JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.8.47.75

122.8.47.75 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 16%: ?

16%

ISP	Beijing CNISP Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	cnisp.org.cn
Country	🇫🇮 Finland
City	Vantaa, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.8.47.75

Whois 122.8.47.75

IP Abuse Reports for 122.8.47.75:

This IP address has been reported a total of 14 times from 10 distinct sources. 122.8.47.75 was first reported on April 17th 2023, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-06-27 11:31:29 (7 hours ago)	Fail2Ban banned 122.8.47.75 for security violations in jail wp-armour. Log: 2026/06/27 11:31:28 [err ... show more Fail2Ban banned 122.8.47.75 for security violations in jail wp-armour. Log: 2026/06/27 11:31:28 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 122.8.47.75 \| Target: wplogin" , client: 122.8.47.75, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-05-30 03:17:44 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 122.8.47.75 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 122.8.47.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 23:17:39.908157 2026] [security2:error] [pid 32192:tid 32192] [client 122.8.47.75:24619] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|stardancertantra.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stardancertantra.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahpW02xazNADdxHDfDOo2gAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kjaerulff	2026-05-13 17:55:11 (1 month ago)	Failed Wordpress login using wp-login.php	Web App Attack
🇺🇸 TPI-Abuse	2026-05-02 07:23:36 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 122.8.47.75 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 122.8.47.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 03:23:31.380262 2026] [security2:error] [pid 14085:tid 14085] [client 122.8.47.75:23131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afWmc27H_gNOJnrRNmzceQAAAAY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇫🇷 tilellit.pro	2026-01-31 20:53:54 (4 months ago)	Fail2Ban banned 122.8.47.75 for security violations in jail wp-armour. Log: 2026/01/31 20:53:54 [err ... show more Fail2Ban banned 122.8.47.75 for security violations in jail wp-armour. Log: 2026/01/31 20:53:54 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 122.8.47.75 \| Target: wplogin" , client: 122.8.47.75, server: [REDACTED], request: "POST /wp-login.php HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 masterguru	2026-01-19 19:37:25 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 122.8.47.75 (FI/Finland/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 122.8.47.75 (FI/Finland/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-13 17:39:15 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 122.8.47.75 (SE/Sweden/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 122.8.47.75 (SE/Sweden/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 LRob.fr	2025-12-24 16:15:08 (6 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2025-12-16 02:29:01 (6 months ago)	2025-12-16T04:29:01.012930+02:00 zanati wp(www.sahpa.co.za)[978186]: Blocked authentication attempt ... show more 2025-12-16T04:29:01.012930+02:00 zanati wp(www.sahpa.co.za)[978186]: Blocked authentication attempt for admin from 122.8.47.75 ... show less	Web App Attack
🇨🇦 SSH-Admin	2025-12-01 02:33:03 (6 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇪🇸 10dencehispahard SL	2025-11-21 07:15:25 (7 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-10-28 09:58:52 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 Fusl	2023-04-17 11:21:25 (3 years ago)	received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:03 -0400 From: postmaster@nfslug ... show more received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:03 -0400 From: [email protected] Subject: Delivery report To: [email protected] MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="[email protected]" [email protected] Content-Type: text/plain Hello, this is the mail server on nfslugam.com. I am sending you this message to inform you on the delivery status of a message you previously sent. Immediately below you will find a list of the affected recipients; also attached is a Delivery Status Notification (DSN) report in standard format, as well as the headers of the original message. <[email protected]> delivery failed; will not continue trying [email protected] Content-Type: message/delivery-status Original-Envelope-Id: 383;639855;0000007010;pawan1 Reporting-MTA: dns;nfslugam.com X-PowerMTA-VirtualMTA: nvmta_0814 Received-From-MTA: dns;localhost (127.0.0.1) Arrival-Date: Mon, 17 Apr 2023 07:0 show less	Email Spam

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.219.156

🇫🇷 172.71.134.61

🇩🇪 167.94.146.70

🇺🇸 162.216.150.219

🇫🇮 147.185.133.177

🇺🇸 147.185.132.198

🇺🇸 147.185.132.156

🇺🇦 93.171.240.108

🇲🇦 81.192.46.32

🇳🇱 45.156.128.127

🇳🇱 45.156.128.41

🇺🇸 34.74.196.141

🇺🇸 3.143.162.210

🇨🇳 219.137.118.40

🇧🇷 205.210.31.226

🇨🇱 201.186.40.161

🇲🇴 182.93.7.194

🇨🇳 182.44.116.87

🇧🇷 179.48.74.208

🇺🇸 170.106.74.215