121.229.156.83

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
82% Critical
447 reports
73 reporters · latest 1 day ago
ISP
CHINANET jiangsu province network
Usage Type
Data Center/Web Hosting/Transit
ASN
AS134756
Hostname(s)
sogouspider-121-229-156-83.crawl.sogou.com
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Nanjing, Jiangsu
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
447 from 73 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇦 Canada 19 🇩🇪 Germany 17 🇫🇷 France 16
Most common categories Bad Web Bot 41 Web App Attack 26 Brute-Force 8 Exploited Host 5 DDoS Attack 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 LRob
Abusive crawler | ua: Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) | path: / | 2026-11-12 18:14 UTC
Bad Web Bot
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.83 (CN/China/sogouspider-121-229-156-83.crawl.sogou.com)
Bad Web Bot
🇺🇸 sandra361
Port scan detected: 5 packets across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=121.229.156.83 LEN=353 TOS=0x00 PREC=0x00 TTL=48 ID=28604 DF PROTO=TCP SPT=40278 DPT=443 WINDOW=29200 RES=0x00 ACK PSH FIN URGP=0
Port Scan
🇫🇷 Sklurk
Web App Attack
Web App Attack
🇫🇷 Sklurk
Web App Attack
Web App Attack
🇩🇪 Skyrider
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot Web App Attack
🇺🇸 integrantservices.com
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.83 (CN/China/sogouspider-121-229-156-83.crawl.sogou.com)
Bad Web Bot
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.83 (CN/China/sogouspider-121-229-156-83.crawl.sogou.com)
Bad Web Bot
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-11-04 UTC.
Brute-Force Exploited Host
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 121.229.156.83 (CN/China/sogouspider-121-229-156-83.crawl.sogou.com)
Bad Web Bot
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster
Bad Web Bot
🇺🇸 webehostin.com
Too Many Connections Or General Abuse
Brute-Force DDoS Attack
🇩🇪 LRob
Abusive crawler | ua: MQQBrowser/26 Mozilla/5.0 (Linux; U; Android 4.4.2; zh-cn; MB200 Build/GRJ22; CyanogenMod-7) AppleWebKit/533.1 (KHTML, like Geck | path: /en/ | 2026-11-01 20:58 UTC
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 188.240.59.13
🇳🇱 185.223.235.4
🇮🇳 103.155.140.208
🇳🇱 93.123.109.164
🇺🇸 63.135.169.175
🇵🇱 57.128.253.86
🇺🇸 209.126.9.169
🇺🇸 195.250.24.93
🇺🇸 162.216.150.208
🇺🇸 142.93.82.193
🇰🇷 121.183.240.55
🇮🇳 103.99.145.47
🇬🇧 86.31.66.124
🇺🇸 68.225.58.230
🇺🇸 66.63.181.110
🇺🇸 64.62.197.7
🇮🇳 49.36.116.202
🇩🇪 31.76.85.80
🇺🇸 209.38.131.131
🇮🇳 203.145.143.163
feedback