JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.149.166

111.225.149.166 was found in our database!

This IP was reported 459 times. Confidence of Abuse is 40%: ?

40%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	bytespider-111-225-149-166.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.149.166

Whois 111.225.149.166

IP Abuse Reports for 111.225.149.166:

This IP address has been reported a total of 459 times from 41 distinct sources. 111.225.149.166 was first reported on January 25th 2021, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-07-08 11:45:41 (23 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇮🇪 Jim Keir	2026-07-07 04:43:05 (2 days ago)	2026-07-07 04:43:04 111.225.149.166 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇪🇸 masterguru	2026-07-06 18:46:05 (2 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇮🇪 Jim Keir	2026-06-30 18:58:21 (1 week ago)	2026-06-30 18:58:20 111.225.149.166 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-30 03:54:53 (1 week ago)	2026-06-30 03:16:23 111.225.149.166 Bad bot, blocking Mozilla/5.0 2026-06-30 03:16:24 111.225.149.1 ... show more 2026-06-30 03:16:23 111.225.149.166 Bad bot, blocking Mozilla/5.0 2026-06-30 03:16:24 111.225.149.166 Bad bot, blocking Mozilla/5.0 show less	Bad Web Bot
🇮🇪 Jim Keir	2026-06-30 03:16:38 (1 week ago)	2026-06-30 03:16:23 111.225.149.166 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-27 02:10:19 (1 week ago)	2026-06-27 02:10:18 111.225.149.166 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇺🇸 xmission.com	2026-06-25 19:05:43 (1 week ago)	111.225.149.166 - - [25/Jun/2026:13:05:42 -0600] "GET /related/ocd/ HTTP/2.0" 200 12422 "-" "Mozilla ... show more 111.225.149.166 - - [25/Jun/2026:13:05:42 -0600] "GET /related/ocd/ HTTP/2.0" 200 12422 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.149.166 - - [25/Jun/2026:13:05:42 -0600] "GET /img/dooce-logo.png HTTP/2.0" 206 500 "https://staging.dooce.com/related/ocd/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.149.166 - - [25/Jun/2026:13:05:42 -0600] "GET /img/icon-instagram.svg HTTP/2.0" 206 500 "https://staging.dooce.com/related/ocd/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.149.166 - - [25/Jun/2026:13:05:42 -0600] "GET /img/icon-facebook.svg HTTP/2.0" 206 424 "https://staging.dooce.com/related/ocd/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/ ... show less	Bad Web Bot
🇮🇪 Jim Keir	2026-06-24 04:34:24 (2 weeks ago)	2026-06-24 04:34:23 111.225.149.166 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-22 15:56:19 (2 weeks ago)	2026-06-22 15:56:17 111.225.149.166 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇩🇪 MarkGGN	2026-06-19 21:16:58 (2 weeks ago)	Web attack. 111.225.149.166 - - [19/Jun/2026:23:16:56 +0200] "GET /tag/blog/ HTTP/2.0" 200 44788 "-" ... show more Web attack. 111.225.149.166 - - [19/Jun/2026:23:16:56 +0200] "GET /tag/blog/ HTTP/2.0" 200 44788 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 111.225.149.166 - - [19/Jun/2026:23:16:57 +0200] "GET /tag/blog/?essb_counter_cache=rebuild HTTP/2.0" 200 72 "https://www.*/tag/blog/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" show less	Web App Attack
🇮🇪 Jim Keir	2026-06-10 19:33:49 (4 weeks ago)	2026-06-10 19:33:48 111.225.149.166 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇩 sockominfo	2026-06-08 14:00:53 (1 month ago)	Webshell discovery success (Response: 200). Threat Score: 8.7/10 (CRITICAL). Confidence: 70%. CVSS v ... show more Webshell discovery success (Response: 200). Threat Score: 8.7/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-06-08 12:00:35 (1 month ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇮🇹 Progetto1	2026-06-08 07:45:03 (1 month ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 459 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.132.64.89

🇨🇴 190.66.226.190

🇬🇧 178.62.31.155

🇹🇷 94.154.43.230

🇸🇬 47.84.132.63

🇬🇧 5.226.140.113

🇺🇸 162.216.149.149

🇺🇸 149.33.6.23

🇨🇳 120.229.35.234

🇪🇸 94.76.165.35

🇳🇱 91.92.40.151

🇩🇪 69.5.169.151

🇳🇱 35.204.174.69

🇳🇱 2.58.56.23

🇨🇳 223.85.54.40

🇺🇸 173.255.214.52

🇨🇳 118.248.41.197

🇫🇷 103.110.162.14

🇧🇩 103.51.53.74

🇺🇸 66.228.47.77