JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.194.113.225

203.194.113.225 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	CV. Rumahweb Indonesia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58487
Hostname(s)	vps.csis.co.id
Domain Name	rumahweb.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.194.113.225

Whois 203.194.113.225

IP Abuse Reports for 203.194.113.225:

This IP address has been reported a total of 38 times from 23 distinct sources. 203.194.113.225 was first reported on August 8th 2026, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-08-31 10:50:17 (10 minutes ago)	Probing for exploits 203.194.113.225 - - [31/Aug/2026:12:50:10 +0200] "GET /wp-login.php HTTP/2.0" 3 ... show more Probing for exploits 203.194.113.225 - - [31/Aug/2026:12:50:10 +0200] "GET /wp-login.php HTTP/2.0" 301 0 "-" "203.194.113.225" 203.194.113.225 - - [31/Aug/2026:12:50:13 +0200] "POST /wp-login.php HTTP/2.0" 301 0 "https://v97746.<REDACTED>/wp-login.php" "203.194.113.225" show less	Hacking Web App Attack
Anonymous	2026-08-31 10:26:12 (35 minutes ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 1cyb3rpunk	2026-08-30 21:56:28 (13 hours ago)	Coordinated campaign CMP-1786835848-001: 322 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 322 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, attacker_objective_inferred, backup_file_probe, cms_version_probe, command_injection_attempt). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 1cyb3rpunk	2026-08-29 21:56:00 (1 day ago)	Coordinated campaign CMP-1786835848-001: 319 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 319 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, attacker_objective_inferred, backup_file_probe, cms_version_probe, command_injection_attempt). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 1cyb3rpunk	2026-08-29 15:31:59 (1 day ago)	Coordinated campaign CMP-1786835848-001: 316 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 316 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, attacker_objective_inferred, backup_file_probe, cms_version_probe, command_injection_attempt). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-08-29 04:07:55 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 1cyb3rpunk	2026-08-28 15:30:57 (2 days ago)	Coordinated campaign CMP-1786835848-001: 297 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 297 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, attacker_objective_inferred, backup_file_probe, cms_version_probe, command_injection_attempt). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2026-08-28 05:55:05 (3 days ago)	203.194.113.225 - - [28/Aug/2026:07:55:05 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 203.194.113.225 - - [28/Aug/2026:07:55:05 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 ger-stg-sifi1	2026-08-28 05:33:39 (3 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 AlexEventfahrtenIPDB	2026-08-28 05:18:58 (3 days ago)	[Fri Aug 28 07:18:56.067512 2026] [authz_core:error] [pid 45535:tid 45541] [remote 203.194.113.225:4 ... show more [Fri Aug 28 07:18:56.067512 2026] [authz_core:error] [pid 45535:tid 45541] [remote 203.194.113.225:46020] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php [Fri Aug 28 07:18:57.873604 2026] [authz_core:error] [pid 45534:tid 45574] [remote 203.194.113.225:46026] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://powerstar.spdns.de/wp-login.php ... show less	Brute-Force Web App Attack
🇧🇪 brechtr	2026-08-28 05:04:15 (3 days ago)	[Press84-BanHammer] bad username — Sourced from: brechtryckaert.com — Request: POST /wp-login.php	Brute-Force
🇪🇸 masterguru	2026-08-28 04:58:48 (3 days ago)	(wplogin) Failed WordPress login from 203.194.113.225 (ID/Indonesia/vps.csis.co.id): 5 in the last 3 ... show more (wplogin) Failed WordPress login from 203.194.113.225 (ID/Indonesia/vps.csis.co.id): 5 in the last 3600 secs (0-122) show less	Hacking
🇩🇪 neckaralb-admin.de	2026-08-28 04:22:05 (3 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇮🇹 VHosting	2026-08-28 04:10:04 (3 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
Anonymous	2026-08-28 03:45:02 (3 days ago)	Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0, [2/2] done, POST /wp-login.php H ... show more Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0, [2/2] done, POST /wp-login.php HTTP/2.0 show less	Hacking Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.226.197.35

🇬🇧 213.166.84.34

🇺🇸 209.207.236.197

🇮🇩 202.51.199.2

🇨🇳 183.144.167.37

🇨🇳 106.53.51.171

🇷🇺 90.189.217.65

🇪🇪 84.50.76.81

🇻🇪 82.86.109.148

🇺🇦 77.75.148.120

🇱🇻 62.60.130.242

🇺🇸 34.26.200.129

🇳🇱 193.107.20.56

🇪🇸 185.144.55.16

🇨🇳 183.149.157.208

🇺🇸 162.216.150.97

🇮🇳 159.65.148.158

🇺🇸 143.42.164.34

🇬🇧 87.236.176.211

🇧🇭 84.255.184.120