AbuseIPDB » 111.225.149.5

111.225.149.5 was found in our database!

This IP was reported 218 times. Confidence of Abuse is 15%: ?

15%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
Hostname(s)	bytespider-111-225-149-5.crawl.bytedance.com
Domain Name	chinatelecom.cn
Country	China
City	Shijiazhuang, Hebei

Report 111.225.149.5

Whois 111.225.149.5

IP Abuse Reports for 111.225.149.5:

This IP address has been reported a total of 218 times from 12 distinct sources. 111.225.149.5 was first reported on October 15th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
hermawan	2024-12-09 04:08:41 (1 day ago)	[Mon Dec 09 10:43:36.200982 2024] [security2:error] [pid 18825:tid 134183603074752] [client 111.225. ... show more[Mon Dec 09 10:43:36.200982 2024] [security2:error] [pid 18825:tid 134183603074752] [client 111.225.149.5:55310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: zh,zh-CN;q=0.9 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-maksimum/555561559-suhu-maksimum-harian-di-jawa-timur-tanggal-17-18-november-tahun-2024 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-maksimum/555561559-suhu-maksimum-harian-di-jawa-timur-tanggal-17-18-november-tahun-2024"] [unique_id "Z1ZnaOsDpDoa9-hvmR5FpgAAshA"] [staklim-malang.info] [staklim-malang.info] top=[18842] [z8IUK0bv5D ... show less	Hacking Web App Attack
hermawan	2024-12-09 01:27:08 (1 day ago)	[Sun Dec 08 20:33:24.710515 2024] [security2:error] [pid 707459:tid 127195508876992] [client 111.225 ... show more[Sun Dec 08 20:33:24.710515 2024] [security2:error] [pid 707459:tid 127195508876992] [client 111.225.149.5:38286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: zh,zh-CN;q=0.9 request_line = GET /index.php/analisis-bulanan/175-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan-tahun-2016/1252-analisis-distribusi-sifat-hujan-jawa-timur-bulan-oktober-tahun-2016 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/175-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-distribusi-sifat-hujan-jawa-timur-bulana ... show less	Hacking Web App Attack
Anonymous	2024-12-05 05:43:31 (5 days ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-12-03 01:37:59 (1 week ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-12-01 17:35:33 (1 week ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-29 07:47:55 (1 week ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-28 03:37:14 (1 week ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-27 02:35:33 (1 week ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-25 21:19:31 (2 weeks ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-24 05:36:42 (2 weeks ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-22 18:21:31 (2 weeks ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
hermawan	2024-11-21 19:23:33 (2 weeks ago)	[Fri Nov 22 00:21:06.677674 2024] [security2:error] [pid 118636:tid 123154609424064] [client 111.225 ... show more[Fri Nov 22 00:21:06.677674 2024] [security2:error] [pid 118636:tid 123154609424064] [client 111.225.149.5:27096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: zh,zh-CN;q=0.9 request_line = GET /index.php/profil/meteorologi/list-all-categories/4018-klimatologi/analisis-klimatologi/analisis-dasarian/distribusi-curah-hujan-dasarian-propinsi-jawa-timur/analisis-dasarian-distribusi-curah-hujan-tahun-2020-di-propinsi-jawa-timur/555558232-analisis-dasarian-distribusi-curah-hujan-dasarian-iii-agustus-2020-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/4018-klimatologi/analisis-klimatologi ... show less	Hacking Web App Attack
Anonymous	2024-11-21 11:23:02 (2 weeks ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-18 09:11:12 (3 weeks ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-16 12:24:06 (3 weeks ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH