JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.214.198

111.225.214.198 was found in our database!

This IP was reported 224 times. Confidence of Abuse is 92%: ?

92%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS58539
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.214.198

Whois 111.225.214.198

IP Abuse Reports for 111.225.214.198:

This IP address has been reported a total of 224 times from 29 distinct sources. 111.225.214.198 was first reported on July 1st 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1gz	2026-09-24 10:07:20 (3 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-json/wp/v2/tags/30400 UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-09-24 08:18:20 (5 hours ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-09-24 06:17:21 (7 hours ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.198: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.198: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 1gz	2026-09-23 19:42:58 (17 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-09-23 17:47:14 (19 hours ago)	[23/Sep/2026:20:47:14 +0300] -- 111.225.214.198 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp ... show more [23/Sep/2026:20:47:14 +0300] -- 111.225.214.198 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/sites/58/2017/05/22-37.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 1gz	2026-09-23 12:50:57 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/reforma-ne-drejtesi/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-09-23 08:17:31 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-09-22 23:20:38 (1 day ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.198: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.198: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-09-22 08:17:11 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 1gz	2026-09-21 23:00:26 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-json/wp/v2/posts/450181 UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-09-21 20:43:25 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-json/wp/v2/posts/423619 UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-09-21 09:34:50 (3 days ago)	FortiWeb WAF: 20 attacks detected. Threat Score: 5400. Types: Client Management(10), GEO IP(10). Ori ... show more FortiWeb WAF: 20 attacks detected. Threat Score: 5400. Types: Client Management(10), GEO IP(10). Origin: China. show less	Web App Attack
🇫🇷 Sklurk	2026-09-21 08:13:05 (3 days ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-09-21 06:19:05 (3 days ago)	HTTP application-layer DoS / botnet traffic from 111.225.214.198: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 111.225.214.198: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇦 URAN Publishing Service	2026-09-20 20:27:01 (3 days ago)	[20/Sep/2026:23:27:01 +0300] -- 111.225.214.198 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp ... show more [20/Sep/2026:23:27:01 +0300] -- 111.225.214.198 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/sites/58/2017/06/8-34.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 224 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 95.70.185.150

🇸🇬 140.245.116.147

🇵🇰 139.135.40.114

🇨🇳 123.180.207.189

🇨🇳 119.41.145.6

🇮🇳 106.222.249.158

🇸🇬 101.47.15.26

🇷🇴 80.94.92.55

🇦🇺 65.254.92.190

🇳🇱 45.148.10.141

🇮🇶 204.157.183.73

🇮🇳 203.145.143.163

🇲🇾 202.165.15.132

🇪🇹 196.188.93.169

🇳🇱 188.166.116.92

🇨🇳 183.162.100.25

🇹🇷 149.13.62.237

🇺🇸 107.170.59.177

🇨🇳 106.117.116.2

🇺🇸 69.63.189.132