JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.149.156

111.225.149.156 was found in our database!

This IP was reported 419 times. Confidence of Abuse is 44%: ?

44%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	bytespider-111-225-149-156.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.149.156

Whois 111.225.149.156

IP Abuse Reports for 111.225.149.156:

This IP address has been reported a total of 419 times from 41 distinct sources. 111.225.149.156 was first reported on August 6th 2021, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 Jim Keir	2026-06-05 06:50:51 (6 days ago)	2026-06-05 06:50:50 111.225.149.156 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-31 23:10:29 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 111.225.149.156 (bytespider-111-225-149-156.cra ... show more (mod_security) mod_security (id:210730) triggered by 111.225.149.156 (bytespider-111-225-149-156.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 19:10:23.116549 2026] [security2:error] [pid 30839:tid 30839] [client 111.225.149.156:62838] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ahy_3xyTRKCk1-1tsWAsEAAAAAk"], referer: https://www.civilwarzone.com/June.html show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 mypatricks	2026-05-31 20:25:20 (1 week ago)	111.225.149.156 \| Port: 12928 \| DNS: bytespider-111-225-149-156.crawl.bytedance.com 2026-06-01T04:25 ... show more 111.225.149.156 \| Port: 12928 \| DNS: bytespider-111-225-149-156.crawl.bytedance.com 2026-06-01T04:25:19+08:00 Asia/Shanghai \| Un-authorized bots or crawlers \| UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) HTTP/1.1 443 GET \| URL: /find-best-baby-shark-themed-party-to-plan-for-your-kids-coming-birthday-bash/ \| Ref: - \| Country: CN/China/+08:00 IP City: Shijiazhuang a048b5082a78f5ae-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇮🇪 Jim Keir	2026-05-30 19:05:56 (1 week ago)	2026-05-30 19:05:55 111.225.149.156 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-29 13:11:05 (1 week ago)	2026-05-29 13:10:24 111.225.149.156 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇪🇸 masterguru	2026-05-28 11:25:23 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-05-24 18:41:23 (2 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇨🇦 1gz	2026-05-17 04:31:33 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/moti/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Hazzard	2026-05-16 09:22:37 (3 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇮🇪 Jim Keir	2026-05-12 07:21:55 (4 weeks ago)	2026-05-12 07:21:54 111.225.149.156 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-07 19:14:15 (1 month ago)	2026-05-07 19:14:15 111.225.149.156 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-07 14:59:38 (1 month ago)	2026-05-07 14:59:34 111.225.149.156 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-07 05:52:59 (1 month ago)	2026-05-07 05:52:46 111.225.149.156 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇪🇸 masterguru	2026-05-06 10:15:33 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇸🇬 anotherwatcher	2026-05-06 07:30:23 (1 month ago)	bad bot	Bad Web Bot

Showing 1 to 15 of 419 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 206.237.119.226

🇮🇳 223.233.85.110

🇺🇸 212.56.34.137

🇧🇷 205.210.31.248

🇳🇱 203.159.90.204

🇩🇪 172.71.164.217

🇩🇪 172.71.164.161

🇹🇭 118.193.57.185

🇺🇸 45.79.207.252

🇺🇸 43.135.135.17

🇺🇸 34.235.132.234

🇧🇪 198.235.24.150

🇮🇳 180.214.131.41

🇨🇳 180.153.236.170

🇮🇳 168.144.80.64

🇬🇧 161.35.35.161

🇭🇰 118.193.39.149

🇫🇷 109.176.197.82

🇮🇳 106.51.80.78

🇿🇦 105.233.67.36