JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.148.191

111.225.148.191 was found in our database!

This IP was reported 338 times. Confidence of Abuse is 36%: ?

36%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	bytespider-111-225-148-191.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.148.191

Whois 111.225.148.191

IP Abuse Reports for 111.225.148.191:

This IP address has been reported a total of 338 times from 40 distinct sources. 111.225.148.191 was first reported on April 6th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 Jim Keir	2026-06-22 09:24:19 (3 days ago)	2026-06-22 09:24:14 111.225.148.191 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-22 07:33:58 (3 days ago)	2026-06-22 07:33:58 111.225.148.191 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-20 21:04:39 (5 days ago)	2026-06-20 21:04:38 111.225.148.191 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-19 14:41:54 (6 days ago)	2026-06-19 14:41:53 111.225.148.191 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇨🇦 1gz	2026-06-12 02:16:57 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-07 14:53:09 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 111.225.148.191 (bytespider-111-225-148-191.cra ... show more (mod_security) mod_security (id:210730) triggered by 111.225.148.191 (bytespider-111-225-148-191.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 10:53:03.944545 2026] [security2:error] [pid 3079:tid 3079] [client 111.225.148.191:26290] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aiWFzzfHfBo770XQd0CH_gAAAAk"], referer: https://civilwarzone.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-06-07 08:44:02 (2 weeks ago)	2026-06-07 08:44:02 111.225.148.191 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇬🇧 NotCool	2026-06-05 11:00:46 (2 weeks ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 111.225.148.191 (CN/China/bytespider-111-225-148-191. ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 111.225.148.191 (CN/China/bytespider-111-225-148-191.crawl.bytedance.com): 50 in the last 3600 secs show less	Bad Web Bot
🇩🇪 mygcode.de	2026-06-04 01:24:10 (3 weeks ago)	Scanning for Exploits	Bad Web Bot
🇮🇪 Jim Keir	2026-05-29 19:07:16 (3 weeks ago)	2026-05-29 19:06:49 111.225.148.191 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇪🇸 masterguru	2026-05-28 07:38:44 (4 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇮🇪 Jim Keir	2026-05-24 12:47:18 (1 month ago)	2026-05-24 12:47:17 111.225.148.191 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-21 15:54:36 (1 month ago)	2026-05-21 15:54:16 111.225.148.191 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-20 23:57:55 (1 month ago)	2026-05-20 23:57:54 111.225.148.191 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-14 22:13:38 (1 month ago)	ThreatBook Intelligence: Whitelist,Dynamic IP more details on https://threatbook.io/ip/111.225.148.1 ... show more ThreatBook Intelligence: Whitelist,Dynamic IP more details on https://threatbook.io/ip/111.225.148.191 2026-05-14 01:37:44 /robots.txt show less	Web App Attack

Showing 1 to 15 of 338 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 186.31.95.163

🇰🇷 101.33.81.73

🇨🇳 61.164.252.244

🇺🇿 5.182.26.69

🇺🇸 205.210.31.24

🇹🇭 203.154.158.195

🇬🇧 185.216.145.165

🇧🇷 168.194.106.76

🇬🇧 167.99.82.253

🇬🇧 161.35.47.134

🇬🇧 138.68.155.200

🇰🇷 119.199.188.227

🇨🇳 115.190.54.120

🇺🇸 68.105.113.100

🇺🇸 45.79.109.130

🇺🇸 20.65.194.168

🇨🇳 14.103.114.20

🇫🇷 2400:cb00:19:1000:1f52:3ee3:dffe:bb4d

🇺🇿 213.230.87.176

🇳🇱 209.38.96.235