JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

162.158.103.22

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

99 reports

27 reporters · latest 42 minutes ago

162.158.103.22 is on our whitelist as Cloudflare Reverse Proxy via the subnet 162.158.0.0/15.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇵🇱 Poland
City: Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

99 from 27 distinct reporters

First reported

May 6th 2023

Most recent report

42 minutes ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 20 🇧🇪 Belgium 2 🇩🇪 Germany 2

Most common categories Web App Attack 27 Bad Web Bot 21 Brute-Force 20 Hacking 1 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 todix	2026-11-13 14:48:07 UTC · (42 minutes ago)	"GET /.git/HEAD HTTP/2.0" 403 277 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"	Web App Attack
🇩🇪 FeG Deutschland	2026-11-13 14:26:24 UTC · (1 hour ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 10:01:18 UTC · (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:01:10.437975 2026] [security2:error] [pid 7817:tid 7837] [client 162.158.103.22:11971] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:01:10.437975 2026] [security2:error] [pid 7817:tid 7837] [client 162.158.103.22:11971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "financialanalyst.org"] [uri "/.git/HEAD"] [unique_id "avbf5vi_dpqnaONTH4IRZgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 04:44:23 UTC · (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:44:17.864379 2026] [security2:error] [pid 2617:tid 2617] [client 162.158.103.22:14141] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:44:17.864379 2026] [security2:error] [pid 2617:tid 2617] [client 162.158.103.22:14141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.radiointernational.net"] [uri "/.git/config"] [unique_id "avaVof42-sDgpEkecUrcQQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-12 06:07:10 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:07:06.641369 2026] [security2:error] [pid 28670:tid 28670] [client 162.158.103.22:10429] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:07:06.641369 2026] [security2:error] [pid 28670:tid 28670] [client 162.158.103.22:10429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.binglawoffice.com"] [uri "/.git/config"] [unique_id "avVXijxJ_a5M9ly---8uTgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-12 04:46:23 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:46:20.164049 2026] [security2:error] [pid 21775:tid 21775] [client 162.158.103.22:12558] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:46:20.164049 2026] [security2:error] [pid 21775:tid 21775] [client 162.158.103.22:12558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shafoo.com.sentientresearch.com"] [uri "/.git/HEAD"] [unique_id "avVEnHCFqHITMO0n-yDa8QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-12 04:15:07 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:15:00.006411 2026] [security2:error] [pid 17762:tid 17762] [client 162.158.103.22:13559] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:15:00.006411 2026] [security2:error] [pid 17762:tid 17762] [client 162.158.103.22:13559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.qavideo.com"] [uri "/.git/config"] [unique_id "avU9RHA0oB1vOEd3KdDt8wAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-11 08:16:55 UTC · (2 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 03:16:50.779617 2026] [security2:error] [pid 4551:tid 4551] [client 162.158.103.22:10073] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 03:16:50.779617 2026] [security2:error] [pid 4551:tid 4551] [client 162.158.103.22:10073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.eqmarino.cl"] [uri "/.git/HEAD"] [unique_id "avQkcpHva58dbab2WYNd3wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 14:45:07 UTC · (3 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:45:00.371894 2026] [security2:error] [pid 25472:tid 25472] [client 162.158.103.22:9724] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:45:00.371894 2026] [security2:error] [pid 25472:tid 25472] [client 162.158.103.22:9724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nexti.com.hk"] [uri "/.git/config"] [unique_id "avMt7FLvydq1LvbPGzjVhQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 06:03:46 UTC · (3 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:03:41.569367 2026] [security2:error] [pid 21980:tid 21980] [client 162.158.103.22:12421] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:03:41.569367 2026] [security2:error] [pid 21980:tid 21980] [client 162.158.103.22:12421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solarfarms.info"] [uri "/.git/config"] [unique_id "avKzvSw6TEejLfLS5xV80AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 09:56:04 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:55:59.559007 2026] [security2:error] [pid 7807:tid 7807] [client 162.158.103.22:9651] Mo ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:55:59.559007 2026] [security2:error] [pid 7807:tid 7807] [client 162.158.103.22:9651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4azadi.org"] [uri "/.git/config"] [unique_id "avGYrwhkgz64NXCSO8SyTwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 08:49:44 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:49:38.971007 2026] [security2:error] [pid 11993:tid 11993] [client 162.158.103.22:11170] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:49:38.971007 2026] [security2:error] [pid 11993:tid 11993] [client 162.158.103.22:11170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.grmvrr.powerlinemultimedia.net"] [uri "/.git/config"] [unique_id "avGJIi5zsO6Iae2pUP4UbwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 08:00:33 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:00:29.575255 2026] [security2:error] [pid 28896:tid 28903] [client 162.158.103.22:11333] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:00:29.575255 2026] [security2:error] [pid 28896:tid 28903] [client 162.158.103.22:11333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "advantagepluscaregivers.richardleeweatherman.com"] [uri "/.git/config"] [unique_id "avF9ner4djNYd33rOFdwLwAAAUI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-11-09 07:51:02 UTC · (4 days ago)	[09/Nov/2026:09:51:01 +0200] -- 162.158.103.22 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-09 07:45:09 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:45:01.287345 2026] [security2:error] [pid 31487:tid 31487] [client 162.158.103.22:9778] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.103.22 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:45:01.287345 2026] [security2:error] [pid 31487:tid 31487] [client 162.158.103.22:9778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.stefchild.com"] [uri "/.git/config"] [unique_id "avF5_UrKqSHa8iBn7uJwEgAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 220.127.148.6

🇺🇦 194.9.14.129

🇩🇪 167.148.195.148

🇺🇸 147.185.132.87

🇺🇸 142.4.5.181

🇨🇳 125.39.11.27

🇰🇷 121.141.6.41

🇺🇸 24.14.125.181

🇺🇸 23.234.113.125

🇺🇸 207.254.40.89

🇺🇸 205.210.31.32

🇲🇾 202.165.29.219

🇬🇧 188.240.59.18

🇫🇷 161.97.97.229

🇸🇬 159.223.38.40

🇺🇸 159.65.224.182

🇫🇮 155.212.111.75

🇮🇷 151.232.20.145

🇺🇸 147.185.132.255

🇺🇸 147.185.132.45