JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.8.45.250

122.8.45.250 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 30%: ?

30%

ISP	Beijing CNISP Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	cnisp.org.cn
Country	🇫🇮 Finland
City	Vantaa, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.8.45.250

Whois 122.8.45.250

IP Abuse Reports for 122.8.45.250:

This IP address has been reported a total of 11 times from 6 distinct sources. 122.8.45.250 was first reported on April 17th 2023, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-14 15:43:17 (11 hours ago)	(mod_security) mod_security (id:225170) triggered by 122.8.45.250 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.45.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 11:43:11.827523 2026] [security2:error] [pid 10899:tid 10899] [client 122.8.45.250:38213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mprise.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mprise.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai7MD_hNgPhE8L7hMXcWcAAAAAk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-09 14:15:34 (5 days ago)	Web password guessing	Brute-Force
🇨🇦 electronico	2026-05-29 18:00:38 (2 weeks ago)	122.8.45.250 - - [30/May/2026:05:00:37 +1100] "POST /xmlrpc.php HTTP/1.1" 200 4231 "-" "curl/8.6.0" ... show more 122.8.45.250 - - [30/May/2026:05:00:37 +1100] "POST /xmlrpc.php HTTP/1.1" 200 4231 "-" "curl/8.6.0" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 07:01:17 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 122.8.45.250 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.45.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 03:01:10.269855 2026] [security2:error] [pid 17458:tid 17564] [client 122.8.45.250:59409] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|philacentric.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "philacentric.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahaWtoJQKwwI03t9LR68hwAAAMo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 14:02:29 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 122.8.45.250 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.45.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 10:02:24.717450 2026] [security2:error] [pid 22791:tid 22791] [client 122.8.45.250:64601] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahWn8Ef1ZALLyNu2ny9vtgAAAAk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 12:41:46 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 122.8.45.250 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.45.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 08:41:39.505100 2026] [security2:error] [pid 14393:tid 14393] [client 122.8.45.250:22691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mordesign1.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mordesign1.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahRDg68nCRXQxR2iA5oC4gAAAAc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-24 20:38:49 (3 weeks ago)	Web password guessing	Brute-Force
🇺🇸 ambor	2026-05-20 22:03:46 (3 weeks ago)	Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 12:48:47 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 122.8.45.250 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.45.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 08:48:41.627495 2026] [security2:error] [pid 14080:tid 14080] [client 122.8.45.250:15401] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|austingrammer.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "austingrammer.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agRzKUS-CbTcrUEtCzWYaQAAAB4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-05-12 23:23:16 (1 month ago)	[WedMay1301:23:11.9269102026][security2:error][pid776761:tid776855][client122.8.45.250:0]ModSecurity ... show more [WedMay1301:23:11.9269102026][security2:error][pid776761:tid776855][client122.8.45.250:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"feldenkraisticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"agO2Xzj7rOQmyty3BGXCogAAAJg\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Fusl	2023-04-17 11:15:45 (3 years ago)	received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:02 -0400 From: postmaster@vnjatp ... show more received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:02 -0400 From: [email protected] Subject: Delivery report To: [email protected] MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="[email protected]" [email protected] Content-Type: text/plain Hello, this is the mail server on vnjatpcx.com. I am sending you this message to inform you on the delivery status of a message you previously sent. Immediately below you will find a list of the affected recipients; also attached is a Delivery Status Notification (DSN) report in standard format, as well as the headers of the original message. <[email protected]> delivery failed; will not continue trying [email protected] Content-Type: message/delivery-status Original-Envelope-Id: 383;639855;0000007010;pawan1 Reporting-MTA: dns;vnjatpcx.com X-PowerMTA-VirtualMTA: nvmta_0493 Received-From-MTA: dns;localhost (127.0.0.1) Arrival-Date: Mon, 17 Apr 2023 07:0 show less	Email Spam

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.51.166

🇺🇸 147.182.180.119

🇺🇸 66.45.144.201

🇲🇦 41.251.225.196

🇺🇸 194.62.107.141

🇨🇴 181.54.0.58

🇮🇩 150.107.136.45

🇬🇧 147.148.205.252

🇺🇸 136.175.193.222

🇲🇲 103.59.163.135

🇺🇸 64.62.197.170

🇸🇬 43.160.249.98

🇺🇸 34.162.212.190

🇩🇪 31.76.27.231

🇺🇸 184.56.169.255

🇮🇳 182.78.67.22

🇱🇰 124.43.10.224

🇺🇸 64.227.97.8

🇸🇬 47.128.22.122

🇨🇳 47.95.199.109