AbuseIPDB » 112.86.225.21
112.86.225.21
This IP was reported 212 times. Confidence of
Abuse
is 48% : ?
ISP
China Unicom Jiangsu province network
Usage Type
Fixed Line ISP
ASN
AS4837
Hostname(s)
sogouspider-112-86-225-21.crawl.sogou.com
Domain Name
chinaunicom.cn
Country
🇨🇳
China
City
Nanjing, Jiangsu
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 112.86.225.21 :
This IP address has been reported a total of
212
times from
31 distinct
sources.
112.86.225.21 was first reported on
June 15th 2024 , and the most recent report was
6 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇦
1gz
2026-06-21 05:49:21
(6 hours ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/vuciq-serbia-mbeshtet-politiken-nje-kine/173638/
UA: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2026-06-21 02:32:30
(9 hours ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/superliga/
UA: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-06-21 01:39:01
(10 hours ago)
Session Crossing
Hacking
🇨🇦
1gz
2026-06-20 05:38:25
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /sport/fshf-i-pergjigjet-bashkise-se-tiranes-autogol-mediatik-kercenim-i-hapur-per-futbollin/233264/
UA: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Sklurk
2026-06-19 16:26:37
(1 day ago)
Web App Attack
Web App Attack
🇬🇷
setupgr
2026-06-19 15:28:42
(1 day ago)
(mod_security) mod_security (id:100011) triggered by 112.86.225.21 (CN/China/Jiangsu/Suzhou/-/[AS483 ...
show more
(mod_security) mod_security (id:100011) triggered by 112.86.225.21 (CN/China/Jiangsu/Suzhou/-/[AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 18:28:38.008359 2026] [security2:error] [pid 202885:tid 202936] [client 112.86.225.21:54228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/"] [unique_id "ajVgJkrlp52aw72Tw8cu6wAAARg"]
show less
Port Scan
2026-06-19 12:45:29
(1 day ago)
Session Crossing
Hacking
2026-06-18 10:31:43
(3 days ago)
Session Crossing
Hacking
🇫🇷
Sklurk
2026-06-18 09:48:55
(3 days ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-17 06:03:37
(4 days ago)
Web App Attack
Web App Attack
2026-06-16 22:54:57
(4 days ago)
Session Crossing
Hacking
🇮🇩
soc-yk
2026-06-16 04:57:15
(5 days ago)
Type: suspicious_network_activity
Risk: 69
Events: 2464
Evidence:
- Persistent suspicious network a ...
show more
Type: suspicious_network_activity
Risk: 69
Events: 2464
Evidence:
- Persistent suspicious network activity detected
- Repeated hostile operational behavior observed
- Multi-event operational persistence identified
show less
Port Scan
Hacking
2026-06-13 08:02:55
(1 week ago)
Session Crossing
Hacking
🇫🇷
Sklurk
2026-06-12 06:41:44
(1 week ago)
Web App Attack
Web App Attack
🇮🇩
soc-yk
2026-06-12 03:18:22
(1 week ago)
Type: suspicious_network_activity
Risk: 67
Events: 1071
Evidence:
- Persistent suspicious network a ...
show more
Type: suspicious_network_activity
Risk: 67
Events: 1071
Evidence:
- Persistent suspicious network activity detected
- Repeated hostile operational behavior observed
- Multi-event operational persistence identified
show less
Port Scan
Hacking
Showing 1 to
15
of 212 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: