JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.214.135

111.225.214.135 was found in our database!

This IP was reported 216 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS58539
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.214.135

Whois 111.225.214.135

IP Abuse Reports for 111.225.214.135:

This IP address has been reported a total of 216 times from 39 distinct sources. 111.225.214.135 was first reported on June 30th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-09-23 08:48:36 (6 hours ago)	Web App Attack	Web App Attack
🇺🇸 1gz	2026-09-22 10:34:08 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-09-22 08:41:35 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-09-22 07:17:34 (1 day ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.135: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.135: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇮🇹 Progetto1	2026-09-22 02:20:03 (1 day ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 ✨	2026-09-22 01:16:14 (1 day ago)	Domain : cameronbespolka.com Rule : Method-Head 2026-09-22 01:07:36 217.194.212.123 HEAD /Media/Came ... show more Domain : cameronbespolka.com Rule : Method-Head 2026-09-22 01:07:36 217.194.212.123 HEAD /Media/Cameron/pdfs/BTO-Birdcamp-Weekend-May-2017-Ben-Moyes.pdf - 443 - 111.225.214.135 HTTP/2.0 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 - cameronbespolka.com 200 0 0 472 294 290 - - show less	Port Scan
🇺🇸 1gz	2026-09-21 23:24:59 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-json/wp/v2/posts/319030 UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-09-21 21:16:54 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-json/wp/v2/posts/127901 UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-09-21 08:40:48 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-09-21 05:40:55 (2 days ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.135: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.135: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-09-20 09:30:35 (3 days ago)	FortiWeb WAF: 16 attacks detected. Threat Score: 5800. Types: Client Management(8), GEO IP(8). Origi ... show more FortiWeb WAF: 16 attacks detected. Threat Score: 5800. Types: Client Management(8), GEO IP(8). Origin: China. show less	Web App Attack
🇺🇸 SX Communications	2026-09-20 05:14:44 (3 days ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.135: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.135: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-19 08:01:23 (4 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 111.225.214.135: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 111.225.214.135: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-19 01:08:17 (4 days ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.135: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.135: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-09-18 09:34:28 (5 days ago)	FortiWeb WAF: 12 attacks detected. Threat Score: 5200. Types: Client Management(6), GEO IP(6). Origi ... show more FortiWeb WAF: 12 attacks detected. Threat Score: 5200. Types: Client Management(6), GEO IP(6). Origin: China. show less	Web App Attack

Showing 1 to 15 of 216 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.226.138

🇩🇪 167.94.146.32

🇮🇳 165.22.223.12

🇺🇸 135.233.115.77

🇺🇸 85.208.96.198

🇨🇳 42.49.82.176

🇰🇷 14.54.22.11

🇷🇴 2.57.121.25

🇮🇹 2600:3c0b::2000:48ff:fec2:a928

🇨🇳 223.102.198.228

🇰🇷 211.223.107.86

🇦🇷 186.139.251.57

🇰🇷 121.1.81.95

🇭🇰 104.208.65.139

🇧🇬 79.124.59.182

🇺🇸 66.132.172.149

🇺🇸 63.65.203.83

🇺🇸 47.251.101.253

🇷🇺 46.20.71.68

🇨🇳 42.49.82.184