JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.148.50

111.225.148.50 was found in our database!

This IP was reported 435 times. Confidence of Abuse is 44%: ?

44%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	bytespider-111-225-148-50.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.148.50

Whois 111.225.148.50

IP Abuse Reports for 111.225.148.50:

This IP address has been reported a total of 435 times from 42 distinct sources. 111.225.148.50 was first reported on July 15th 2021, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 sefinek.net	2026-06-09 16:03:29 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /gallery \| UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 masterguru	2026-06-06 13:40:25 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇩🇪 mygcode.de	2026-06-05 21:12:27 (1 week ago)	Scanning for Exploits	Bad Web Bot
🇮🇪 Jim Keir	2026-05-31 17:47:42 (2 weeks ago)	2026-05-31 17:47:35 111.225.148.50 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-30 08:03:09 (2 weeks ago)	2026-05-30 08:03:07 111.225.148.50 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-29 19:07:13 (2 weeks ago)	2026-05-29 19:06:49 111.225.148.50 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-27 13:15:50 (2 weeks ago)	2026-05-27 13:15:46 111.225.148.50 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-24 19:13:23 (3 weeks ago)	2026-05-24 19:13:22 111.225.148.50 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-24 14:00:50 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 111.225.148.50 (bytespider-111-225-148-50.crawl ... show more (mod_security) mod_security (id:210730) triggered by 111.225.148.50 (bytespider-111-225-148-50.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 10:00:46.512208 2026] [security2:error] [pid 19386:tid 19386] [client 111.225.148.50:55724] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ahMEjmAN6JK5Xqflb-9TDwAAAAY"], referer: https://civilwarzone.com/AtlantaCampaign.html show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-05-23 14:23:13 (3 weeks ago)	2026-05-23 14:23:13 111.225.148.50 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇨🇦 1gz	2026-05-21 05:24:52 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/aktoret-e-home-alone/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-05-20 01:35:58 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇪 Jim Keir	2026-05-19 23:27:51 (3 weeks ago)	2026-05-19 23:27:08 111.225.148.50 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇪🇸 masterguru	2026-05-18 16:20:27 (4 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇦🇺 MAGIC	2026-05-17 00:05:03 (4 weeks ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 435 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 211.149.134.60

🇧🇪 146.148.28.24

🇺🇸 104.28.213.40

🇳🇱 91.92.40.5

🇺🇸 64.62.156.224

🇻🇳 14.163.168.214

🇺🇿 176.101.56.126

🇨🇳 115.190.159.225

🇨🇳 115.56.238.174

🇨🇳 101.132.67.173

🇷🇺 95.79.108.51

🇷🇴 92.118.39.62

🇺🇸 91.230.168.136

🇵🇱 83.168.95.29

🇨🇳 58.19.104.143

🇺🇸 181.214.151.180

🇨🇳 112.46.207.141

🇮🇳 103.126.205.107

🇩🇪 87.156.176.191

🇳🇱 45.148.10.121