JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.229.156.58

121.229.156.58 was found in our database!

This IP was reported 194 times. Confidence of Abuse is 56%: ?

56%

ISP	CHINANET jiangsu province network
Usage Type	Commercial
ASN	AS134756
Hostname(s)	sogouspider-121-229-156-58.crawl.sogou.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.229.156.58

Whois 121.229.156.58

IP Abuse Reports for 121.229.156.58:

This IP address has been reported a total of 194 times from 35 distinct sources. 121.229.156.58 was first reported on June 16th 2024, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 soc-yk	2026-06-12 03:42:24 (9 hours ago)	Type: suspicious_network_activity Risk: 72 Events: 1690 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 72 Events: 1690 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇮🇩 soc-yk	2026-06-10 15:42:17 (1 day ago)	Type: suspicious_network_activity Risk: 69 Events: 494 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 69 Events: 494 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇩🇪 SCHAPPY	2026-06-09 03:23:09 (3 days ago)	Bad bot identified by user agent	Bad Web Bot
🇳🇱 GabrielJST	2026-06-07 00:38:46 (5 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.58 (CN/C ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.58 (CN/China/sogouspider-121-229-156-58.crawl.sogou.com) show less	Bad Web Bot
🇫🇷 bigorre.org	2026-06-06 13:32:36 (5 days ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 Sklurk	2026-06-05 03:19:37 (1 week ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-06-03 10:50:19 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Hazzard	2026-06-02 23:29:01 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇺🇸 webehostin.com	2026-05-31 21:06:23 (1 week ago)	Too Many Connections Or General Abuse	Brute-Force DDoS Attack
🇬🇧 Mendip_Defender	2026-05-26 12:30:32 (2 weeks ago)	121.229.156.58 - - [26/May/2026:13:30:30 +0100] "GET / HTTP/1.1" 200 4127 "-" "Sogou web spider/4.0( ... show more 121.229.156.58 - - [26/May/2026:13:30:30 +0100] "GET / HTTP/1.1" 200 4127 "-" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" ... show less	Bad Web Bot
🇫🇷 Sklurk	2026-05-25 10:57:19 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 bigorre.org	2026-05-02 16:50:56 (1 month ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇨🇳 ThreatBook.io	2026-04-25 22:32:52 (1 month ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/121.229.156.58 2026-04-2 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/121.229.156.58 2026-04-25 07:01:17 /bbs/viewtopic.php?p=817472 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-23 03:02:06 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 121.229.156.58 (sogouspider-121-229-156-58.craw ... show more (mod_security) mod_security (id:210730) triggered by 121.229.156.58 (sogouspider-121-229-156-58.crawl.sogou.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 23:02:02.284763 2026] [security2:error] [pid 12507:tid 12507] [client 121.229.156.58:46690] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.scoutinsignia.com"] [uri "/faq/images/ws_ftp.log"] [unique_id "aemLqktxOG_X8xC8bOKOzQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-04-17 01:43:28 (1 month ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.881 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.881 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 194 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.219.243.53

🇲🇽 200.77.20.223

🇱🇹 195.12.191.130

🇳🇱 194.120.230.72

🇳🇱 176.65.139.246

🇨🇳 175.10.113.95

🇩🇪 156.236.31.85

🇵🇰 154.80.36.41

🇻🇳 115.73.213.75

🇮🇳 103.148.206.99

🇮🇪 98.71.8.129

🇺🇸 73.36.177.174

🇨🇳 58.242.190.39

🇳🇱 45.148.10.147

🇺🇸 34.169.186.105

🇺🇸 195.184.76.215

🇨🇴 181.138.40.122

🇧🇷 177.92.253.142

🇺🇸 172.252.13.90

🇺🇸 165.154.173.35