JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 223.109.255.162

223.109.255.162 was found in our database!

This IP was reported 275 times. Confidence of Abuse is 64%: ?

64%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS56046
Hostname(s)	sogouspider-223-109-255-162.crawl.sogou.com
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 223.109.255.162

Whois 223.109.255.162

IP Abuse Reports for 223.109.255.162:

This IP address has been reported a total of 275 times from 37 distinct sources. 223.109.255.162 was first reported on June 11th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-06-17 01:25:25 (1 hour ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lifestyle/horoskopi-25-gusht-ja-cfare-kane-parashikuar-yjet-per-ju/817684/ UA: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 soc-yk	2026-06-16 19:06:12 (8 hours ago)	Type: suspicious_network_activity Risk: 65 Events: 4958 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 65 Events: 4958 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇺🇸 nodepile	2026-06-16 14:01:12 (13 hours ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/headlights-projectors/toyot ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/headlights-projectors/toyota-scion-headlights/07-13-tundra-08-13-sequoia-black-headlights-headlamps-pair-left-right-2007-2013.html ua='Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)') show less	Web App Attack Exploited Host
Anonymous	2026-06-16 12:06:59 (15 hours ago)	Session Crossing	Hacking
🇫🇷 Sklurk	2026-06-14 13:36:08 (2 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-13 12:17:57 (3 days ago)	Web App Attack	Web App Attack
🇺🇸 nodepile	2026-06-13 05:27:12 (3 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model/scion/f ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model/scion/fr-s/2012-2014-scion-fr-s-subaru-brz-clear-or-smoke-led-front-side-marker-light.html ua='Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)') show less	Web App Attack Exploited Host
🇮🇩 soc-yk	2026-06-13 05:06:31 (3 days ago)	Type: suspicious_network_activity Risk: 70 Events: 3221 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 70 Events: 3221 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇮🇩 soc-yk	2026-06-12 02:54:58 (5 days ago)	Type: suspicious_network_activity Risk: 69 Events: 1507 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 69 Events: 1507 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇮🇩 soc-yk	2026-06-10 16:42:18 (6 days ago)	Type: suspicious_network_activity Risk: 70 Events: 659 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 70 Events: 659 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇬🇧 Mendip_Defender	2026-06-09 19:23:46 (1 week ago)	223.109.255.162 - - [09/Jun/2026:20:23:42 +0100] "GET / HTTP/1.1" 200 4127 "-" "Sogou web spider/4.0 ... show more 223.109.255.162 - - [09/Jun/2026:20:23:42 +0100] "GET / HTTP/1.1" 200 4127 "-" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" ... show less	Bad Web Bot
🇫🇷 Sklurk	2026-06-08 17:43:18 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 bigorre.org	2026-06-05 19:02:44 (1 week ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-04 11:54:56 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 223.109.255.162 (sogouspider-223-109-255-162.cr ... show more (mod_security) mod_security (id:210730) triggered by 223.109.255.162 (sogouspider-223-109-255-162.crawl.sogou.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 07:54:51.136259 2026] [security2:error] [pid 13077:tid 13077] [client 223.109.255.162:58160] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bentonflybox.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bentonflybox.com"] [uri "/streamers/photothumb.db"] [unique_id "aiFnizdqD-y-0T0ZZwxwcQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 David Koswari	2026-06-04 05:42:00 (1 week ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted

Showing 1 to 15 of 275 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.34

🇺🇸 205.210.31.103

🇺🇸 193.34.72.236

🇺🇸 193.34.72.233

🇺🇸 193.34.72.45

🇧🇷 177.8.248.202

🇺🇸 173.244.60.155

🇺🇸 172.239.51.109

🇻🇳 171.231.198.229

🇺🇸 162.216.150.233

🇺🇸 162.216.150.95

🇹🇭 118.174.184.85

🇨🇳 113.31.110.73

🇧🇷 43.164.195.160

🇰🇪 41.60.247.111

🇮🇩 36.64.131.68

🇳🇱 209.38.99.178

🇺🇸 198.62.0.132

🇷🇴 193.46.255.86

🇺🇸 193.34.72.220