JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

162.158.102.39

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

74 reports

22 reporters · latest 10 hours ago

162.158.102.39 is on our whitelist as Cloudflare Reverse Proxy via the subnet 162.158.0.0/15.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇵🇱 Poland
City: Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

74 from 22 distinct reporters

First reported

December 20th 2022

Most recent report

10 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 17 🇧🇪 Belgium 2 🇩🇪 Germany 2

Most common categories Web App Attack 21 Bad Web Bot 16 Brute-Force 16 Hacking 3

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-10 16:19:42 UTC · (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:19:38.498101 2026] [security2:error] [pid 2238:tid 2238] [client 162.158.102.39:11010] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:19:38.498101 2026] [security2:error] [pid 2238:tid 2238] [client 162.158.102.39:11010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hopeforthefuture.africa.greenlight.us"] [uri "/.git/HEAD"] [unique_id "avNEGiZGopz3BfaaQm-EKAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 07:27:42 UTC · (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:27:36.550568 2026] [security2:error] [pid 6928:tid 6928] [client 162.158.102.39:10190] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:27:36.550568 2026] [security2:error] [pid 6928:tid 6928] [client 162.158.102.39:10190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "momokuwait.gulftelecom.com"] [uri "/.git/HEAD"] [unique_id "avLHaCokGSmFwO4uGG15xgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 00:47:07 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:47:00.168745 2026] [security2:error] [pid 2497267:tid 2497277] [client 162.158.102.39:12 ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:47:00.168745 2026] [security2:error] [pid 2497267:tid 2497277] [client 162.158.102.39:12130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fibertechsystems.com"] [uri "/.git/config"] [unique_id "avJphDEroOJBN-uuYHtaEgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 00:16:41 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:16:34.414263 2026] [security2:error] [pid 4804:tid 4804] [client 162.158.102.39:13842] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:16:34.414263 2026] [security2:error] [pid 4804:tid 4804] [client 162.158.102.39:13842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yongmeihu.com"] [uri "/.git/config"] [unique_id "avJiYu57xtMdl2PzPqAreQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 16:47:07 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:47:00.764309 2026] [security2:error] [pid 25841:tid 25841] [client 162.158.102.39:9494] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:47:00.764309 2026] [security2:error] [pid 25841:tid 25841] [client 162.158.102.39:9494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rentkase.com"] [uri "/.git/config"] [unique_id "avH5BH4Mpwf_L9xmyDck9QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 16:17:18 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:17:11.766666 2026] [security2:error] [pid 18953:tid 18953] [client 162.158.102.39:11264] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:17:11.766666 2026] [security2:error] [pid 18953:tid 18953] [client 162.158.102.39:11264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.rahjx.net"] [uri "/.git/config"] [unique_id "avHyB-lD-YL4PG0m8jHWjgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 altenglaner	2026-11-09 16:12:01 UTC · (1 day ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.	Hacking Web App Attack
🇺🇸 francelink.fr	2026-11-09 15:06:27 UTC · (1 day ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T15:04:17.000Z.	Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 13:55:06 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:55:00.034670 2026] [security2:error] [pid 19118:tid 19118] [client 162.158.102.39:9889] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:55:00.034670 2026] [security2:error] [pid 19118:tid 19118] [client 162.158.102.39:9889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.fvsllc.com"] [uri "/.git/HEAD"] [unique_id "avHQtBJUAvP65S2jRVm1sAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 09:41:18 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:41:14.839038 2026] [security2:error] [pid 17352:tid 17352] [client 162.158.102.39:9988] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:41:14.839038 2026] [security2:error] [pid 17352:tid 17352] [client 162.158.102.39:9988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.clustershow.com"] [uri "/.git/config"] [unique_id "avGVOtkfJA-2ziS5-3uqlgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 08:23:46 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:23:39.624188 2026] [security2:error] [pid 375:tid 375] [client 162.158.102.39:12533] Mod ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:23:39.624188 2026] [security2:error] [pid 375:tid 375] [client 162.158.102.39:12533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.chicagochristmascards.com"] [uri "/.git/config"] [unique_id "avGDCxH8AEdK0VRajDrYigAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 01:42:12 UTC · (2 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:42:08.267545 2026] [security2:error] [pid 10830:tid 10835] [client 162.158.102.39:11267] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:42:08.267545 2026] [security2:error] [pid 10830:tid 10835] [client 162.158.102.39:11267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "volcano-sa.com"] [uri "/.git/HEAD"] [unique_id "avEk8OK1x9-0ZsYuZ-JOhgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 16:25:48 UTC · (2 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:25:42.844987 2026] [security2:error] [pid 10087:tid 10153] [client 162.158.102.39:10249] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:25:42.844987 2026] [security2:error] [pid 10087:tid 10153] [client 162.158.102.39:10249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lsmk.bestofthis.com"] [uri "/.git/HEAD"] [unique_id "avCihpi_3g_sm3EQDnw7PgAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 04:34:22 UTC · (2 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:34:14.921418 2026] [security2:error] [pid 19210:tid 19210] [client 162.158.102.39:12853] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.102.39 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:34:14.921418 2026] [security2:error] [pid 19210:tid 19210] [client 162.158.102.39:12853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rutledgestaircase.com"] [uri "/.git/HEAD"] [unique_id "au_7xmAFOST44sn2theuHwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 tsZero	2026-11-03 23:23:59 UTC · (1 week ago)	Scan example: path=/.git/config status=403	Hacking

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 147.185.133.235

🇺🇸 66.132.172.124

🇺🇸 4.148.17.77

🇸🇪 170.62.100.155

🇺🇸 168.144.62.68

🇺🇸 165.227.16.57

🇳🇱 164.92.219.243

🇺🇸 107.152.44.215

🇧🇩 103.159.2.113

🇰🇪 41.139.140.219

🇲🇽 189.228.56.78

🇺🇦 176.105.198.90

🇺🇸 172.58.149.141

🇫🇷 162.19.79.61

🇨🇳 117.50.50.224

🇫🇷 45.80.27.169

🇬🇧 31.14.254.29

🇨🇳 223.83.183.254

🇺🇿 213.230.86.79

🇺🇸 192.241.97.197