AbuseIPDB » 162.158.148.172

162.158.148.172 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	CloudFlare Inc.
Usage Type	Content Delivery Network
Domain Name	cloudflare.com
Country	Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Important Note: 162.158.148.172 is an IP address from within our whitelist. Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

According to our records, this IP belongs to the subnet 162.158.0.0/15, identified as: "Cloudflare Reverse Proxy"

Report 162.158.148.172

Whois 162.158.148.172

IP Abuse Reports for 162.158.148.172:

This IP address has been reported a total of 18 times from 8 distinct sources. 162.158.148.172 was first reported on November 23rd 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-10-03 06:43:39 (1 week ago)	\| CMS (WordPress or Joomla) brute force attempt 10 times (rewritten)	Hacking SQL Injection Web App Attack
Anonymous	2024-09-28 11:01:17 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
updown.io	2024-09-13 04:48:09 (4 weeks ago)	{"level":"info","ts":1726202880.3873434,"logger":"http.log.access.log1","msg":"handled request","req ... show more{"level":"info","ts":1726202880.3873434,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"162.158.148.172","remote_port":"35238","client_ip":"162.158.148.172","proto":"HTTP/1.1","method":"GET","host":"status.rehear.me","uri":"/themes/alera/gecko.php","headers":{"X-Forwarded-For":["91.199.118.57"],"Cf-Ray":["8c2580a25d2bbbd9-FRA"],"X-Forwarded-Proto":["http"],"User-Agent":["Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"],"Insecure-Flag":["1"],"Cf-Visitor":["{\"scheme\":\"http\"}"],"Cf-Connecting-Ip":["91.199.118.57"],"Accept-Encoding":["gzip"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Ipcountry":["DE"]}},"bytes_read":0,"user_id":"","duration":0.000094189,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.rehear.me/themes/alera/gecko.php"],"Content-Type":[]}} {"level":"info","ts":1726202880.4726324,"logger":"http.log.access.log1","msg":" ... show less	DDoS Attack Web App Attack
Anonymous	2024-09-10 07:43:59 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
SOC [GOLINE SA]	2024-08-13 17:00:03 (1 month ago)	FortiGate detected IPS attempt	Hacking
Anonymous	2024-08-10 14:48:09 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
SOC [GOLINE SA]	2024-07-06 17:00:03 (3 months ago)	FortiGate detected IPS attempt	Hacking
SOC [GOLINE SA]	2024-06-28 01:00:04 (3 months ago)	FortiGate detected IPS attempt	Hacking
Galaxyweb AG	2023-01-12 03:02:05 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 162.158.148.172 (CH/ ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 162.158.148.172 (CH/Switzerland/Zurich/Zurich/-): (CF_ENABLE) show less	Bad Web Bot
Saleh7	2021-07-05 15:25:43 (3 years ago)	srv02 DDoS Malware Target(80:http) ..	Hacking SQL Injection Web App Attack
Saleh7	2021-06-30 14:25:48 (3 years ago)	srv02 DDoS Malware Target(80:http) ..	Hacking SQL Injection Web App Attack
Saleh7	2021-06-24 14:15:38 (3 years ago)	srv02 DDoS Malware Target(80:http) ..	Hacking SQL Injection Web App Attack
Saleh7	2021-06-21 09:51:32 (3 years ago)	srv02 DDoS Malware Target(80:http) ..	Hacking SQL Injection Web App Attack
Saleh7	2021-06-15 15:51:45 (3 years ago)	srv02 DDoS Malware Target(80:http) ..	Hacking SQL Injection Web App Attack
stfw	2021-04-30 19:47:38 (3 years ago)	8080/tcp 8080/tcp [2021-04-30]2pkt	Port Scan