JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.149.160

111.225.149.160 was found in our database!

This IP was reported 439 times. Confidence of Abuse is 46%: ?

46%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	bytespider-111-225-149-160.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.149.160

Whois 111.225.149.160

IP Abuse Reports for 111.225.149.160:

This IP address has been reported a total of 439 times from 46 distinct sources. 111.225.149.160 was first reported on August 11th 2021, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 mypatricks	2026-06-12 05:25:28 (8 hours ago)	111.225.149.160 \| Port: 13095 \| DNS: bytespider-111-225-149-160.crawl.bytedance.com 2026-06-12T13:25 ... show more 111.225.149.160 \| Port: 13095 \| DNS: bytespider-111-225-149-160.crawl.bytedance.com 2026-06-12T13:25:27+08:00 Asia/Shanghai \| Un-authorized bots or crawlers \| UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) HTTP/1.1 443 GET \| URL: /fondant-3d-love-castle-cake/ \| Ref: - \| Country: CN/China/+08:00 IP City: Shijiazhuang a0a66f575c6e1301-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇪🇸 masterguru	2026-06-10 14:31:23 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇳🇱 Mangelot Hosting	2026-06-08 14:38:57 (3 days ago)	(modsecurity) srv101 ModSecurity 111.225.149.160 (CN/China/bytespider-111-225-149-160.crawl.bytedanc ... show more (modsecurity) srv101 ModSecurity 111.225.149.160 (CN/China/bytespider-111-225-149-160.crawl.bytedance.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇮🇪 Jim Keir	2026-06-07 15:06:37 (4 days ago)	2026-06-07 15:06:36 111.225.149.160 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-01 20:27:19 (1 week ago)	2026-06-01 20:27:11 111.225.149.160 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇺🇸 xmission.com	2026-05-25 20:32:58 (2 weeks ago)	111.225.149.160 - - [25/May/2026:14:32:57 -0600] "GET /category/photos/daily-photo/page/1361/?page=7 ... show more 111.225.149.160 - - [25/May/2026:14:32:57 -0600] "GET /category/photos/daily-photo/page/1361/?page=76 HTTP/2.0" 200 9448 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.149.160 - - [25/May/2026:14:32:57 -0600] "GET /wp-content/uploads/2023/06/mrs-small.png HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-photo/page/1361/?page=76" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.149.160 - - [25/May/2026:14:32:57 -0600] "GET /img/icon-pinterest.svg HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-photo/page/1361/?page=76" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.149.160 - - [25/May/2026:14:32:58 -0600] "GET /img/icon-pinterest.s ... show less	Bad Web Bot
🇮🇪 Jim Keir	2026-05-23 11:57:34 (2 weeks ago)	2026-05-23 11:57:33 111.225.149.160 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇸🇬 mypatricks	2026-05-20 20:52:06 (3 weeks ago)	111.225.149.160 \| Port: 14109 \| DNS: bytespider-111-225-149-160.crawl.bytedance.com 2026-05-21T04:52 ... show more 111.225.149.160 \| Port: 14109 \| DNS: bytespider-111-225-149-160.crawl.bytedance.com 2026-05-21T04:52:05+08:00 Asia/Shanghai \| Un-authorized bots or crawlers \| UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) HTTP/1.1 443 GET \| URL: /fondant-3d-superhero-stacked-cake/ \| Ref: - \| Country: CN/China/+08:00 IP City: Shijiazhuang 9fee3919a9c124f9-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇪🇸 masterguru	2026-05-16 18:44:41 (3 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot
Anonymous	2026-05-13 23:19:42 (4 weeks ago)	Banned by Fail2Ban on server	Bad Web Bot
🇵🇹 HackingAttackReporter	2026-05-11 02:31:55 (1 month ago)	[Activity Alert] Abusive automated scraping ignoring Robots.txt. IP automatically blocked and banned ... show more [Activity Alert] Abusive automated scraping ignoring Robots.txt. IP automatically blocked and banned. [User-Agent]: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/). [OS]: Unknown. [IP Address]: 111.225.149.160. [RPS] High overshoot requests per second (RPS). [Date]: 2026-05-10 22:09:23 UTC. show less	Bad Web Bot Hacking Web App Attack
🇮🇪 Jim Keir	2026-05-05 07:45:08 (1 month ago)	2026-05-05 07:45:08 111.225.149.160 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-05 03:08:04 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 111.225.149.160 (bytespider-111-225-149-160.cra ... show more (mod_security) mod_security (id:210730) triggered by 111.225.149.160 (bytespider-111-225-149-160.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 23:07:55.771761 2026] [security2:error] [pid 16663:tid 16663] [client 111.225.149.160:46210] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aflfC30MNJjCHjPCC6A60AAAAAs"], referer: http://www.civilwarzone.com/AlbertJohnston.html show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 cloudmax	2026-04-29 00:22:47 (1 month ago)	Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, o ... show more Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, or hacking attempt show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-04-28 22:37:27 (1 month ago)	ThreatBook Intelligence: Whitelist,Dynamic IP more details on https://threatbook.io/ip/111.225.149.1 ... show more ThreatBook Intelligence: Whitelist,Dynamic IP more details on https://threatbook.io/ip/111.225.149.160 2026-04-28 01:25:14 /cc.gif show less	Web App Attack

Showing 1 to 15 of 439 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.247.137.65

🇧🇬 78.128.113.46

🇺🇸 209.90.232.251

🇷🇺 194.176.114.36

🇦🇷 190.220.172.154

🇲🇽 187.230.115.212

🇨🇳 175.8.114.196

🇺🇸 104.243.35.45

🇷🇺 94.25.40.30

🇰🇭 58.97.228.144

🇸🇬 45.82.78.108

🇧🇷 20.195.189.159

🇮🇩 202.155.157.129

🇧🇴 200.105.172.184

🇺🇸 198.98.62.211

🇬🇧 195.206.182.205

🇮🇶 185.166.25.150

🇰🇷 175.212.92.43

🇷🇴 143.20.185.220

🇷🇺 141.105.50.185