38:12 (3 days ago)	Jun 19 18:25:20 mail postfix/smtps/smtpd[649571]: warning: unknown[116.25.248.203]: SASL LOGIN authe ... show more Jun 19 18:25:20 mail postfix/smtps/smtpd[649571]: warning: unknown[116.25.248.203]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=kardan Jun 20 00:38:12 mail postfix/smtps/smtpd[664978]: warning: unknown[116.25.248.203]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=franklin.elley ... show less	Brute-Force
🇨🇦 polycoda	2026-06-19 17:07:36 (3 days ago)	📮 Sends email spam and/or tries to probe for a ton of inexistent email accounts to send spam to and/ ... show more 📮 Sends email spam and/or tries to probe for a ton of inexistent email accounts to send spam to and/or tries to brute force its way into an email account show less	Email Spam
🇨🇿 sajmon0011	2026-06-19 15:10:35 (3 days ago)	2026-06-19T17:10:34.612783 server1.sajmon0011.cz auth[4166011]: pam_unix(dovecot:auth): authenticati ... show more 2026-06-19T17:10:34.612783 server1.sajmon0011.cz auth[4166011]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=usenet rhost=116.25.248.203 ... show less	Brute-Force
🇦🇺 brocococonut	2026-06-19 14:03:00 (3 days ago)	2026-06-19 19:46:28 dovecot_login authenticator failed for ([149.54.62.162]) [116.25.248.203]: 535 I ... show more 2026-06-19 19:46:28 dovecot_login authenticator failed for ([149.54.62.162]) [116.25.248.203]: 535 Incorrect authentication data ([email protected]) 2026-06-19 19:46:28 dovecot_login authenticator failed for ([149.54.62.162]) [116.25.248.203]: 535 Incorrect authentication data ([email protected]) 2026-06-19 07:35:45 dovecot_login authenticator failed for ([183.171.148.181]) [116.25.248.203]: 535 Incorrect authentication data (set_id=bookings) 2026-06-19 19:46:28 dovecot_login authenticator failed for ([149.54.62.162]) [116.25.248.203]: 535 Incorrect authentication data ([email protected]) 2026-06-19 07:35:45 dovecot_login authenticator failed for ([183.171.148.181]) [116.25.248.203]: 535 Incorrect authentication data (set_id=bookings) ... show less	Brute-Force
🇫🇷 smtp.com.es	2026-06-19 13:31:48 (3 days ago)	Brute force attempt.	Brute-Force Email Spam
🇫🇷 Provost-info	2026-06-19 11:47:54 (3 days ago)	mail server - multiple authentication attempt with unknown username or bad password	Brute-Force Spoofing
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-06-19 10:32:55 (3 days ago)	Jun 19 04:32:55 KORD-B postfix/submission/smtpd[370000]: warning: unknown[116.25.248.203]: SASL LOGI ... show more Jun 19 04:32:55 KORD-B postfix/submission/smtpd[370000]: warning: unknown[116.25.248.203]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇩 91.242.117.54

🇬🇧 45.82.76.121

🇬🇧 35.203.211.33

🇳🇵 202.51.80.190

🇲🇽 186.96.158.180

🇬🇧 185.247.137.88

🇺🇸 165.154.162.193

🇯🇵 139.162.113.212

🇨🇳 118.183.180.108

🇰🇷 118.41.186.96

🇹🇭 110.78.164.210

🇹🇷 88.234.83.165

🇺🇸 66.29.142.197

🇲🇴 182.93.50.90

🇺🇸 172.234.25.243

🇧🇩 160.20.116.37

🇨🇳 124.67.120.106

🇹🇭 118.175.249.127

🇺🇸 104.238.215.91

🇺🇸 104.234.53.97