JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.149.210

111.225.149.210 was found in our database!

This IP was reported 200 times. Confidence of Abuse is 57%: ?

57%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	bytespider-111-225-149-210.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.149.210

Whois 111.225.149.210

IP Abuse Reports for 111.225.149.210:

This IP address has been reported a total of 200 times from 33 distinct sources. 111.225.149.210 was first reported on August 26th 2021, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-06-06 18:32:37 (1 minute ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇮🇪 Jim Keir	2026-06-05 00:26:50 (1 day ago)	2026-06-05 00:26:49 111.225.149.210 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-03 17:59:36 (3 days ago)	2026-06-03 17:59:35 111.225.149.210 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇺🇸 LotPhantom	2026-05-27 01:07:30 (1 week ago)	2026/05/27 01:07:29 [error] 3683620#3683620: 84993 connect() failed (111: Connection refused) while ... show more 2026/05/27 01:07:29 [error] 3683620#3683620: 84993 connect() failed (111: Connection refused) while connecting to upstream, client: 111.225.149.210, server: wynnesmiles.com, request: "GET / HTTP/2.0", upstream: "http://127.0.0.1:4001/", host: "wynnesmiles.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 12:21:11 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 111.225.149.210 (bytespider-111-225-149-210.cra ... show more (mod_security) mod_security (id:210730) triggered by 111.225.149.210 (bytespider-111-225-149-210.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 08:21:06.480514 2026] [security2:error] [pid 31674:tid 31674] [client 111.225.149.210:30544] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ahLtMnyIIgLd_jxCPUd37QAAAAE"], referer: https://civilwarzone.com/AtlantaCampaign.html show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Phenix Info	2026-05-24 02:09:57 (1 week ago)	SmallGuard.fr/Prestashop Bad Bots	Web App Attack
🇬🇧 NotCool	2026-05-23 19:12:23 (1 week ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 111.225.149.210 (CN/China/bytespider-111-225-149-210. ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 111.225.149.210 (CN/China/bytespider-111-225-149-210.crawl.bytedance.com): 50 in the last 3600 secs show less	Bad Web Bot
🇨🇦 1gz	2026-05-20 13:37:54 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/shqiperi/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-15 22:38:43 (3 weeks ago)	ThreatBook Intelligence: Whitelist,Dynamic IP more details on https://threatbook.io/ip/111.225.149.2 ... show more ThreatBook Intelligence: Whitelist,Dynamic IP more details on https://threatbook.io/ip/111.225.149.210 2026-05-15 23:44:54 /bbs/viewtopic.php?p=187495 show less	Web App Attack
🇸🇬 anotherwatcher	2026-05-08 21:07:44 (4 weeks ago)	bad bot	Bad Web Bot
Anonymous	2026-05-08 18:00:47 (4 weeks ago)	forbidden user agent	Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-07 22:42:50 (4 weeks ago)	ThreatBook Intelligence: Whitelist,Dynamic IP more details on https://threatbook.io/ip/111.225.149.2 ... show more ThreatBook Intelligence: Whitelist,Dynamic IP more details on https://threatbook.io/ip/111.225.149.210 2026-05-07 03:26:08 /cc.gif show less	Web App Attack
🇮🇪 Jim Keir	2026-05-07 15:56:21 (4 weeks ago)	2026-05-07 15:56:20 111.225.149.210 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-03 00:34:38 (1 month ago)	2026-05-03 00:34:36 111.225.149.210 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-04-30 12:31:49 (1 month ago)	[Wed Apr 29 12:47:04.167487 2026] [authz_core:error] [pid 312932:tid 140276147451456] [client 111.22 ... show more [Wed Apr 29 12:47:04.167487 2026] [authz_core:error] [pid 312932:tid 140276147451456] [client 111.225.149.210:59216] AH01630: client denied by server configuration: /var/www/public_html/symposium/2024/2024-61st-IBSIS-RMBS-Home.html [Wed Apr 29 12:47:04.170511 2026] [authz_core:error] [pid 312932:tid 140276147451456] [client 111.225.149.210:59216] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html [Thu Apr 30 06:31:48.527646 2026] [authz_core:error] [pid 344618:tid 140276550301248] [client 111.225.149.210:32268] AH01630: client denied by server configuration: /var/www/public_html/history/ ... show less	Bad Web Bot

Showing 1 to 15 of 200 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 217.145.72.199

🇺🇸 162.216.150.172

🇷🇺 94.25.40.30

🇫🇷 62.210.199.83

🇺🇸 40.124.171.173

🇬🇧 35.203.210.184

🇺🇸 195.184.76.4

🇫🇮 147.185.133.18

🇺🇸 147.185.132.230

🇩🇪 47.245.135.122

🇬🇧 35.203.210.124

🇩🇪 213.209.159.158

🇧🇬 193.24.211.107

🇸🇬 128.106.214.148

🇺🇸 91.230.168.255

🇬🇧 35.203.210.159

🇩🇪 8.209.101.19

🇨🇳 220.197.78.171

🇲🇽 200.68.173.215

🇩🇪 193.176.86.52