JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.8.47.251

122.8.47.251 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 19%: ?

19%

ISP	Beijing CNISP Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	cnisp.org.cn
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.8.47.251

Whois 122.8.47.251

IP Abuse Reports for 122.8.47.251:

This IP address has been reported a total of 11 times from 8 distinct sources. 122.8.47.251 was first reported on April 17th 2023, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-07-11 22:18:00 (12 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 Mainpine	2026-07-09 17:57:03 (2 days ago)	probing for vulnerable web apps	Web App Attack
🇫🇷 Tilellit.PRO	2026-05-18 13:56:49 (1 month ago)	Fail2Ban banned 122.8.47.251 for security violations in jail wp-armour. Log: 2026/05/18 13:56:48 [er ... show more Fail2Ban banned 122.8.47.251 for security violations in jail wp-armour. Log: 2026/05/18 13:56:48 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 122.8.47.251 \| Target: wplogin" , client: 122.8.47.251, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 Tilellit.PRO	2026-05-17 20:56:18 (1 month ago)	Fail2Ban banned 122.8.47.251 for security violations in jail wp-armour. Log: 2026/05/17 20:56:17 [er ... show more Fail2Ban banned 122.8.47.251 for security violations in jail wp-armour. Log: 2026/05/17 20:56:17 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 122.8.47.251 \| Target: wplogin" , client: 122.8.47.251, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-04-28 23:53:31 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 122.8.47.251 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.47.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 19:53:25.025875 2026] [security2:error] [pid 4653:tid 4653] [client 122.8.47.251:14593] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|justicehoward.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "justicehoward.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afFIdUhhroFd5Xta2QpWuwAAACM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-04-26 08:49:38 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-login.php UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-24 11:24:21 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 122.8.47.251 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.47.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 07:24:14.133266 2026] [security2:error] [pid 27699:tid 27699] [client 122.8.47.251:19725] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|blueworkdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blueworkdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aetS3s7FKF9tZzJhMC1OQQAAABQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-07 09:27:32 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 122.8.47.251 (FI/Finland/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 122.8.47.251 (FI/Finland/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:18 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇭 backslash	2025-09-25 19:25:05 (9 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 Fusl	2023-04-17 11:24:51 (3 years ago)	received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:20:54 -0400 From: postmaster@qedxow ... show more received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:20:54 -0400 From: [email protected] Subject: Delivery report To: [email protected] MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="[email protected]" [email protected] Content-Type: text/plain Hello, this is the mail server on qedxowvq.com. I am sending you this message to inform you on the delivery status of a message you previously sent. Immediately below you will find a list of the affected recipients; also attached is a Delivery Status Notification (DSN) report in standard format, as well as the headers of the original message. <[email protected]> delivery failed; will not continue trying [email protected] Content-Type: message/delivery-status Reporting-MTA: dns;qedxowvq.com X-PowerMTA-VirtualMTA: nvmta_0990 Received-From-MTA: dns;localhost (127.0.0.1) Arrival-Date: Mon, 17 Apr 2023 07:20:51 -0400 Final-Recipient: rfc822;danialwilly23@outlo show less	Email Spam

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:f812:2f::

🇳🇱 192.142.28.77

🇹🇭 183.88.226.97

🇩🇪 172.253.1.216

🇺🇸 162.216.150.228

🇨🇳 124.117.195.14

🇮🇳 103.250.160.76

🇺🇸 54.67.135.143

🇩🇪 49.51.141.76

🇺🇸 44.232.62.187

🇨🇳 27.19.155.130

🇺🇸 20.64.113.40

🇺🇸 18.212.230.252

🇮🇳 13.200.127.26

🇳🇱 194.62.214.228

🇲🇽 187.190.18.119

🇩🇪 167.94.146.61

🇬🇧 81.19.219.224

🇳🇱 81.19.216.100

🇨🇳 58.220.10.131