JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.8.46.234

122.8.46.234 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 26%: ?

26%

ISP	Beijing CNISP Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	cnisp.org.cn
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.8.46.234

Whois 122.8.46.234

IP Abuse Reports for 122.8.46.234:

This IP address has been reported a total of 9 times from 5 distinct sources. 122.8.46.234 was first reported on April 17th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-21 14:48:47 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 122.8.46.234 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.46.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 10:48:40.476880 2026] [security2:error] [pid 26104:tid 26104] [client 122.8.46.234:14977] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wisk.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wisk.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajf5yERFAHov-8iJ5QUI6wAAAAs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-09 23:17:56 (1 week ago)	Web password guessing	Brute-Force
🇨🇦 1gz	2026-06-04 13:44:37 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-04 13:44:36 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-login.php UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-31 19:35:29 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 122.8.46.234 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.46.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 15:35:23.660076 2026] [security2:error] [pid 20541:tid 20541] [client 122.8.46.234:64539] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hendersonhomes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hendersonhomes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahyNe4cGobpEpNMI1cW6YAAAABY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-30 15:41:48 (3 weeks ago)	Web password guessing	Brute-Force
Anonymous	2026-05-30 14:22:37 (3 weeks ago)	FPROCO WEBEXPLOIT 122.8.46.234 (122.8.46.234)	Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 03:06:25 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 122.8.46.234 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 122.8.46.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 23:06:20.003756 2026] [security2:error] [pid 16357:tid 16357] [client 122.8.46.234:24121] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wplusw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wplusw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahO8rPBWO3X87o8eqrK_nQAAABA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Fusl	2023-04-17 11:20:04 (3 years ago)	received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:03 -0400 From: postmaster@terfwm ... show more received unsolicited smtp data stream: Date: Mon, 17 Apr 2023 07:08:03 -0400 From: [email protected] Subject: Delivery report To: [email protected] MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="[email protected]" [email protected] Content-Type: text/plain Hello, this is the mail server on terfwmgo.com. I am sending you this message to inform you on the delivery status of a message you previously sent. Immediately below you will find a list of the affected recipients; also attached is a Delivery Status Notification (DSN) report in standard format, as well as the headers of the original message. <[email protected]> delivery failed; will not continue trying [email protected] Content-Type: message/delivery-status Original-Envelope-Id: 383;639855;0000007010;pawan1 Reporting-MTA: dns;terfwmgo.com X-PowerMTA-VirtualMTA: nvmta_0725 Received-From-MTA: dns;localhost (127.0.0.1) Arrival-Date: Mon, 17 Apr 2023 07:0 show less	Email Spam

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.85

🇭🇳 177.10.186.193

🇳🇱 149.143.89.126

🇺🇸 134.209.120.216

🇨🇳 112.19.161.224

🇻🇳 103.130.208.22

🇺🇸 65.49.1.178

🇺🇸 44.201.249.175

🇨🇳 182.43.164.191

🇩🇪 167.94.145.23

🇷🇺 109.174.1.27

🇧🇬 79.124.40.110

🇳🇱 45.148.10.147

🇧🇷 20.226.2.115

🇺🇸 157.245.208.39

🇺🇸 141.11.88.4

🇺🇸 135.119.96.214

🇯🇵 124.155.125.131

🇨🇳 116.63.245.187

🇷🇴 80.94.92.166