JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

162.158.122.102

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

29 reports

10 reporters · latest 1 week ago

162.158.122.102 is on our whitelist as Cloudflare Reverse Proxy via the subnet 162.158.0.0/15.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇪🇸 Spain
City: Madrid, Madrid

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

29 from 10 distinct reporters

First reported

December 4th 2024

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇩🇪 Germany 3 🇧🇷 Brazil 2

Most common categories Web App Attack 9 Brute-Force 9 Bad Web Bot 5 SSH 2

Old reports The most recent abuse report for this IP address is from 1 week ago. This IP is on our whitelist as Cloudflare Reverse Proxy.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 madeit	2026-11-03 23:08:05 UTC · (1 week ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 22:09:16 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.102 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 18:09:09.647293 2026] [security2:error] [pid 8090:tid 8110] [client 162.158.122.102:12361] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.102 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 18:09:09.647293 2026] [security2:error] [pid 8090:tid 8110] [client 162.158.122.102:12361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tmsinspections.com"] [uri "/.git/HEAD"] [unique_id "atFPBd0Z-2vwiyFBn57S6QAAARE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 21:10:23 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.102 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 17:10:15.522642 2026] [security2:error] [pid 30859:tid 30859] [client 162.158.122.102:1105 ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.102 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 17:10:15.522642 2026] [security2:error] [pid 30859:tid 30859] [client 162.158.122.102:11050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prayers4america.com"] [uri "/.env"] [unique_id "atFBN6tidgjxdINNs4M0AwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 16:36:35 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.102 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:36:23.104327 2026] [security2:error] [pid 26300:tid 26300] [client 162.158.122.102:1300 ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.102 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:36:23.104327 2026] [security2:error] [pid 26300:tid 26300] [client 162.158.122.102:13001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "retiredengineers.net"] [uri "/wp-config.php.save"] [unique_id "atEBBwvdawvEh5sCBDDAEwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 15:50:15 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.102 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 11:49:58.419250 2026] [security2:error] [pid 30258:tid 30258] [client 162.158.122.102:1244 ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.102 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 11:49:58.419250 2026] [security2:error] [pid 30258:tid 30258] [client 162.158.122.102:12444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cartiologyfilms.com"] [uri "/.env.dev"] [unique_id "atD2JjqpDZMlWNiSc-SrqAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-10-15 12:20:10 UTC · (3 weeks ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-10-15 12:11:08 UTC · (3 weeks ago)	162.158.122.102 - - [15/Oct/2026:14:10:57 +0200] "GET /wp-config.php.bak HTTP/1.1" 301 594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 162.158.122.102 - - [15/Oct/2026:14:10:52 ... show more 162.158.122.102 - - [15/Oct/2026:14:10:57 +0200] "GET /wp-config.php.bak HTTP/1.1" 301 594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 162.158.122.102 - - [15/Oct/2026:14:10:52 +0200] "GET /wp-config.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 162.158.122.102 - - [15/Oct/2026:14:10:54 +0200] "GET /index.php.save HTTP/2.0" 404 358 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15" 162.158.122.102 - - [15/Oct/2026:14:10:54 +0200] "GET /.index.php.swp HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 162.158.122.102 - - [15/Oct/2026:14:10:54 +0200] "GET /index.php.save HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/6 show less	Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-10-15 10:18:18 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.102 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:17:57.504318 2026] [security2:error] [pid 4596:tid 4596] [client 162.158.122.102:9219] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.102 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:17:57.504318 2026] [security2:error] [pid 4596:tid 4596] [client 162.158.122.102:9219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bvi-boat-registration.com"] [uri "/.htaccess"] [unique_id "atCoVZQ4SAT8efrKF0DQDAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 paradoxnetworks	2026-10-06 04:42:08 UTC · (1 month ago)	2026-10-06T04:40:27.529238+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[526545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.158.122.102 2026-10-06T04:40:29.621881+00:00 edge-con-sao01.int.pdx.net.u ... show more 2026-10-06T04:40:27.529238+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[526545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.158.122.102 2026-10-06T04:40:29.621881+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[526545]: Failed password for invalid user raju from 162.158.122.102 port 50162 ssh2 2026-10-06T04:42:06.787453+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[526809]: Invalid user jiangsuqiwei from 162.158.122.102 port 55585 ... show less	Brute-Force SSH
Anonymous	2026-09-28 02:03:42 UTC · (1 month ago)	[Mon Sep 28 04:03:40.477398 2026] [authz_core:error] [pid 19191] [client 162.158.122.102:14041] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Sep 28 04:03:40.545152 2026] [authz_core:error] [pid 19191] [client 162.158.122.102 ... show more [Mon Sep 28 04:03:40.477398 2026] [authz_core:error] [pid 19191] [client 162.158.122.102:14041] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Sep 28 04:03:40.545152 2026] [authz_core:error] [pid 19191] [client 162.158.122.102:14041] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Sep 28 04:03:40.612010 2026] [authz_core:error] [pid 19191] [client 162.158.122.102:14041] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇧🇷 paradoxnetworks	2026-09-17 21:24:22 UTC · (1 month ago)	2026-09-17T21:24:19.325869+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1054342]: Invalid user alex from 162.158.122.102 port 60489 2026-09-17T21:24:19.489926+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1054342]: pam_unix(sshd:auth): authent ... show more 2026-09-17T21:24:19.325869+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1054342]: Invalid user alex from 162.158.122.102 port 60489 2026-09-17T21:24:19.489926+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1054342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.158.122.102 2026-09-17T21:24:21.588112+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1054342]: Failed password for invalid user alex from 162.158.122.102 port 60489 ssh2 ... show less	Brute-Force SSH
🇧🇪 madeit	2026-09-08 07:14:33 UTC · (2 months ago)		Web App Attack
🇧🇷 paradoxnetworks	2026-09-06 18:53:11 UTC · (2 months ago)	2026-09-06T18:53:07.950212+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3197394]: Invalid user minecraft from 162.158.122.102 port 51679 2026-09-06T18:53:08.094422+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3197394]: pam_unix(sshd:auth): au ... show more 2026-09-06T18:53:07.950212+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3197394]: Invalid user minecraft from 162.158.122.102 port 51679 2026-09-06T18:53:08.094422+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3197394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.158.122.102 2026-09-06T18:53:10.397973+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3197394]: Failed password for invalid user minecraft from 162.158.122.102 port 51679 ssh2 ... show less	Brute-Force SSH
🇧🇪 madeit	2026-08-14 15:52:40 UTC · (2 months ago)		Web App Attack
Anonymous	2026-08-13 15:57:31 UTC · (2 months ago)	[Thu Aug 13 17:57:30.441056 2026] [authz_core:error] [pid 737] [client 162.158.122.102:12509] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Aug 13 17:57:30.520166 2026] [authz_core:error] [pid 737] [client 162.158.122.102:125 ... show more [Thu Aug 13 17:57:30.441056 2026] [authz_core:error] [pid 737] [client 162.158.122.102:12509] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Aug 13 17:57:30.520166 2026] [authz_core:error] [pid 737] [client 162.158.122.102:12509] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Aug 13 17:57:30.556512 2026] [authz_core:error] [pid 737] [client 162.158.122.102:12509] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 120.83.229.113

🇺🇸 103.102.246.108

🇺🇸 23.234.103.73

🇺🇸 216.218.206.68

🇧🇪 198.235.24.165

🇷🇴 185.100.87.192

🇺🇸 173.249.253.93

🇺🇸 142.93.246.158

🇨🇳 120.48.20.147

🇫🇷 88.189.183.137

🇳🇱 77.239.124.143

🇺🇸 23.234.100.116

🇺🇸 23.234.93.48

🇺🇸 23.234.78.150

🇺🇸 23.234.74.54

🇻🇳 14.250.161.115

🇫🇷 212.83.141.109

🇧🇪 198.235.24.154

🇧🇪 198.235.24.139

🇹🇼 198.235.24.14