🇺🇸
TPI-Abuse
2026-06-15 10:53:38
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 110.249.201.18 (bytespider-110-249-201-18.crawl ...
show more
(mod_security) mod_security (id:210730) triggered by 110.249.201.18 (bytespider-110-249-201-18.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:53:34.765147 2026] [security2:error] [pid 31583:tid 31583] [client 110.249.201.18:63932] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||civilwarzone.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ai_Zrup8KMGPNL9YsnjqMgAAAAA"], referer: https://civilwarzone.com/EmancipationProclamation.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Reinhard
2026-06-14 19:00:22
(17 hours ago)
Unknown activity, but too many attacks with too many users.
Hacking
🇮🇪
Jim Keir
2026-06-14 18:53:35
(17 hours ago)
2026-06-14 18:53:32 110.249.201.18 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇺🇸
xmission.com
2026-06-12 18:36:07
(2 days ago)
110.249.201.18 - - [12/Jun/2026:12:36:04 -0600] "GET /2012/07/23/you-say-potato/ HTTP/2.0" 200 10698 ...
show more
110.249.201.18 - - [12/Jun/2026:12:36:04 -0600] "GET /2012/07/23/you-say-potato/ HTTP/2.0" 200 10698 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)"
110.249.201.18 - - [12/Jun/2026:12:36:05 -0600] "GET /wp-content/plugins/simple-lightbox/client/css/app.css?ver=2.9.5 HTTP/2.0" 200 231 "https://dooce.com/2012/07/23/you-say-potato/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)"
110.249.201.18 - - [12/Jun/2026:12:36:05 -0600] "GET /wp-content/uploads/2012/12/marlodimple.jpg HTTP/2.0" 206 500 "https://dooce.com/2012/07/23/you-say-potato/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)"
110.249.201.18 - - [12/Jun/2026:12:36:06 -0600] "GET /img/icon-instagram.svg HTTP/2.0" 206 500
...
show less
Bad Web Bot
🇨🇦
1gz
2026-06-12 08:45:28
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /english/flyesim-me-launches-partner-program-to-make-global-esim-connectivity-more-affordable/878245/amp/
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇪🇸
masterguru
2026-06-10 15:35:33
(4 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
🇩🇪
conseilgouz
2026-06-07 08:42:19
(1 week ago)
lae-88 : Bloc AI bots=>/(Bytespider)
Hacking
🇮🇪
Jim Keir
2026-06-06 16:17:04
(1 week ago)
2026-06-06 16:17:03 110.249.201.18 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇪🇸
masterguru
2026-06-05 11:48:38
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
🇮🇪
Jim Keir
2026-06-04 12:02:25
(1 week ago)
2026-06-04 12:02:21 110.249.201.18 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇮🇪
Jim Keir
2026-06-04 11:45:31
(1 week ago)
2026-06-04 11:45:29 110.249.201.18 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇫🇷
bigorre.org
2026-06-04 04:15:49
(1 week ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇦🇺
clapper
2026-05-30 13:47:48
(2 weeks ago)
(mod_security) mod_security (id:980001) triggered by 110.249.201.18 (CN/China/bytespider-110-249-201 ...
show more
(mod_security) mod_security (id:980001) triggered by 110.249.201.18 (CN/China/bytespider-110-249-201-18.crawl.bytedance.com): 5 in the last 3600 secs; ID: Clar
show less
Brute-Force
Bad Web Bot
🇮🇪
Jim Keir
2026-05-30 00:42:28
(2 weeks ago)
2026-05-30 00:42:27 110.249.201.18 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇯🇵
VXG-NET
2026-05-29 09:50:43
(2 weeks ago)
port=80, indicator_type=code-execution
Hacking