JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.214.131

111.225.214.131 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 51%: ?

51%

ISP	CHINANET hebei province network
Usage Type	Commercial
ASN	AS58539
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.214.131

Whois 111.225.214.131

IP Abuse Reports for 111.225.214.131:

This IP address has been reported a total of 19 times from 8 distinct sources. 111.225.214.131 was first reported on July 1st 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-07-08 11:09:55 (20 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/hoxhaj-mbron-shefin-e-tij-a-kane-prova-kunder-rrahim-hashimit/463355/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-07 09:32:36 (1 day ago)	FortiWeb WAF: 16 attacks detected. Threat Score: 5000. Types: Client Management(8), GEO IP(8). Origi ... show more FortiWeb WAF: 16 attacks detected. Threat Score: 5000. Types: Client Management(8), GEO IP(8). Origin: China. show less	Web App Attack
🇫🇷 Sklurk	2026-07-07 05:18:26 (2 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-07 04:16:31 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shqiperi/maqedonia-ul-kamatat/17114/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 David Koswari	2026-07-06 05:26:00 (3 days ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇫🇷 Sklurk	2026-07-06 05:00:13 (3 days ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 13:50:36 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 111.225.214.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 111.225.214.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 09:50:30.146389 2026] [security2:error] [pid 3008:tid 3046] [client 111.225.214.131:19292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peterhansenranch.com"] [uri "/wp-content/uploads/wp-config.php"] [unique_id "akphJtD0M2bxGd0inkpkUQAAAVE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-07-05 04:39:19 (4 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-05 01:48:06 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-07-04 09:00:29 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shqiperi/babai-u-vrau-nenen-kujdestaria-e-femijeve-te-fildesit-i-kalon-tezes/330224/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-04 04:04:50 (5 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-03 03:50:51 (6 days ago)	Web App Attack	Web App Attack
🇷🇸 Smel	2026-07-03 02:48:11 (6 days ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
🇮🇩 hermawan	2026-07-02 17:46:58 (6 days ago)	1783014407.360935 111.225.214.131 103.166.156.58 65535_2-4-8-1-3_1436_7 2026-07-03 00:46:47 WIB ...	Email Spam Hacking
🇬🇷 setupgr	2026-07-02 10:20:23 (6 days ago)	(mod_security) mod_security (id:100011) triggered by 111.225.214.131 (CN/China/Hebei/Shijiazhuang/-/ ... show more (mod_security) mod_security (id:100011) triggered by 111.225.214.131 (CN/China/Hebei/Shijiazhuang/-/[AS58539 CHINATELECOM-HEBEI-LANGFANG-IDC Langfang,Hebei province, P.R.China]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Jul 02 13:20:19.216677 2026] [security2:error] [pid 3340410:tid 3340477] [remote 111.225.214.131:53004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%CF%80%CE%B5%CF%8D%CE%BA%CE%B7-2/"] [unique_id "akY7Y7xKVnNfZkVZbCMa9gACmAk"] show less	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 148.153.121.146

🇮🇳 49.36.27.69

🇳🇱 45.148.10.151

🇩🇪 43.228.157.9

🇧🇪 34.156.141.209

🇨🇳 223.70.84.248

🇨🇳 218.78.131.154

🇺🇸 184.105.247.200

🇺🇸 107.173.36.107

🇨🇳 106.54.208.161

🇨🇦 85.217.149.35

🇧🇬 78.128.114.174

🇳🇱 50.7.41.107

🇺🇸 40.76.139.157

🇲🇾 202.184.151.147

🇺🇸 195.184.76.94

🇺🇸 195.184.76.70

🇷🇴 193.32.162.60

🇭🇰 101.36.121.72

🇦🇪 91.75.85.107