JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.86.225.94

112.86.225.94 was found in our database!

This IP was reported 221 times. Confidence of Abuse is 57%: ?

57%

ISP	China Unicom Jiangsu province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	sogouspider-112-86-225-94.crawl.sogou.com
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.86.225.94

Whois 112.86.225.94

IP Abuse Reports for 112.86.225.94:

This IP address has been reported a total of 221 times from 32 distinct sources. 112.86.225.94 was first reported on June 8th 2024, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-12 04:35:25 (14 hours ago)	Web App Attack	Web App Attack
🇮🇩 soc-yk	2026-06-12 03:30:44 (15 hours ago)	Type: suspicious_network_activity Risk: 70 Events: 1165 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 70 Events: 1165 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇮🇩 soc-yk	2026-06-10 14:06:16 (2 days ago)	Type: suspicious_network_activity Risk: 70 Events: 248 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 70 Events: 248 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
Anonymous	2026-06-10 12:05:07 (2 days ago)	Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=3	Hacking
🇫🇷 Sklurk	2026-06-09 04:41:46 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-08 02:50:40 (4 days ago)	Web App Attack	Web App Attack
🇫🇷 masterguru	2026-06-05 12:31:31 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "sogou" at REQUEST_HEADERS:user-agent. (1100000-195)	Bad Web Bot
🇺🇸 nodepile	2026-06-05 09:20:08 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model/chrysle ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model/chrysler/300.html ua='Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)') show less	Web App Attack Exploited Host
🇨🇦 JuicyJ	2026-06-02 11:29:38 (1 week ago)	Trying to look for places to exploit	Web Spam
🇨🇦 1gz	2026-06-01 00:14:33 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /sport/city-me-dhembje-koke-10-jave-pa-kevin-de-bruyne/230008/ UA: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-05-27 00:06:16 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇸 ipblock.com	2026-05-25 13:50:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Rogue crawler, does not respect robots.txt	Bad Web Bot
🇺🇸 nodepile	2026-05-25 11:42:07 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/3bc01a8d4534daeed3921b53166f8497/1/_/1_90_7.jpg ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇩🇪 HandyTreff.de	2026-05-22 20:03:34 (2 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -68.126 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -68.126 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-20 11:33:22 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 112.86.225.94 (sogouspider-112-86-225-94.crawl. ... show more (mod_security) mod_security (id:210730) triggered by 112.86.225.94 (sogouspider-112-86-225-94.crawl.sogou.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 07:33:19.051553 2026] [security2:error] [pid 1675:tid 1675] [client 112.86.225.94:50912] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bentonflybox.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bentonflybox.com"] [uri "/streamers/WS_FTP.LOG"] [unique_id "ag2b_214xocYr0NLpTYipQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 221 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.214.56.78

🇳🇱 128.90.141.3

🇬🇧 35.203.210.186

🇷🇴 193.46.255.86

🇫🇷 161.97.69.44

🇩🇪 135.125.196.70

🇨🇳 123.145.4.65

🇨🇦 52.139.36.83

🇳🇱 45.148.10.157

🇺🇸 207.90.244.14

🇭🇰 203.198.173.137

🇨🇦 199.167.138.45

🇮🇳 182.95.111.46

🇧🇷 177.60.125.141

🇩🇪 156.67.82.86

🇫🇮 147.185.133.66

🇨🇳 120.216.131.167

🇸🇬 103.187.146.72

🇪🇸 81.9.210.158

🇮🇹 78.209.22.31