JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.214.165

111.225.214.165 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 56%: ?

56%

ISP	CHINANET hebei province network
Usage Type	Commercial
ASN	AS58539
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.214.165

Whois 111.225.214.165

IP Abuse Reports for 111.225.214.165:

This IP address has been reported a total of 35 times from 9 distinct sources. 111.225.214.165 was first reported on June 30th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-07-17 20:35:24 (10 hours ago)	Try to access /xmlrpc.php	Web App Attack
🇨🇦 1gz	2026-07-16 03:27:14 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-16 01:24:35 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 111.225.214.165 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 111.225.214.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:24:27.343705 2026] [security2:error] [pid 1515739:tid 1515739] [client 111.225.214.165:47884] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|williamfitzsimmons.com\|F\|2"] [data ".dougfirlounge.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/news/0328-william-adds-chattanooga-date-uscan-tour/www.dougfirlounge.com"] [unique_id "algyy8iOjzWgIVNNFZy-SwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-07-15 20:05:25 (2 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-15 03:32:47 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shqiperi/skandal-12-vjecarin-autik-e-rrahin-dhe-e-lene-3-dite-pa-buke-ne-qendren-e-femijeve-ne-berat/420442/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-14 20:05:13 (3 days ago)	Web App Attack	Web App Attack
🇵🇱 bmino.pl	2026-07-14 17:29:22 (3 days ago)	Autoban IP(2): 111.225.214.165 - Hostname: China Telecom - City: Shijiazhuang - Region: Hebei - Coun ... show more Autoban IP(2): 111.225.214.165 - Hostname: China Telecom - City: Shijiazhuang - Region: Hebei - Country: China - Location: 38.036,114.47 - Organization: Chinanet HE - failed attempts. show less	Bad Web Bot
🇨🇦 1gz	2026-07-14 03:18:02 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/nisma-mbeshtet-demarkacionin/382543/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-07-14 00:03:33 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kryetitull/e-tradhtoi-policia-detaje-tronditese-nga-ekzekutimi-mafioz-alket-muhos-pasi-denoncoi-parcelat-me-hashash/419239/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-13 20:04:19 (4 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-13 09:03:24 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-07-12 03:30:13 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-11 19:50:13 (6 days ago)	Web App Attack	Web App Attack
🇫🇷 masterguru	2026-07-11 15:39:06 (6 days ago)	Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot ... show more Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot)" against "REQUEST_HEADERS:user-agent" required. (780532-133) show less	Hacking
🇨🇦 1gz	2026-07-11 12:41:47 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lifestyle/gjinekologet-thyejne-mentalitetet-kjo-eshte-mosha-ideale-per-tu-bere-nene/365017/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.167.232.147

🇧🇪 207.175.9.229

🇩🇪 206.81.20.229

🇲🇾 202.188.193.19

🇺🇸 147.185.132.108

🇺🇸 104.152.52.112

🇷🇴 80.94.92.179

🇬🇧 35.203.210.138

🇰🇷 16.184.8.135

🇽🇰 213.163.111.111

🇹🇼 211.75.252.252

🇩🇪 185.242.3.90

🇺🇸 147.185.132.84

🇸🇬 114.119.156.232

🇹🇼 101.13.4.128

🇩🇪 69.5.169.135

🇺🇸 64.62.197.212

🇸🇬 47.84.102.253

🇸🇬 18.142.229.160

🇮🇳 2409:40d6:1009:7414:55e:67c7:95fe:f7d4