JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.225.149.241

111.225.149.241 was found in our database!

This IP was reported 353 times. Confidence of Abuse is 36%: ?

36%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	bytespider-111-225-149-241.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.225.149.241

Whois 111.225.149.241

IP Abuse Reports for 111.225.149.241:

This IP address has been reported a total of 353 times from 39 distinct sources. 111.225.149.241 was first reported on August 21st 2021, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 Jim Keir	2026-06-08 01:02:07 (3 days ago)	2026-06-08 01:02:05 111.225.149.241 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-06 19:06:01 (4 days ago)	2026-06-06 19:06:01 111.225.149.241 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-05 06:35:15 (6 days ago)	2026-06-05 06:35:15 111.225.149.241 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-06-04 11:41:08 (1 week ago)	2026-06-04 11:41:06 111.225.149.241 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-27 20:37:13 (2 weeks ago)	2026-05-27 20:37:12 111.225.149.241 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-27 01:19:47 (2 weeks ago)	2026-05-27 01:19:45 111.225.149.241 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇨🇦 1gz	2026-05-22 04:22:33 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/suedia/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-05-21 01:54:04 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /sport/e-ardhmja-e-kimmich-te-bayern-munich-ende-e-pasigurt/711131/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-16 11:50:26 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 111.225.149.241 (bytespider-111-225-149-241.cra ... show more (mod_security) mod_security (id:210730) triggered by 111.225.149.241 (bytespider-111-225-149-241.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 07:50:20.915220 2026] [security2:error] [pid 11334:tid 11334] [client 111.225.149.241:10946] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aghZ_OKMa-tqJnhQ1uGzlgAAAA8"], referer: https://civilwarzone.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-15 10:19:56 (3 weeks ago)	Banned by Fail2Ban on server	Bad Web Bot
🇸🇬 anotherwatcher	2026-05-12 18:39:51 (4 weeks ago)	bad bot	Bad Web Bot
🇮🇪 Jim Keir	2026-05-12 07:21:58 (4 weeks ago)	2026-05-12 07:21:55 111.225.149.241 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-11 10:36:57 (1 month ago)	2026-05-11 10:36:20 111.225.149.241 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇪 Jim Keir	2026-05-11 01:35:46 (1 month ago)	2026-05-11 01:35:45 111.225.149.241 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇸🇬 anotherwatcher	2026-05-04 17:32:24 (1 month ago)	bad bot	Bad Web Bot

Showing 1 to 15 of 353 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 181.212.3.42

🇳🇱 165.232.94.244

🇺🇸 162.217.165.142

🇨🇦 147.182.144.120

🇺🇸 104.23.211.14

🇺🇸 40.124.175.136

🇳🇱 193.176.31.155

🇮🇷 178.131.96.16

🇺🇸 147.185.132.156

🇭🇰 134.122.177.2

🇺🇸 66.132.172.32

🇺🇸 45.88.91.228

🇬🇧 35.203.211.168

🇹🇼 1.162.228.189

🇹🇼 1.162.106.89

🇨🇳 202.46.62.22

🇧🇷 187.40.215.162

🇮🇳 103.136.137.73

🇩🇪 64.226.126.224

🇬🇧 35.203.211.63