JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.97.215.193

122.97.215.193 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 27%: ?

27%

ISP	China Unicom Jiangsu province network
Usage Type	Mobile ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.97.215.193

Whois 122.97.215.193

IP Abuse Reports for 122.97.215.193:

This IP address has been reported a total of 23 times from 16 distinct sources. 122.97.215.193 was first reported on April 28th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 alternat0r	2026-06-29 07:14:36 (1 week ago)	Jun 29 15:14:33 cloud-server-0 sshd[3877770]: pam_unix(sshd:auth): authentication failure; logname= ... show more Jun 29 15:14:33 cloud-server-0 sshd[3877770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.97.215.193 Jun 29 15:14:35 cloud-server-0 sshd[3877770]: Failed password for invalid user changxu from 122.97.215.193 port 3632 ssh2 ... show less	FTP Brute-Force Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
🇦🇺 LiftUp Hosting	2026-06-27 15:11:21 (1 week ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET	Hacking Port Scan
🇦🇹 urnilxfgbez	2026-06-24 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 SMi-Web	2026-06-24 07:42:48 (2 weeks ago)	Blocked by firewall on munin [8081/tcp] \| Rule: GeoIP \| SPT: 3229 \| TTL: 43 \| LEN: 60 \| TOS: 0x00 • ... show more Blocked by firewall on munin [8081/tcp] \| Rule: GeoIP \| SPT: 3229 \| TTL: 43 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 VXG-NET	2026-06-20 15:42:32 (2 weeks ago)	port=80, indicator_type=code-execution	Hacking
🇩🇪 kingjan1999	2026-05-05 17:49:27 (2 months ago)	Blocked by UFW [52869/tcp] \| SPT: 21936 \| TTL: 41 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [52869/tcp] \| SPT: 21936 \| TTL: 41 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-04-28 23:30:17 (2 months ago)	Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRI ... show more Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRITICAL. Aaran.cloud show less	Hacking IoT Targeted
🇹🇷 rtbh.com.tr	2026-03-14 20:12:03 (3 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
🇩🇪 Moritz	2026-03-14 13:00:23 (3 months ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET	Hacking Port Scan
🇺🇸 TPI-Abuse	2026-02-17 20:28:27 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 122.97.215.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 122.97.215.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 15:28:20.881794 2026] [security2:error] [pid 30095:tid 30095] [client 122.97.215.193:27221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.thedieselgroupllc.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.thedieselgroupllc.com"] [uri "/"] [unique_id "aZTPZNvbjxC-OXx5ZUPftgAAAAw"], referer: http://www.thedieselgroupllc.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-04 23:51:18 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 122.97.215.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 122.97.215.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 18:51:13.500405 2026] [security2:error] [pid 6399:tid 6399] [client 122.97.215.193:5694] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|kaleidoscope-glass.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "kaleidoscope-glass.com"] [uri "/"] [unique_id "aYPbcYfBw1q0_Z1eov8ZSwAAAAI"], referer: http://kaleidoscope-glass.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-01-17 05:51:38 (5 months ago)	Blocked by UFW (TCP on 23) Source port: 5843 TTL: 48 Packet length: 40 TOS: 0x00 This report (for 1 ... show more Blocked by UFW (TCP on 23) Source port: 5843 TTL: 48 Packet length: 40 TOS: 0x00 This report (for 122.97.215.193) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-01-09 08:51:59 (6 months ago)	Unauthorized connection to Telnet port 23	Port Scan
🇭🇺 szir	2025-12-18 16:13:26 (6 months ago)	Portscan detected	Port Scan
🇺🇸 RAP	2025-12-18 13:28:31 (6 months ago)	2025-12-18 13:28:31 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.185.19.172

🇫🇮 147.185.133.98

🇨🇳 122.96.28.150

🇰🇿 93.95.241.150

🇫🇷 88.164.92.228

🇮🇷 85.198.19.253

🇺🇸 47.90.196.33

🇯🇵 212.135.208.13

🇭🇰 199.45.155.91

🇳🇱 193.176.31.202

🇨🇴 179.1.181.217

🇻🇳 157.66.27.55

🇺🇸 104.131.184.190

🇻🇳 103.82.20.130

🇫🇷 91.231.89.81

🇺🇸 50.114.184.100

🇺🇸 50.2.184.242

🇷🇺 37.78.103.241

🇬🇧 35.203.211.168

🇸🇬 13.212.90.153