JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.149.200

111.225.149.200 was found in our database!

This IP was reported 371 times. Confidence of Abuse is 49%: ?

49%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	bytespider-111-225-149-200.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.149.200

Whois 111.225.149.200

IP Abuse Reports for 111.225.149.200:

This IP address has been reported a total of 371 times from 36 distinct sources. 111.225.149.200 was first reported on June 16th 2021, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 Jim Keir	2026-06-22 13:08:15 (9 hours ago)	2026-06-22 13:07:55 111.225.149.200 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-22 08:21:59 (14 hours ago)	2026-06-22 08:21:58 111.225.149.200 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-19 21:48:28 (3 days ago)	2026-06-19 21:48:28 111.225.149.200 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇪🇸 masterguru	2026-06-19 21:41:24 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇵🇱 sefinek.net	2026-06-18 03:56:24 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /genshin-stella-mod/subscription \| UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Hazzard	2026-06-13 05:28:53 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇮🇹 Progetto1	2026-06-08 07:45:08 (2 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇸🇬 anotherwatcher	2026-06-03 16:33:48 (2 weeks ago)	bad bot	Bad Web Bot
🇮🇪 Jim Keir	2026-06-02 19:48:18 (2 weeks ago)	2026-06-02 19:48:15 111.225.149.200 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-26 19:37:47 (3 weeks ago)	2026-05-26 19:37:45 111.225.149.200 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-23 19:10:32 (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 111.225.149.200 (bytespider-111-225-149-200.cra ... show more (mod_security) mod_security (id:210730) triggered by 111.225.149.200 (bytespider-111-225-149-200.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 15:10:25.210121 2026] [security2:error] [pid 12693:tid 12693] [client 111.225.149.200:62632] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ahH7oZja_yOZPIO3pCOvMQAAAAo"], referer: https://www.civilwarzone.com/Antietam.html show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 YF	2026-05-20 07:10:28 (1 month ago)	WordPress content enumeration	Web App Attack
🇮🇪 Jim Keir	2026-05-19 23:32:57 (1 month ago)	2026-05-19 23:32:56 111.225.149.200 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇨🇦 1gz	2026-05-19 13:39:56 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /showbiz/habit-cameron-diaz-me-perdoren-si-korriere-droge/350652/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇸🇬 mypatricks	2026-05-14 01:07:37 (1 month ago)	111.225.149.200 \| Port: 11700 \| DNS: bytespider-111-225-149-200.crawl.bytedance.com 2026-05-14T09:07 ... show more 111.225.149.200 \| Port: 11700 \| DNS: bytespider-111-225-149-200.crawl.bytedance.com 2026-05-14T09:07:36+08:00 Asia/Shanghai \| Un-authorized bots or crawlers \| UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) HTTP/1.1 443 GET \| URL: /doctor-birthday-cake-should-be-as-unique-as-he-she-are/ \| Ref: - \| Country: CN/China/+08:00 IP City: Shijiazhuang 9fb601c5ff8be899-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host

Showing 1 to 15 of 371 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.72

🇺🇸 66.132.186.141

🇸🇪 31.59.160.12

🇩🇪 213.209.159.236

🇧🇷 177.85.247.230

🇺🇸 98.234.121.231

🇺🇸 50.187.155.130

🇺🇸 47.251.64.158

🇳🇱 45.153.34.149

🇵🇰 39.35.209.215

🇺🇸 216.26.226.80

🇵🇰 210.56.12.205

🇩🇪 209.50.183.80

🇺🇸 209.50.161.98

🇺🇸 104.207.35.238

🇩🇪 65.111.31.208

🇺🇸 65.111.10.226

🇲🇾 49.124.155.189

🇦🇺 45.134.20.142

🇺🇸 45.3.50.124