JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

162.158.122.4

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

69 reports

9 reporters · latest 1 hour ago

162.158.122.4 is on our whitelist as Cloudflare Reverse Proxy via the subnet 162.158.0.0/15.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇪🇸 Spain
City: Madrid, Madrid

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

69 from 9 distinct reporters

First reported

August 3rd 2024

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 6 🇧🇪 Belgium 1

Most common categories Web App Attack 7 Brute-Force 6 Bad Web Bot 6

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 madeit	2026-11-07 15:10:54 UTC · (1 hour ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 19:28:50 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 15:28:39.169561 2026] [security2:error] [pid 20999:tid 20999] [client 162.158.122.4:9384] Mo ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 15:28:39.169561 2026] [security2:error] [pid 20999:tid 20999] [client 162.158.122.4:9384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fibw.com"] [uri "/.env.save"] [unique_id "atEpZzj7d8lnpT5vvWt0ewAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 15:30:06 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 11:29:42.707234 2026] [security2:error] [pid 21763:tid 21763] [client 162.158.122.4:13214] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 11:29:42.707234 2026] [security2:error] [pid 21763:tid 21763] [client 162.158.122.4:13214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.forinashgallery.com"] [uri "/.env.local"] [unique_id "atDxZsAo0TOwWBHEVZ6MrgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 14:45:48 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:45:39.616246 2026] [security2:error] [pid 24628:tid 24628] [client 162.158.122.4:12841] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:45:39.616246 2026] [security2:error] [pid 24628:tid 24628] [client 162.158.122.4:12841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "giganticmediallc.com"] [uri "/.env.bak"] [unique_id "atDnE8GT2XNCqRSNftm3_AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 13:12:52 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:12:27.199304 2026] [security2:error] [pid 21812:tid 21812] [client 162.158.122.4:14084] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:12:27.199304 2026] [security2:error] [pid 21812:tid 21812] [client 162.158.122.4:14084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arborterra.org"] [uri "/wp-config.php"] [unique_id "atDROwWMq5rQgIf60ClDBwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 08:45:49 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:45:34.623065 2026] [security2:error] [pid 25553:tid 25553] [client 162.158.122.4:11557] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:45:34.623065 2026] [security2:error] [pid 25553:tid 25553] [client 162.158.122.4:11557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.hotglassgallery.com"] [uri "/.git/config"] [unique_id "atCSri1ZYMX6HIL6Em5EhgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 08:10:46 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:10:18.155897 2026] [security2:error] [pid 4678:tid 4678] [client 162.158.122.4:9419] ModS ... show more (mod_security) mod_security (id:210492) triggered by 162.158.122.4 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:10:18.155897 2026] [security2:error] [pid 4678:tid 4678] [client 162.158.122.4:9419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emmavance.com"] [uri "/.git/config"] [unique_id "atCKaqbQUVzyCFebtdTrjwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-08-13 01:03:27 UTC · (2 months ago)		Web App Attack
🇻🇪 LUISE	2026-08-05 00:26:44 UTC · (3 months ago)	Vulnerability scanning for Web/phpMyAdmin files on ULA server 72-23.	Hacking Bad Web Bot
🇩🇪 www.mammazone.it	2026-05-11 08:48:34 UTC · (5 months ago)	[Mon May 11 10:48:33.497791 2026] [access_compat:error] [pid 1895665] [client 162.158.122.4:12368] AH01797: client denied by server configuration: /var/www/shutappchat.fabiodirauso.it/.env ...	Hacking Web App Attack
Anonymous	2025-08-23 02:17:16 UTC · (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-08-14 13:48:54 UTC · (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-08-04 02:28:16 UTC · (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-06-15 07:37:16 UTC · (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-05-10 15:53:48 UTC · (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 185.245.184.230

🇸🇬 47.128.42.198

🇭🇰 42.200.66.164

🇺🇸 2604:a940:301:225:0:1f::

🇧🇪 198.235.24.227

🇫🇷 185.177.72.9

🇺🇦 176.105.198.8

🇺🇸 174.68.45.93

🇳🇱 165.22.205.23

🇮🇳 152.52.240.162

🇺🇸 129.121.96.133

🇨🇳 118.145.228.55

🇵🇭 112.203.51.222

🇨🇳 112.46.213.230

🇨🇳 111.61.177.190

🇺🇸 66.223.214.174

🇳🇱 45.156.128.181

🇳🇱 45.148.10.121

🇩🇪 43.157.98.210

🇺🇬 41.210.157.226