JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.12.210.85

112.12.210.85 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 5%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS56041
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Jiaxing, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.12.210.85

Whois 112.12.210.85

IP Abuse Reports for 112.12.210.85:

This IP address has been reported a total of 6 times from 2 distinct sources. 112.12.210.85 was first reported on May 27th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-09 00:33:29 (5 hours ago)	(mod_security) mod_security (id:210831) triggered by 112.12.210.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 112.12.210.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 20:33:24.370651 2026] [security2:error] [pid 30398:tid 30398] [client 112.12.210.85:8557] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ferrarapanfitness.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ferrarapanfitness.com"] [uri "/"] [unique_id "ak7sVI1Yh1pHtcCToV3rgQAAAAs"], referer: https://www.ferrarapanfitness.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 14:27:28 (15 hours ago)	(mod_security) mod_security (id:210831) triggered by 112.12.210.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 112.12.210.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 10:27:20.427953 2026] [security2:error] [pid 19469:tid 19469] [client 112.12.210.85:8649] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.lakesideshelving.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.lakesideshelving.com"] [uri "/"] [unique_id "ak5eSJLJ7Eghq4WoGDIYUQAAAA0"], referer: http://www.lakesideshelving.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 04:31:19 (6 days ago)	(mod_security) mod_security (id:210831) triggered by 112.12.210.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 112.12.210.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 00:31:12.499103 2026] [security2:error] [pid 8151:tid 8175] [client 112.12.210.85:8576] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ellicottville.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ellicottville.net"] [uri "/"] [unique_id "akc7ELmWEM6KJr6ayzznYQAAARU"], referer: http://www.ellicottville.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-06-03 00:04:08 (1 year ago)	ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/112.12.210.85 2025- ... show more ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/112.12.210.85 2025-06-02 20:24:45 /config.json show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-01 23:43:54 (1 year ago)	ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/112.12.210.85 2025- ... show more ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/112.12.210.85 2025-06-01 08:29:21 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-27 23:42:26 (1 year ago)	ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/112.12.210.85 2025- ... show more ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/112.12.210.85 2025-05-27 02:01:51 /explore/projects?non_archived=true&page=1&sort=latest_activity_desc 2025-05-27 08:33:23 /config.json 2025-05-27 09:29:45 /config.json 2025-05-27 15:32:08 /favicon.ico show less	Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 180.71.9.31

🇮🇳 165.225.120.101

🇧🇬 79.124.49.226

🇺🇸 66.132.172.134

🇺🇸 45.138.100.250

🇺🇸 44.82.5.9

🇺🇸 2602:80d:1008::4b

🇸🇬 194.233.92.96

🇳🇱 185.180.109.243

🇷🇺 185.91.252.52

🇧🇷 179.191.82.115

🇫🇷 176.191.43.176

🇮🇳 152.56.5.121

🇨🇳 122.227.221.18

🇺🇸 91.230.168.215

🇳🇱 45.148.10.157

🇺🇸 44.44.141.181

🇮🇳 43.224.0.251

🇧🇪 35.240.39.154

🇧🇷 191.31.236.159