JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.8.45.166

122.8.45.166 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 30%: ?

30%

ISP	Beijing CNISP Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	cnisp.org.cn
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.8.45.166

Whois 122.8.45.166

IP Abuse Reports for 122.8.45.166:

This IP address has been reported a total of 13 times from 9 distinct sources. 122.8.45.166 was first reported on April 17th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 voormedia	2026-07-02 17:07:59 (2 days ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇨🇭 backslash	2026-06-18 00:06:00 (2 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 nationaleventpros.com	2026-06-14 19:42:26 (2 weeks ago)	WordPress login attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-06-11 10:34:06 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 122.8.45.166 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.45.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 06:33:58.843873 2026] [security2:error] [pid 11839:tid 11839] [client 122.8.45.166:53929] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|opere.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "opere.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiqPFhGdZ0GJaNbbVdWiIQAAABo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-08 00:57:07 (3 weeks ago)	FPROCO WEBEXPLOIT 122.8.45.166 (122.8.45.166)	Web App Attack
Anonymous	2026-05-30 14:19:17 (1 month ago)	FPROCO WEBEXPLOIT 122.8.45.166 (122.8.45.166)	Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 00:13:11 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 122.8.45.166 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.45.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 20:13:03.956205 2026] [security2:error] [pid 23469:tid 23469] [client 122.8.45.166:30293] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tanny.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tanny.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahOUD8ZjinH7fhzTXxzZhwAAAAY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-21 14:43:16 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 122.8.45.166 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.45.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 10:43:12.986474 2026] [security2:error] [pid 12702:tid 12702] [client 122.8.45.166:37897] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|firstunitedreserve.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "firstunitedreserve.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag8aAEQuRqh9xxjcEnKglwAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-21 11:10:33 (1 month ago)	Web password guessing	Brute-Force
🇺🇸 TPI-Abuse	2026-03-10 20:18:58 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 122.8.45.166 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.45.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 16:18:53.677904 2026] [security2:error] [pid 23861:tid 23861] [client 122.8.45.166:16937] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gamedayincentives.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gamedayincentives.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abB8rWk1XTu8-n3C6tlo3wAAABo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2025-12-11 04:56:27 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 122.8.45.166 (SE/Sweden/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 122.8.45.166 (SE/Sweden/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 Packets-Decreaser.NET	2025-11-17 16:50:54 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Fusl	2023-04-17 11:14:38 (3 years ago)	received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:02 -0400 From: postmaster@rpaypa ... show more received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:02 -0400 From: [email protected] Subject: Delivery report To: [email protected] MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="[email protected]" [email protected] Content-Type: text/plain Hello, this is the mail server on rpaypaarpunw.com. I am sending you this message to inform you on the delivery status of a message you previously sent. Immediately below you will find a list of the affected recipients; also attached is a Delivery Status Notification (DSN) report in standard format, as well as the headers of the original message. <[email protected]> delivery failed; will not continue trying [email protected] Content-Type: message/delivery-status Original-Envelope-Id: 383;639855;0000007010;pawan1 Reporting-MTA: dns;rpaypaarpunw.com X-PowerMTA-VirtualMTA: nvmta_0409 Received-From-MTA: dns;localhost (127.0.0.1) Arrival-Dat show less	Email Spam

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.227

🇷🇺 95.79.57.221

🇨🇳 106.12.29.184

🇨🇦 65.7.2.44

🇮🇳 20.204.32.32

🇿🇦 4.221.162.168

🇷🇺 212.107.233.209

🇺🇸 142.93.255.85

🇨🇳 124.88.117.115

🇩🇪 94.26.106.33

🇹🇷 84.247.20.188

🇱🇺 45.132.195.82

🇺🇸 207.180.11.2

🇫🇷 185.177.72.51

🇺🇸 157.230.227.60

🇫🇮 147.185.133.10

🇺🇸 104.248.78.177

🇱🇹 62.60.130.219

🇭🇰 43.135.107.42

🇰🇷 211.222.5.245