JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.148.194

111.225.148.194 was found in our database!

This IP was reported 355 times. Confidence of Abuse is 38%: ?

38%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	bytespider-111-225-148-194.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.148.194

Whois 111.225.148.194

IP Abuse Reports for 111.225.148.194:

This IP address has been reported a total of 355 times from 41 distinct sources. 111.225.148.194 was first reported on May 16th 2021, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 conseilgouz	2026-07-01 15:01:47 (23 hours ago)	sae-88 : Bloc AI bots=>/robots.txt(Bytespider)	Hacking
🇬🇷 setupgr	2026-06-24 03:56:39 (1 week ago)	(mod_security) mod_security (id:100011) triggered by 111.225.148.194 (CN/China/Hebei/Shijiazhuang/-/ ... show more (mod_security) mod_security (id:100011) triggered by 111.225.148.194 (CN/China/Hebei/Shijiazhuang/-/[AS4134 CHINANET-BACKBONE No.31,Jin-rong Street]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 24 06:56:38.490496 2026] [security2:error] [pid 2393:tid 2546] [client 111.225.148.194:40026] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/robots.txt"] [unique_id "ajtVdk_vjpKlxdAVM516EwAAAMw"] show less	Port Scan
🇮🇪 Jim Keir	2026-06-21 22:01:17 (1 week ago)	2026-06-21 22:00:42 111.225.148.194 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-14 18:51:38 (2 weeks ago)	2026-06-14 18:51:36 111.225.148.194 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-13 23:28:04 (2 weeks ago)	2026-06-13 23:28:02 111.225.148.194 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-12 18:33:33 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 111.225.148.194 (bytespider-111-225-148-194.cra ... show more (mod_security) mod_security (id:210730) triggered by 111.225.148.194 (bytespider-111-225-148-194.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:33:26.248746 2026] [security2:error] [pid 26367:tid 26367] [client 111.225.148.194:27598] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aixQ9nyRCIsH47hNNVTneAAAAAQ"], referer: https://civilwarzone.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-06-10 21:10:12 (3 weeks ago)	2026-06-10 21:10:11 111.225.148.194 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇹 Progetto1	2026-06-09 15:25:02 (3 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇪 Jim Keir	2026-06-05 03:38:49 (3 weeks ago)	2026-06-05 03:10:20 111.225.148.194 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇪🇸 masterguru	2026-05-31 11:33:47 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇮🇪 Jim Keir	2026-05-30 19:02:13 (1 month ago)	2026-05-30 19:02:13 111.225.148.194 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇩🇪 Hazzard	2026-05-29 01:11:39 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇮🇪 Jim Keir	2026-05-24 19:43:01 (1 month ago)	2026-05-24 19:43:00 111.225.148.194 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇪🇸 masterguru	2026-05-24 19:07:20 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇩🇪 Melle	2026-05-13 22:35:14 (1 month ago)	Unauthorized connection attempt detected from IP address 111.225.148.194	Bad Web Bot

Showing 1 to 15 of 355 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.151.16.194

🇺🇸 5.78.225.26

🇨🇳 220.161.52.149

🇰🇷 220.80.245.16

🇻🇪 206.1.90.230

🇻🇪 190.74.237.167

🇩🇪 167.94.145.19

🇨🇳 117.177.102.79

🇱🇺 64.89.160.111

🇭🇰 45.142.154.37

🇺🇸 44.220.188.176

🇧🇪 34.156.109.57

🇨🇳 27.223.98.117

🇺🇸 20.121.46.26

🇦🇪 2.50.147.151

🇨🇳 218.29.196.162

🇭🇰 203.198.129.123

🇧🇷 201.76.120.30

🇮🇳 182.95.182.166

🇨🇦 165.22.225.218