🇺🇸
cwytech
2026-06-17 22:47:09
(1 day ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.
Bad Web Bot
Web App Attack
🇮🇩
David Koswari
2026-06-15 06:02:00
(3 days ago)
REQ_BLOCKED_ACL
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇸🇬
mypatricks
2026-06-11 13:35:13
(1 week ago)
111.225.149.94 | Port: 10718 | DNS: bytespider-111-225-149-94.crawl.bytedance.com 2026-06-11T21:35:1 ...
show more
111.225.149.94 | Port: 10718 | DNS: bytespider-111-225-149-94.crawl.bytedance.com 2026-06-11T21:35:12+08:00 Asia/Shanghai | Un-authorized bots or crawlers | UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) HTTP/1.1 443 GET | URL: /personalized-handcrafted-mickey-mouse-thematic-cake/ | Ref: - | Country: CN/China/+08:00 IP City: Shijiazhuang a0a0ff62189ee00a-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 1
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇵🇱
sefinek.net
2026-06-09 22:07:42
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /genshin-stella-mod | UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 13:53:55
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 111.225.149.94 (bytespider-111-225-149-94.crawl ...
show more
(mod_security) mod_security (id:210730) triggered by 111.225.149.94 (bytespider-111-225-149-94.crawl.bytedance.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:53:48.964609 2026] [security2:error] [pid 28113:tid 28113] [client 111.225.149.94:15860] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||civilwarzone.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aiga7P2ki9eFXvTG8w50nAAAAAA"], referer: https://civilwarzone.com/AtlantaCampaign.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-06-08 09:34:13
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
🇮🇪
Jim Keir
2026-06-07 16:44:38
(1 week ago)
2026-06-07 16:44:38 111.225.149.94 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇮🇪
Jim Keir
2026-06-03 03:27:08
(2 weeks ago)
2026-06-03 03:27:07 111.225.149.94 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇮🇪
Jim Keir
2026-05-28 14:53:49
(3 weeks ago)
2026-05-28 14:53:47 111.225.149.94 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇮🇪
Jim Keir
2026-05-19 23:32:33
(4 weeks ago)
2026-05-19 23:32:32 111.225.149.94 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇨🇳
ThreatBook.io
2026-05-15 22:11:52
(1 month ago)
ThreatBook Intelligence: Whitelist,Dynamic IP more details on https://threatbook.io/ip/111.225.149.9 ...
show more
ThreatBook Intelligence: Whitelist,Dynamic IP more details on https://threatbook.io/ip/111.225.149.94
2026-05-15 17:48:45 /bbs/viewtopic.php?p=1202013
show less
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-05-14 01:24:11
(1 month ago)
[Sat May 09 06:54:39.472383 2026] [authz_core:error] [pid 49135:tid 140682309871168] [client 111.225 ...
show more
[Sat May 09 06:54:39.472383 2026] [authz_core:error] [pid 49135:tid 140682309871168] [client 111.225.149.94:51684] AH01630: client denied by server configuration: /var/www/public_html/board/
[Sat May 09 06:54:39.475297 2026] [authz_core:error] [pid 49135:tid 140682309871168] [client 111.225.149.94:51684] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html
[Wed May 13 19:24:10.618807 2026] [authz_core:error] [pid 39400:tid 140682444154432] [client 111.225.149.94:52448] AH01630: client denied by server configuration: /var/www/public_html/symposium/2024/2024-61st-IBSIS-RMBS-Key-Individuals.html
...
show less
Bad Web Bot
🇮🇪
Jim Keir
2026-05-10 17:07:30
(1 month ago)
2026-05-10 17:07:28 111.225.149.94 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇪🇸
masterguru
2026-05-09 01:51:06
(1 month ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
🇸🇬
anotherwatcher
2026-05-04 09:45:39
(1 month ago)
bad bot
Bad Web Bot