223.109.252.197

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
54% Elevated
400 reports
58 reporters · latest 1 day ago
ISP
China Mobile Communications Corporation
Usage Type
Fixed Line ISP
ASN
AS56046
Hostname(s)
sogouspider-223-109-252-197.crawl.sogou.com
Domain Name
chinamobile.com
Country
🇨🇳 China
City
Nanjing, Jiangsu
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
400 from 58 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇦 Canada 23 🇫🇷 France 14 🇩🇪 Germany 11
Most common categories Bad Web Bot 36 Web App Attack 28 Brute-Force 5 Port Scan 3 Exploited Host 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 london2038.com
2026-11-06 09:09:01+01:00 portcheck: Unsolicited connect from 223.109.252.197:60084 (seen tarpitted) 2026-11-06 21:09:01+01:00 portcheck: Unsolicited connect from 223.109.252.197:37388 (seen tarpitted)
Port Scan
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 223.109.252.197 (CN/China/sogouspider-223-109-252-197.crawl.sogou.com)
Bad Web Bot
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 223.109.252.197 (CN/China/sogouspider-223-109-252-197.crawl.sogou.com)
Bad Web Bot
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 223.109.252.197 (CN/China/sogouspider-223-109-252-197.crawl.sogou.com)
Bad Web Bot
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 223.109.252.197 (CN/China/sogouspider-223-109-252-197.crawl.sogou.com)
Bad Web Bot
🇿🇦 vanderhost
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/ffc-pdfs/BUN87W9asDT7TXDuEI1cjuaJY06JmOG8wduMZGQN.pdf via rule: /storage
Web App Attack Bad Web Bot
🇿🇦 vanderhost
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/ffc-pdfs/fSQXFrVTSAkMPQURE3pwnHcgBV6Keog4WYsB7eV7.pdf via rule: /storage
Web App Attack Bad Web Bot
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 223.109.252.197 (CN/China/sogouspider-223-109-252-197.crawl.sogou.com)
Bad Web Bot
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 223.109.252.197 (CN/China/sogouspider-223-109-252-197.crawl.sogou.com)
Bad Web Bot
🇫🇷 Sklurk
Web App Attack
Web App Attack
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 223.109.252.197 (CN/China/sogouspider-223-109-252-197.crawl.sogou.com)
Bad Web Bot
🇮🇹 Progetto1
Website Scanning / Scraping
Bad Web Bot Exploited Host Web App Attack
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 223.109.252.197 (CN/China/sogouspider-223-109-252-197.crawl.sogou.com)
Bad Web Bot
🇫🇷 Sklurk
Web App Attack
Web App Attack
🇫🇷 Sklurk
Web App Attack
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 45.138.12.217
🇮🇷 130.193.77.236
🇹🇼 125.228.207.243
🇨🇭 104.244.79.113
🇳🇬 102.90.98.203
🇰🇿 95.141.131.162
🇳🇱 77.67.26.222
🇳🇱 45.148.10.152
🇺🇸 217.177.128.229
🇵🇱 176.53.159.197
🇺🇸 167.94.195.117
🇩🇪 167.94.146.67
🇰🇷 115.160.76.23
🇹🇼 106.107.198.118
🇮🇳 103.248.120.6
🇺🇸 98.80.4.13
🇷🇴 93.115.7.123
🇫🇷 52.46.83.79
🇳🇱 45.148.10.141
🇺🇸 40.76.115.9
feedback