JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.229.156.101

121.229.156.101 was found in our database!

This IP was reported 385 times. Confidence of Abuse is 74%: ?

74%

ISP	CHINANET jiangsu province network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS134756
Hostname(s)	sogouspider-121-229-156-101.crawl.sogou.com
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.229.156.101

Whois 121.229.156.101

IP Abuse Reports for 121.229.156.101:

This IP address has been reported a total of 385 times from 60 distinct sources. 121.229.156.101 was first reported on June 15th 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-10-22 05:08:25 (13 hours ago)	Web App Attack	Web App Attack
🇨🇦 Mediashaker	2026-10-20 11:18:32 (2 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.101 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.101 (CN/China/sogouspider-121-229-156-101.crawl.sogou.com) show less	Bad Web Bot
🇫🇷 Sklurk	2026-10-18 07:23:17 (4 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-10-15 04:57:42 (1 week ago)	Web App Attack	Web App Attack
🇨🇦 Mediashaker	2026-10-14 23:19:17 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.101 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.101 (CN/China/sogouspider-121-229-156-101.crawl.sogou.com) show less	Bad Web Bot
🇫🇷 LRob	2026-10-11 22:22:02 (1 week ago)	Abusive crawler \| ua: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) \| path ... show more Abusive crawler \| ua: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) \| path: / show less	Bad Web Bot
🇫🇷 Sklurk	2026-10-11 02:35:20 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-10-10 07:25:43 (1 week ago)	HTTP application-layer DoS / botnet traffic from 121.229.156.101: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 121.229.156.101: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-10-10 06:41:01 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 121.229.156.101 (sogouspider-121-229-156-101.cr ... show more (mod_security) mod_security (id:210730) triggered by 121.229.156.101 (sogouspider-121-229-156-101.crawl.sogou.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 02:40:56.787123 2026] [security2:error] [pid 29850:tid 29850] [client 121.229.156.101:49380] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nancyscafeandcatering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nancyscafeandcatering.com"] [uri "/pathvoice.com"] [unique_id "asnd-DX11MfCoy3LoJ9mSwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-10-10 01:55:51 (1 week ago)	Web App Attack	Web App Attack
🇨🇦 Mediashaker	2026-10-09 03:06:17 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.101 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.101 (CN/China/sogouspider-121-229-156-101.crawl.sogou.com) show less	Bad Web Bot
🇺🇸 SX Communications	2026-10-08 08:50:09 (2 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 121.229.156.101: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 121.229.156.101: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-10-07 10:55:17 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-10-07 05:13:17 (2 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 121.229.156.101: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 121.229.156.101: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 1gz	2026-10-06 15:21:58 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /showbiz/ UA: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 385 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.191.16.42

🇹🇼 198.235.24.71

🇭🇰 185.227.152.135

🇺🇸 174.134.45.64

🇺🇸 138.99.37.166

🇨🇦 129.222.95.253

🇫🇷 88.188.146.142

🇳🇱 77.239.124.65

🇺🇸 45.130.83.38

🇬🇧 5.252.83.204

🇮🇷 2.180.151.231

🇪🇹 196.189.16.214

🇨🇳 180.100.217.164

🇨🇳 118.121.202.149

🇩🇪 109.160.32.134

🇫🇷 54.37.68.60

🇬🇧 2.57.17.17

🇰🇷 210.96.72.179

🇺🇸 192.9.228.120

🇺🇸 170.106.154.106