JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.214.159

111.225.214.159 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 86%: ?

86%

ISP	CHINANET hebei province network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58539
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.214.159

Whois 111.225.214.159

IP Abuse Reports for 111.225.214.159:

This IP address has been reported a total of 125 times from 22 distinct sources. 111.225.214.159 was first reported on June 14th 2022, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-27 05:31:57 (10 hours ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-08-27 01:39:50 (14 hours ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 111.225.214.159: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 111.225.214.159: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-08-26 22:10:45 (18 hours ago)	(mod_security) mod_security (id:210730) triggered by 111.225.214.159 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 111.225.214.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 18:10:38.632556 2026] [security2:error] [pid 5258:tid 5275] [client 111.225.214.159:54738] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aafm.org\|F\|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aafm.org"] [uri "/www.GAFM.com"] [unique_id "ao9kXmjmgWN1l4h6zxMOFgAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-08-26 22:01:51 (18 hours ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.159: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.159: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇩🇪 Hugopvigo	2026-08-26 20:40:22 (19 hours ago)	"2026-08-26 20:40:21+00:00 111.225.214.159 IP con score alto (81) detectada en el log."	Brute-Force SSH
Anonymous	2026-08-26 09:29:39 (1 day ago)	FortiWeb WAF: 24 attacks detected. Threat Score: 5600. Types: Client Management(12), GEO IP(12). Ori ... show more FortiWeb WAF: 24 attacks detected. Threat Score: 5600. Types: Client Management(12), GEO IP(12). Origin: China. show less	Web App Attack
🇫🇷 Sklurk	2026-08-26 05:29:58 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 masterguru	2026-08-26 01:47:03 (1 day ago)	Blocked scraper - old Chrome UA. Match of "rx (?i)(GoogleOther\|amazonbot\|bingbot\|googlebot\|yandexbot ... show more Blocked scraper - old Chrome UA. Match of "rx (?i)(GoogleOther\|amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot\|OPR/\|Edg/\|EdgA/\|EdgiOS/\|Vivaldi/\|SamsungBrowser/\|YaBrowser/)" against "REQUEST_HEADERS:user-agent" required. (780532-133) show less	Hacking
🇺🇸 SX Communications	2026-08-26 01:13:25 (1 day ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 111.225.214.159: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 111.225.214.159: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇷🇺 genokrad	2026-08-25 20:25:44 (1 day ago)	Website scan TCP 80/443 "/robots.txt" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTM ... show more Website scan TCP 80/443 "/robots.txt" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, " show less	Port Scan Web App Attack
🇺🇸 SX Communications	2026-08-25 19:39:16 (1 day ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.159: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.159: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-08-25 05:28:44 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-08-24 16:46:52 (2 days ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.159: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.159: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 pixelmemory.us	2026-08-24 11:06:03 (3 days ago)	2026-08-24T11:02:46 111.225.214.159 GET /Photos/Friends/2019-01-27%20Sukiyaki/raw/DSC00706.ARW Mozil ... show more 2026-08-24T11:02:46 111.225.214.159 GET /Photos/Friends/2019-01-27%20Sukiyaki/raw/DSC00706.ARW Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 pixelmemory.us	2026-08-24 07:21:35 (3 days ago)	2026-08-24T07:18:13 111.225.214.159 GET /Photos/Family/2018-12-24%20Mom's/raw/DSC00593.ARW Mozilla/5 ... show more 2026-08-24T07:18:13 111.225.214.159 GET /Photos/Family/2018-12-24%20Mom's/raw/DSC00593.ARW Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 ... show less	Bad Web Bot

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 2a09:bac5:47e3:18fa::27d:f9

🇳🇱 104.40.191.133

🇨🇳 27.11.199.211

🇧🇴 190.181.44.194

🇻🇪 186.93.204.237

172.30.141.117

🇨🇳 111.61.176.245

🇮🇳 110.173.190.221

🇺🇸 64.62.156.175

🇺🇸 54.173.151.250

🇲🇲 37.111.53.110

🇺🇸 34.67.80.79

🇨🇱 190.153.158.229

🇭🇰 156.236.66.15

🇫🇮 147.185.133.103

🇷🇴 92.118.39.14

🇳🇱 89.38.99.57

🇸🇪 85.24.223.224

🇳🇱 77.91.71.11

🇺🇸 74.82.47.61