JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.214.136

111.225.214.136 was found in our database!

This IP was reported 158 times. Confidence of Abuse is 85%: ?

85%

ISP	CHINANET hebei province network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58539
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.214.136

Whois 111.225.214.136

IP Abuse Reports for 111.225.214.136:

This IP address has been reported a total of 158 times from 21 distinct sources. 111.225.214.136 was first reported on June 30th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-09-03 05:12:01 (5 hours ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-09-03 04:21:17 (6 hours ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.136: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.136: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 pixelmemory.us	2026-09-02 07:04:08 (1 day ago)	2026-09-02T06:54:05 111.225.214.136 GET /Photos/Family/Sumi%202019/raw/DSC01902.ARW Mozilla/5.0 (Win ... show more 2026-09-02T06:54:05 111.225.214.136 GET /Photos/Family/Sumi%202019/raw/DSC01902.ARW Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 ... show less	Bad Web Bot
🇫🇷 Sklurk	2026-09-02 05:09:28 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-09-02 03:23:45 (1 day ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.136: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.136: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-09-01 05:02:15 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 pixelmemory.us	2026-08-31 20:09:03 (2 days ago)	2026-08-31T19:54:51 111.225.214.136 GET /Photos/Family/2018-12-24%20Mom's/raw/DSC00592.ARW Mozilla/5 ... show more 2026-08-31T19:54:51 111.225.214.136 GET /Photos/Family/2018-12-24%20Mom's/raw/DSC00592.ARW Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 SX Communications	2026-08-31 19:42:32 (2 days ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.136: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.136: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-08-31 18:18:05 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 111.225.214.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 111.225.214.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 14:17:58.691794 2026] [security2:error] [pid 20670:tid 20670] [client 111.225.214.136:54242] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.clubfansite.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.clubfansite.com"] [uri "/wisinyadel/youtube.com"] [unique_id "apXFVq4gc-gq1za2nsFjFwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 pixelmemory.us	2026-08-30 20:50:57 (3 days ago)	2026-08-30T20:49:14 111.225.214.136 GET /Photos/Family/Sumi%202019/raw/DSC01990.ARW Mozilla/5.0 (Win ... show more 2026-08-30T20:49:14 111.225.214.136 GET /Photos/Family/Sumi%202019/raw/DSC01990.ARW Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 SX Communications	2026-08-30 14:24:08 (3 days ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.136: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.136: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-08-30 12:02:24 (3 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 111.225.214.136: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 111.225.214.136: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 pixelmemory.us	2026-08-30 00:54:30 (4 days ago)	2026-08-30T00:50:38 111.225.214.136 GET /Photos/Family/Sumi%202019/raw/DSC01870.ARW Mozilla/5.0 (Win ... show more 2026-08-30T00:50:38 111.225.214.136 GET /Photos/Family/Sumi%202019/raw/DSC01870.ARW Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 SX Communications	2026-08-29 14:33:15 (4 days ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.136: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.136: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-08-29 05:50:34 (5 days ago)	Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTM ... show more Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 show less	Web App Attack

Showing 1 to 15 of 158 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.204

🇭🇰 161.81.122.104

🇫🇮 147.185.133.196

🇫🇮 147.185.133.77

🇺🇸 91.230.168.146

🇧🇬 79.124.58.18

🇦🇪 2a00:f29:248:5ded:742d:710f:5ce9:bbc

🇺🇸 162.216.149.75

🇺🇸 152.32.235.227

🇩🇪 92.208.198.0

🇵🇹 81.193.216.17

🇺🇸 67.220.180.114

🇺🇸 64.62.156.195

🇺🇸 52.167.144.215

🇸🇬 45.78.230.231

🇬🇧 35.203.210.168

🇻🇳 14.225.206.171

🇩🇪 2a03:b0c0:3:d0::1047:b001

🇫🇮 178.20.210.151

🇺🇸 162.216.149.3