JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.214.185

111.225.214.185 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 48%: ?

48%

ISP	CHINANET hebei province network
Usage Type	Commercial
ASN	AS58539
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.214.185

Whois 111.225.214.185

IP Abuse Reports for 111.225.214.185:

This IP address has been reported a total of 24 times from 7 distinct sources. 111.225.214.185 was first reported on June 30th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-11 18:05:58 (7 hours ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-11 07:49:29 (17 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-10 18:05:26 (1 day ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-10 07:14:19 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/23-vjet-ldk/95540/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 David Koswari	2026-07-10 06:21:00 (1 day ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇫🇷 masterguru	2026-07-09 17:07:55 (2 days ago)	Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot ... show more Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot)" against "REQUEST_HEADERS:user-agent" required. (780532-133) show less	Hacking
🇨🇦 1gz	2026-07-09 06:56:16 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-07-08 01:32:15 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shqiperi/i-preu-koken-18-vjecares-shaban-norja-kercenon-me-jete-gazetaren/367314/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-07 17:46:52 (4 days ago)	Web App Attack	Web App Attack
Anonymous	2026-07-07 09:31:54 (4 days ago)	FortiWeb WAF: 18 attacks detected. Threat Score: 5200. Types: Client Management(9), GEO IP(9). Origi ... show more FortiWeb WAF: 18 attacks detected. Threat Score: 5200. Types: Client Management(9), GEO IP(9). Origin: China. show less	Web App Attack
🇺🇸 kosada.com	2026-07-06 17:38:19 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-05 20:16:11 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 111.225.214.185 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 111.225.214.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:16:04.164203 2026] [security2:error] [pid 4987:tid 4987] [client 111.225.214.185:53642] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thevenicecafe.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thevenicecafe.com"] [uri "/dump.sql"] [unique_id "akq7hBlc55MZzjzpEkg9LAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-07-05 17:43:18 (6 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-05 04:24:19 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.128 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-07-05 01:07:59 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /bota/shba-te-dergojne-anijen-gjigante-ne-krete-mesazh-i-forte-per-armiqte/542079/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.88.35.85

🇺🇸 172.110.223.228

🇺🇸 45.194.67.27

🇨🇳 39.99.212.219

🇺🇸 13.86.112.154

🇺🇸 185.226.196.18

🇭🇰 154.83.15.221

🇺🇸 147.185.132.94

🇺🇸 147.185.132.52

🇺🇸 144.172.114.102

🇺🇸 138.68.243.18

🇺🇸 135.237.126.209

🇬🇧 134.209.16.229

🇵🇰 111.92.157.90

🇷🇴 92.118.39.202

🇱🇺 46.151.182.30

🇺🇸 45.55.185.224

🇨🇳 39.175.51.58

🇨🇳 39.77.175.173

🇺🇸 34.9.147.191