JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.214.208

111.225.214.208 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 46%: ?

46%

ISP	CHINANET hebei province network
Usage Type	Commercial
ASN	AS58539
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.214.208

Whois 111.225.214.208

IP Abuse Reports for 111.225.214.208:

This IP address has been reported a total of 29 times from 7 distinct sources. 111.225.214.208 was first reported on July 1st 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-07-13 06:00:55 (22 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-13 04:55:13 (23 hours ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-13 03:13:46 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shqiperi/emocionuese-altea-e-vogel-qe-u-dogj-thuajse-e-tera-se-shpejti-do-rikthehet-te-familja-foto-lajm/333016/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-12 09:27:33 (1 day ago)	FortiWeb WAF: 16 attacks detected. Threat Score: 5000. Types: Client Management(8), GEO IP(8). Origi ... show more FortiWeb WAF: 16 attacks detected. Threat Score: 5000. Types: Client Management(8), GEO IP(8). Origin: China. show less	Web App Attack
🇨🇦 1gz	2026-07-12 05:51:59 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/bildt-kosova-ti-veshtiresoje-anetaresimin-serbise-ne-be/375068/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-12 04:47:34 (1 day ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-11 08:17:44 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-11 07:28:18 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 111.225.214.208 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 111.225.214.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 03:28:11.306749 2026] [security2:error] [pid 9608:tid 9608] [client 111.225.214.208:61973] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.scoutinsignia.com"] [uri "/bkground/WS_FTP.LOG"] [unique_id "alHwi3LW7P8XORNgTtwDOwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-07-11 04:46:08 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 13:07:36 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 111.225.214.208 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 111.225.214.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 09:07:30.578921 2026] [security2:error] [pid 17012:tid 17012] [client 111.225.214.208:50789] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|chatgptfrance.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chatgptfrance.net"] [uri "/wp-json/wp/v2/users/10110"] [unique_id "alDukvQSB4A0lXSdWT7P8gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-07-10 07:47:21 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/23-vjet-ldk/95540/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-10 04:20:18 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 masterguru	2026-07-10 01:14:03 (4 days ago)	Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot ... show more Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot)" against "REQUEST_HEADERS:user-agent" required. (780532-133) show less	Hacking
🇨🇦 1gz	2026-07-09 09:34:59 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-08 09:32:08 (5 days ago)	FortiWeb WAF: 6 attacks detected. Threat Score: 5000. Types: Client Management(3), GEO IP(3). Origin ... show more FortiWeb WAF: 6 attacks detected. Threat Score: 5000. Types: Client Management(3), GEO IP(3). Origin: China. show less	Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.105

🇺🇸 147.185.132.103

🇳🇱 64.119.74.62

🇨🇳 61.134.172.55

🇧🇷 20.195.184.45

🇧🇷 205.210.31.240

🇹🇭 202.29.225.158

🇱🇹 141.98.11.11

🇺🇸 139.144.239.72

🇮🇳 124.253.86.235

🇬🇧 118.193.65.209

🇨🇳 113.206.198.160

🇵🇰 103.74.21.10

🇳🇱 89.21.67.174

🇳🇱 85.11.167.11

🇺🇸 64.62.156.114

🇰🇷 59.8.114.245

🇺🇸 20.168.121.142

🇹🇭 203.170.192.251

🇨🇱 190.5.34.254