JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.229.156.26

121.229.156.26 was found in our database!

This IP was reported 239 times. Confidence of Abuse is 57%: ?

57%

ISP	CHINANET jiangsu province network
Usage Type	Commercial
ASN	AS134756
Hostname(s)	sogouspider-121-229-156-26.crawl.sogou.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.229.156.26

Whois 121.229.156.26

IP Abuse Reports for 121.229.156.26:

This IP address has been reported a total of 239 times from 36 distinct sources. 121.229.156.26 was first reported on June 7th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-17 05:22:03 (2 hours ago)	Web App Attack	Web App Attack
Anonymous	2026-06-16 20:25:50 (11 hours ago)	Session Crossing	Hacking
🇮🇩 soc-yk	2026-06-16 17:54:13 (14 hours ago)	Type: suspicious_network_activity Risk: 67 Events: 4172 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 67 Events: 4172 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇺🇸 nodepile	2026-06-16 16:24:40 (15 hours ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model/audi/a6 ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model/audi/a6/audi-a6-76.html ua='Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)') show less	Web App Attack Exploited Host
🇨🇦 1gz	2026-06-16 06:50:47 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kryetitull/berat-xhimshiti-te-shqiperia-konfirmimi-nga-kosova-video/170432/ UA: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇷 setupgr	2026-06-13 18:55:50 (3 days ago)	(mod_security) mod_security (id:100011) triggered by 121.229.156.26: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:100011) triggered by 121.229.156.26: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 21:55:46.107510 2026] [security2:error] [pid 921889:tid 922049] [client 121.229.156.26:36566] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/robots.txt"] [unique_id "ai2nsiykT1eM1OfD7bubbQAAAUA"] show less	Port Scan
🇫🇷 Sklurk	2026-06-13 10:36:12 (3 days ago)	Web App Attack	Web App Attack
🇮🇩 soc-yk	2026-06-12 03:06:41 (5 days ago)	Type: suspicious_network_activity Risk: 70 Events: 2334 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 70 Events: 2334 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇫🇷 Sklurk	2026-06-12 01:46:11 (5 days ago)	Web App Attack	Web App Attack
🇮🇩 soc-yk	2026-06-10 17:42:14 (6 days ago)	Type: suspicious_network_activity Risk: 69 Events: 1250 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 69 Events: 1250 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇫🇷 Sklurk	2026-06-09 00:29:18 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 nodepile	2026-06-08 08:29:46 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/morimoto/led-buls/flasher-r ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/morimoto/led-buls/flasher-relays-resistors/tail-as-turn-signal-kit-nissan-gt-r-09-19.html ua='Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)') show less	Web App Attack Exploited Host
🇫🇷 Sklurk	2026-06-08 00:28:25 (1 week ago)	Web App Attack	Web App Attack
🇨🇿 ptlab	2026-06-06 10:45:18 (1 week ago)	Detected php_null_array_access attack from WP-host.	Hacking Web App Attack
🇫🇷 bigorre.org	2026-06-06 10:28:38 (1 week ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot

Showing 1 to 15 of 239 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2607:f8b0:4020:c00::12a

🇺🇸 2001:470:1:c84::9e

🇲🇾 205.186.64.137

🇨🇳 202.99.211.194

🇨🇱 201.186.40.250

🇲🇦 196.115.163.254

🇺🇸 192.3.219.77

🇺🇸 192.3.142.148

🇫🇷 185.135.137.194

🇯🇵 172.104.100.117

🇺🇸 165.154.162.250

🇺🇸 165.154.36.105

🇯🇵 161.129.34.28

🇺🇸 159.203.140.159

🇳🇱 142.93.231.169

🇺🇸 128.241.229.52

🇨🇳 118.196.56.74

🇮🇳 106.51.83.25

🇨🇳 103.217.193.33

🇧🇩 103.87.136.178