JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.214.215

111.225.214.215 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 59%: ?

59%

ISP	CHINANET hebei province network
Usage Type	Commercial
ASN	AS58539
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.214.215

Whois 111.225.214.215

IP Abuse Reports for 111.225.214.215:

This IP address has been reported a total of 29 times from 10 distinct sources. 111.225.214.215 was first reported on June 30th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-14 21:41:38 (13 hours ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-14 03:15:36 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /maqedoni/zaev-konfirmon-se-nuk-ka-zgjedhje-por-riformatim-te-kabinetit/467075/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-13 21:35:52 (1 day ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-13 06:51:53 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-12 09:27:23 (3 days ago)	FortiWeb WAF: 12 attacks detected. Threat Score: 5200. Types: Client Management(6), GEO IP(6). Origi ... show more FortiWeb WAF: 12 attacks detected. Threat Score: 5200. Types: Client Management(6), GEO IP(6). Origin: China. show less	Web App Attack
🇨🇦 1gz	2026-07-12 04:38:37 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/ja-cfare-thote-baton-haxhiu-per-raportet-thaci-selimi/235845/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-07-12 00:18:30 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /showbiz/rihanna-kleopatra-moderne/75113/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-07-11 06:16:17 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /showbiz/aguilera-ne-forme-te-shkelqyer-pas-lindjes-se-vajzes/171373/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-10 21:30:10 (4 days ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2026-07-10 12:41:33 (4 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-10 07:21:06 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 cwytech	2026-07-10 00:07:16 (5 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-09 05:52:56 (6 days ago)	Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot ... show more Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot)" against "REQUEST_HEADERS:user-agent" required. (780532-133) show less	Hacking
🇨🇦 1gz	2026-07-09 05:52:14 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shqiperi/lihet-ne-burg-29-vjecari-qe-vrau-te-dashuren-ne-kucove-/184727/ UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-09 04:20:46 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 111.225.214.215 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 111.225.214.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 00:20:41.195544 2026] [security2:error] [pid 6796:tid 6796] [client 111.225.214.215:25518] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|chatgptfrance.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chatgptfrance.net"] [uri "/wp-json/wp/v2/users/22"] [unique_id "ak8hmSbAg5ugJPE7_0HwxQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 146.190.209.45

🇺🇸 45.79.191.178

🇭🇰 199.45.155.97

🇬🇧 193.32.209.246

🇧🇬 193.24.211.76

🇱🇹 141.98.10.102

🇮🇩 103.115.31.111

🇱🇹 62.60.130.219

🇰🇷 59.24.133.197

🇺🇸 52.216.219.250

🇮🇹 31.59.89.180

🇷🇴 193.32.162.84

🇻🇪 181.191.225.226

🇸🇬 172.217.97.16

🇧🇷 170.238.105.5

🇫🇷 85.69.240.210

🇬🇧 77.107.140.170

🇳🇱 77.83.39.42

🇷🇴 2.57.121.112

🇮🇳 115.99.117.25