AbuseIPDB » 203.25.219.38

Check an IP Address, Domain Name, or Subnet

e.g. 18.206.92.240, microsoft.com, or 5.188.10.0/24

203.25.219.38 was found in our database!

This IP was reported 149 times. Confidence of Abuse is 90%: ?

90%

ISP	ChinaNet Guangdong Province Network
Usage Type	Unknown
Domain Name	chinatelecom.com.cn
Country	China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 203.25.219.38

Whois 203.25.219.38

IP Abuse Reports for 203.25.219.38:

This IP address has been reported a total of 149 times from 47 distinct sources. 203.25.219.38 was first reported on December 6th 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
Unwasted	2 hours ago	Abusive content scan (abuse_score:>80)	Hacking Brute-Force Web App Attack
Hirte	10 hours ago	C1: Web Attack GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
ozisp.com.au	18 hours ago	CN_APNIC-HM_<33>1679789826 [1:2002945:11] ET POLICY Java Url Lib User Agent Web Crawl [Classificatio ... show moreCN_APNIC-HM_<33>1679789826 [1:2002945:11] ET POLICY Java Url Lib User Agent Web Crawl [Classification: Attempted Information Leak] [Priority: 2] {TCP} 203.25.219.38:58648 show less	Hacking
ANDREAS LYTOS	24 Mar 2023	(wordpress-user-enum) Failed wordpress-user-enum trigger from 203.25.219.38 (CN/China/-)	Brute-Force
Hirte	23 Mar 2023	C1: Web Attack GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
URAN Publishing Service	22 Mar 2023	203.25.219.38 - - [22/Mar/2023:18:53:39 +0200] "GET /wp-login.php HTTP/1.1" 404 288 "-" "Apache-Http ... show more203.25.219.38 - - [22/Mar/2023:18:53:39 +0200] "GET /wp-login.php HTTP/1.1" 404 288 "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.25.219.38 - - [22/Mar/2023:18:54:08 +0200] "GET /xmlrpc.php HTTP/1.1" 404 288 "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" ... show less	Web App Attack
Staging	22 Mar 2023	Coordinated attack	DDoS Attack Web App Attack
MAGIC	21 Mar 2023	Distributed DDOS attempts for multiple sites	DDoS Attack Bad Web Bot
zwh	21 Mar 2023	Attack for XMLRPC	Web App Attack
Marc	21 Mar 2023		Brute-Force Web App Attack
Anonymous	21 Mar 2023	(wordpress-user-enum) Failed wordpress-user-enum trigger from 203.25.219.38 (CN/China/-)	Brute-Force
URAN Publishing Service	21 Mar 2023	203.25.219.38 - - [21/Mar/2023:03:43:57 +0200] "GET /wp-login.php HTTP/1.1" 404 270 "-" "Apache-Http ... show more203.25.219.38 - - [21/Mar/2023:03:43:57 +0200] "GET /wp-login.php HTTP/1.1" 404 270 "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" ... show less	Web App Attack
URAN Publishing Service	20 Mar 2023	203.25.219.38 - - [20/Mar/2023:18:07:31 +0200] "GET /wp-login.php HTTP/1.1" 404 275 "-" "Apache-Http ... show more203.25.219.38 - - [20/Mar/2023:18:07:31 +0200] "GET /wp-login.php HTTP/1.1" 404 275 "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" ... show less	Web App Attack
URAN Publishing Service	20 Mar 2023	203.25.219.38 - - [20/Mar/2023:10:09:19 +0200] "GET /wp-login.php HTTP/1.1" 404 279 "-" "Apache-Http ... show more203.25.219.38 - - [20/Mar/2023:10:09:19 +0200] "GET /wp-login.php HTTP/1.1" 404 279 "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.25.219.38 - - [20/Mar/2023:10:09:43 +0200] "GET /xmlrpc.php HTTP/1.1" 404 279 "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" ... show less	Web App Attack
URAN Publishing Service	19 Mar 2023	203.25.219.38 - - [19/Mar/2023:03:49:20 +0200] "GET /wp-login.php HTTP/1.1" 404 275 "-" "Apache-Http ... show more203.25.219.38 - - [19/Mar/2023:03:49:20 +0200] "GET /wp-login.php HTTP/1.1" 404 275 "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.25.219.38 - - [19/Mar/2023:03:50:01 +0200] "GET /wp-login.php HTTP/1.1" 404 282 "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" ... show less	Web App Attack