JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.148.182

111.225.148.182 was found in our database!

This IP was reported 377 times. Confidence of Abuse is 52%: ?

52%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	bytespider-111-225-148-182.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.148.182

Whois 111.225.148.182

IP Abuse Reports for 111.225.148.182:

This IP address has been reported a total of 377 times from 44 distinct sources. 111.225.148.182 was first reported on October 31st 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-12 18:35:16 (2 days ago)	111.225.148.182 - - [12/Jun/2026:12:35:15 -0600] "GET /related/internet/ HTTP/2.0" 200 16893 "-" "Mo ... show more 111.225.148.182 - - [12/Jun/2026:12:35:15 -0600] "GET /related/internet/ HTTP/2.0" 200 16893 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.148.182 - - [12/Jun/2026:12:35:15 -0600] "GET /wp-content/uploads/2020/01/2020-700x560.png HTTP/2.0" 206 500 "https://dooce.com/related/internet/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.148.182 - - [12/Jun/2026:12:35:15 -0600] "GET /img/icon-instagram.svg HTTP/2.0" 206 500 "https://dooce.com/related/internet/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.148.182 - - [12/Jun/2026:12:35:16 -0600] "GET /img/icon-instagram.svg HTTP/2.0" 304 0 "https://dooce.com/related/internet/" "Mozilla/5.0 (Linux; Andro ... show less	Bad Web Bot
🇵🇱 sefinek.net	2026-06-09 21:56:52 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /genshin-stella-mod/docs \| UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇪 Jim Keir	2026-06-07 08:46:09 (1 week ago)	2026-06-07 08:46:08 111.225.148.182 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇩🇪 dbmwebdesign	2026-06-05 10:55:11 (1 week ago)	Bot detected and blocked by Fail2Ban in bytespider jail	Bad Web Bot
🇮🇹 Progetto1	2026-06-05 08:50:02 (1 week ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇸🇬 anotherwatcher	2026-06-03 21:39:06 (1 week ago)	bad bot	Bad Web Bot
🇩🇪 dbmwebdesign	2026-06-02 12:45:31 (1 week ago)	Bot detected and blocked by Fail2Ban in bytespider jail	Bad Web Bot
🇮🇪 Jim Keir	2026-06-01 13:26:03 (1 week ago)	2026-06-01 13:26:02 111.225.148.182 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-28 18:47:06 (2 weeks ago)	2026-05-28 18:46:38 111.225.148.182 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-28 18:19:30 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 111.225.148.182 (bytespider-111-225-148-182.cra ... show more (mod_security) mod_security (id:210730) triggered by 111.225.148.182 (bytespider-111-225-148-182.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 14:19:22.330699 2026] [security2:error] [pid 27087:tid 27087] [client 111.225.148.182:32430] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ahiHKhyyy1UvW-jq_2-ihgAAAAM"], referer: https://civilwarzone.com/AtlantaCampaign.html show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-05-25 20:13:05 (2 weeks ago)	2026-05-25 20:12:40 111.225.148.182 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-19 18:20:00 (3 weeks ago)	2026-05-19 18:19:51 111.225.148.182 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-18 17:45:24 (3 weeks ago)	2026-05-18 17:45:21 111.225.148.182 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇩🇪 YF	2026-05-16 16:11:10 (4 weeks ago)	WordPress content enumeration	Web App Attack
Anonymous	2026-05-13 23:19:28 (1 month ago)	Banned by Fail2Ban on server	Bad Web Bot

Showing 1 to 15 of 377 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.43.69

🇧🇷 129.121.39.181

🇮🇳 103.77.3.249

🇪🇸 79.116.228.3

🇺🇸 66.132.172.229

🇳🇱 46.31.52.8

🇺🇸 34.86.9.41

🇺🇸 2620:18c:0:192::e0:156

🇨🇳 223.151.248.33

🇺🇸 216.24.219.197

🇺🇸 207.90.244.14

🇰🇿 95.59.142.69

🇬🇧 86.28.132.58

🇫🇷 83.171.226.124

🇺🇸 65.49.1.80

🇧🇷 45.171.87.196

🇰🇷 43.155.134.4

🇮🇹 217.26.178.82

🇧🇷 200.102.96.120

🇬🇧 193.176.29.23