JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.97.209.88

122.97.209.88 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 53%: ?

53%

ISP	China Unicom Jiangsu province network
Usage Type	Mobile ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.97.209.88

Whois 122.97.209.88

IP Abuse Reports for 122.97.209.88:

This IP address has been reported a total of 38 times from 24 distinct sources. 122.97.209.88 was first reported on April 28th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Altai	2026-09-01 10:20:32 (12 hours ago)	Blocked by UFW on Jellyfin [23/tcp] Source port: 49617 TTL: 44 Packet length: 60 TOS: 0x00 This rep ... show more Blocked by UFW on Jellyfin [23/tcp] Source port: 49617 TTL: 44 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-09-01 09:05:34 (13 hours ago)	Port Scan Attack proto:TCP src:8698 dst:23	Port Scan
🇺🇸 RAP	2026-09-01 07:35:49 (14 hours ago)	2026-09-01 07:35:49 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 xmission.com	2026-09-01 01:00:01 (21 hours ago)	Blocked by UFW (TCP on 23) Source port: 30536 TTL: 45 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 30536 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 122.97.209.88) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 sumnone	2026-08-31 20:22:25 (1 day ago)	Port probing on unauthorized port 23	Port Scan Hacking Exploited Host
🇺🇸 heyzg	2026-08-22 16:15:04 (1 week ago)	API LLMjacking (Ollama) (observed): 7 HTTP, 14s; attempted outbound scan & cryptomining; Ollama: /v1 ... show more API LLMjacking (Ollama) (observed): 7 HTTP, 14s; attempted outbound scan & cryptomining; Ollama: /v1/models,/v1/chat/completions show less	Hacking Web App Attack
🇺🇸 MPL	2026-08-19 16:20:13 (1 week ago)	tcp/23	Port Scan
🇺🇸 Execoop	2026-08-08 18:37:11 (3 weeks ago)	API LLMjacking (Ollama) (observed): 3 HTTP, 19s; attempted cryptomining; Ollama: /api/generate,/api/ ... show more API LLMjacking (Ollama) (observed): 3 HTTP, 19s; attempted cryptomining; Ollama: /api/generate,/api/chat show less	Hacking Web App Attack
🇩🇪 heyzg	2026-08-08 17:18:17 (3 weeks ago)	API LLMjacking (Ollama) (observed): 3 HTTP, 1s; attempted cryptomining; Ollama: /api/generate,/api/c ... show more API LLMjacking (Ollama) (observed): 3 HTTP, 1s; attempted cryptomining; Ollama: /api/generate,/api/chat show less	Hacking Web App Attack
🇸🇬 heyzg	2026-08-08 17:03:03 (3 weeks ago)	API LLMjacking (Ollama) (observed): 1 HTTP; attempted cryptomining; Ollama: /api/generate	Hacking Web App Attack
🇯🇵 Execoop	2026-07-26 13:56:46 (1 month ago)	API honeypot \| LLMjacking (Ollama) \| 5 HTTP, 32s \| tactics: cryptomining \| Ollama: /api/generate,/ap ... show more API honeypot \| LLMjacking (Ollama) \| 5 HTTP, 32s \| tactics: cryptomining \| Ollama: /api/generate,/api/chat show less	Hacking Web App Attack
🇬🇧 PeravixGroup	2026-06-30 03:43:54 (2 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 TPI-Abuse	2026-06-29 21:51:39 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 122.97.209.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 122.97.209.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 17:51:31.983468 2026] [security2:error] [pid 946:tid 946] [client 122.97.209.88:38987] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|renjunews.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "renjunews.com"] [uri "/"] [unique_id "akLo45jzYSJhWwBAoOrsCgAAAAU"], referer: https://renjunews.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cybsecaoccol	2026-06-23 01:29:23 (2 months ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇬🇧 PeravixGroup	2026-06-17 03:10:49 (2 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.152.246.79

🇦🇷 179.49.122.63

🇯🇵 35.221.70.127

🇫🇷 2a01:cb19:8293:1000:21ab:5e90:b3e2:e32a

🇲🇦 196.89.55.5

🇦🇷 179.37.55.179

🇺🇸 172.98.32.226

🇨🇳 113.142.60.99

🇻🇳 103.167.89.213

🇬🇧 45.82.76.118

🇺🇸 34.186.128.154

🇹🇼 198.235.24.84

🇦🇷 190.220.172.154

🇵🇰 182.178.35.184

🇦🇷 179.36.254.105

🇲🇽 158.23.18.78

🇷🇺 95.71.83.3

🇺🇸 66.132.186.132

🇦🇷 186.125.55.19

🇦🇷 179.36.102.154