JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.214.155

111.225.214.155 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 64%: ?

64%

ISP	CHINANET hebei province network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58539
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.214.155

Whois 111.225.214.155

IP Abuse Reports for 111.225.214.155:

This IP address has been reported a total of 59 times from 13 distinct sources. 111.225.214.155 was first reported on July 1st 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-25 06:20:17 (8 hours ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-24 06:17:44 (1 day ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-07-23 12:13:37 (2 days ago)	(mod_security) mod_security (id:100011) triggered by 111.225.214.155 (CN/China/Hebei/Shijiazhuang/-/ ... show more (mod_security) mod_security (id:100011) triggered by 111.225.214.155 (CN/China/Hebei/Shijiazhuang/-/[AS58539 CHINATELECOM-HEBEI-LANGFANG-IDC Langfang,Hebei province, P.R.China]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Jul 23 15:13:34.169695 2026] [security2:error] [pid 433919:tid 434129] [client 111.225.214.155:31745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%CE%BA%CE%B1%CF%83%CF%84%CE%B1%CE%BD%CE%B9%CE%AC-%CE%B1%CE%BC%CE%B5%CF%81%CE%B9%CE%BA%CE%AE%CF%82-2/"] [unique_id "amIFbtwt4Bz5QtZlyPmNMAAAAhY"] show less	Port Scan
🇫🇷 Sklurk	2026-07-23 06:16:48 (2 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-22 06:04:12 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 masterguru	2026-07-21 07:23:18 (4 days ago)	Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot ... show more Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot)" against "REQUEST_HEADERS:user-agent" required. (780532-133) show less	Hacking
🇫🇷 Sklurk	2026-07-21 05:38:50 (4 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-20 05:32:44 (5 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-19 05:30:43 (6 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-19 03:47:54 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-18 05:09:50 (1 week ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-18 03:04:17 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-17 05:03:23 (1 week ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-17 02:19:30 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /bota/233-shpirt-ne-bord-del-videoja-e-tmerrit-nga-avioni-qe-piloti-hero-e-uli-ne-aren-me-miser-video/476076/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-07-16 06:01:12 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shendetesi/shenjat-e-tumoreve/70333/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 113.238.96.14

🇫🇷 91.231.89.52

🇫🇷 91.231.89.51

🇳🇱 89.21.67.182

🇺🇸 52.20.198.190

🇿🇦 41.193.171.251

🇧🇷 205.210.31.153

🇺🇸 172.253.7.28

🇩🇪 172.111.80.83

🇩🇪 167.94.145.20

🇺🇸 162.216.150.22

🇬🇧 138.68.165.20

🇿🇦 105.247.69.196

🇸🇬 101.47.158.56

🇺🇸 74.207.253.22

🇸🇬 54.254.144.223

🇲🇽 45.134.9.27

🇩🇪 194.36.25.45

🇪🇸 185.191.67.13

🇺🇸 162.216.149.137