JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.8.47.197

122.8.47.197 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 24%: ?

24%

ISP	Beijing CNISP Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	cnisp.org.cn
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.8.47.197

Whois 122.8.47.197

IP Abuse Reports for 122.8.47.197:

This IP address has been reported a total of 11 times from 8 distinct sources. 122.8.47.197 was first reported on April 17th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-16 19:30:34 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 122.8.47.197 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.47.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 15:30:29.158410 2026] [security2:error] [pid 9860:tid 9860] [client 122.8.47.197:47723] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|baiaosantos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "baiaosantos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alkxVS8LCMZtDOcR1jZnkQAAAAo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 02:33:32 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 122.8.47.197 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.47.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 22:33:27.343887 2026] [security2:error] [pid 11441:tid 11441] [client 122.8.47.197:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sahinozalit.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sahinozalit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alWf97nFFJKDhqjYs_8kVwAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-12 03:13:15 (5 days ago)	[ns3.backorder.gr] httpd-login-spray-site: sites=www.blazos.com; logs=/var/log/httpd/domains/blazos. ... show more [ns3.backorder.gr] httpd-login-spray-site: sites=www.blazos.com; logs=/var/log/httpd/domains/blazos.com.log; samples=site_wide=true \| distinct_ips=25 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 Tilellit.PRO	2026-06-28 09:08:57 (2 weeks ago)	Fail2Ban banned 122.8.47.197 for security violations in jail wp-armour. Log: 2026/06/28 09:08:56 [er ... show more Fail2Ban banned 122.8.47.197 for security violations in jail wp-armour. Log: 2026/06/28 09:08:56 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 122.8.47.197 \| Target: wplogin" , client: 122.8.47.197, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 Tilellit.PRO	2026-06-27 05:21:41 (2 weeks ago)	Fail2Ban banned 122.8.47.197 for security violations in jail wp-armour. Log: 2026/06/27 05:21:40 [er ... show more Fail2Ban banned 122.8.47.197 for security violations in jail wp-armour. Log: 2026/06/27 05:21:40 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 122.8.47.197 \| Target: wplogin" , client: 122.8.47.197, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-06-26 11:27:36 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 122.8.47.197 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.47.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 07:27:31.627121 2026] [security2:error] [pid 19251:tid 19258] [client 122.8.47.197:63159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|laradioactivitat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "laradioactivitat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aj5iIxpK1A8P-cH8is22mwAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-23 22:03:14 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-22. show less	Web App Attack SSH Hacking
🇬🇧 consul.to	2026-03-16 11:29:27 (4 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 nationaleventpros.com	2026-03-12 17:10:44 (4 months ago)	WordPress login attempt	Brute-Force
🇩🇪 kjaerulff	2026-03-07 12:30:00 (4 months ago)	Failed Wordpress login using wp-login.php	Web App Attack
🇩🇪 Fusl	2023-04-17 11:23:14 (3 years ago)	received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:03 -0400 From: postmaster@sozwbe ... show more received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:03 -0400 From: [email protected] Subject: Delivery report To: [email protected] MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="[email protected]" [email protected] Content-Type: text/plain Hello, this is the mail server on sozwbexrbwgw.com. I am sending you this message to inform you on the delivery status of a message you previously sent. Immediately below you will find a list of the affected recipients; also attached is a Delivery Status Notification (DSN) report in standard format, as well as the headers of the original message. <[email protected]> delivery failed; will not continue trying [email protected] Content-Type: message/delivery-status Original-Envelope-Id: 383;639855;0000007010;pawan1 Reporting-MTA: dns;sozwbexrbwgw.com X-PowerMTA-VirtualMTA: nvmta_0936 Received-From-MTA: dns;localhost (127.0.0.1) Arrival-Dat show less	Email Spam

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.62.203.160

🇧🇩 103.86.198.162

🇺🇸 97.181.53.3

🇺🇸 70.115.32.146

🇳🇱 45.148.10.147

🇩🇪 2a04:c300:1000::389

🇺🇸 149.18.183.187

🇹🇼 118.163.217.55

🇹🇷 94.154.43.243

🇺🇸 72.167.132.114

🇺🇸 2620:18c:0:192::e0:132

🇩🇪 217.181.90.169

🇺🇸 173.239.224.17

🇺🇸 170.187.165.218

🇺🇸 147.185.132.89

🇺🇸 107.174.179.153

🇸🇬 103.13.206.100

🇺🇸 54.196.6.25

🇺🇸 192.254.250.171

🇺🇸 172.56.14.8