JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.8.46.158

122.8.46.158 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 5%: ?

ISP	Beijing CNISP Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	cnisp.org.cn
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.8.46.158

Whois 122.8.46.158

IP Abuse Reports for 122.8.46.158:

This IP address has been reported a total of 4 times from 2 distinct sources. 122.8.46.158 was first reported on April 17th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-19 21:57:46 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 122.8.46.158 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.46.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 17:57:42.133236 2026] [security2:error] [pid 26554:tid 26554] [client 122.8.46.158:24937] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|microdot.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "microdot.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajW7VlTs-pC1G4cpC-zCiwAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 21:23:33 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 122.8.46.158 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.46.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 17:23:26.588027 2026] [security2:error] [pid 30943:tid 30971] [client 122.8.46.158:14411] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|transitionalcareservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "transitionalcareservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af0CzgwFFWHJ9hpwXK69wQAAAVg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-01 08:11:39 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 122.8.46.158 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.46.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 04:11:36.372849 2026] [security2:error] [pid 14977:tid 14977] [client 122.8.46.158:52629] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cgautomatizacion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cgautomatizacion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afRgOI_eRFen7MERZR0Z6wAAAAM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Fusl	2023-04-17 11:18:26 (3 years ago)	received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:02 -0400 From: postmaster@rhbzvi ... show more received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:02 -0400 From: [email protected] Subject: Delivery report To: [email protected] MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="[email protected]" [email protected] Content-Type: text/plain Hello, this is the mail server on rhbzviup.com. I am sending you this message to inform you on the delivery status of a message you previously sent. Immediately below you will find a list of the affected recipients; also attached is a Delivery Status Notification (DSN) report in standard format, as well as the headers of the original message. <[email protected]> delivery failed; will not continue trying [email protected] Content-Type: message/delivery-status Original-Envelope-Id: 383;639855;0000007010;pawan1 Reporting-MTA: dns;rhbzviup.com X-PowerMTA-VirtualMTA: nvmta_0649 Received-From-MTA: dns;localhost (127.0.0.1) Arrival-Date: Mon, 17 Apr 2023 07:0 show less	Email Spam

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.172.221.133

🇸🇬 101.47.156.170

🇺🇸 216.25.89.116

🇺🇸 198.89.96.148

🇺🇸 66.228.40.98

🇬🇧 178.128.32.203

🇭🇰 152.32.239.122

🇨🇳 120.48.34.72

🇧🇬 94.155.124.98

🇩🇪 69.5.169.225

🇰🇷 221.156.126.1

🇨🇳 123.159.170.14

🇺🇸 43.162.89.43

🇺🇸 20.65.194.188

🇲🇽 189.217.130.86

🇩🇪 185.65.202.199

🇳🇱 45.148.10.151

🇷🇴 2.57.122.238

🇺🇸 162.216.150.215

🇳🇱 91.92.40.237