Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
This IP address has been reported a total of
105
times from
30 distinct
sources.
162.158.38.100 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Belgium
with 1
report;
Switzerland
with 1
report;
Netherlands
with 1
report.
The most common categories in these recent reports were:
Web App Attack
3
times;
Hacking
2
times;
SSH
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[TueSep2923:09:22.5142562026][security2:error][pid1292021:tid1292119][client162.158.38.100:0]ModSecu ...
show more[TueSep2923:09:22.5142562026][security2:error][pid1292021:tid1292119][client162.158.38.100:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.hosting-ticino-svizzera-ch.ticino-hosting.ch\"][uri\"/.aws/credentials\"][unique_id\"arwpAvB-4PbL0hwwxgky0AAAARI\"]\,referer:https://www.google.com/search\?q=www.hosting-ticino-svizzera-ch.ticino-hosting.ch
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-15.
show less
[Mon Mar 30 19:32:05.356466 2026] [php:error] [pid 2782511] [client 162.158.38.100:12665] script '/v ...
show more[Mon Mar 30 19:32:05.356466 2026] [php:error] [pid 2782511] [client 162.158.38.100:12665] script '/var/www/html/seo.php' not found or unable to stat
[Mon Mar 30 19:32:05.398348 2026] [php:error] [pid 2782511] [client 162.158.38.100:12665] script '/var/www/html/fetch.php' not found or unable to stat
[Mon Mar 30 19:32:05.439667 2026] [php:error] [pid 2782511] [client 162.158.38.100:12665] script '/var/www/html/xendppio.php' not found or unable to stat
[Mon Mar 30 19:32:05.478801 2026] [php:error] [pid 2782511] [client 162.158.38.100:12665] script '/var/www/html/ycadmin.php' not found or unable to stat
[Mon Mar 30 19:32:05.517902 2026] [php:error] [pid 2782511] [client 162.158.38.100:12665] script '/var/www/html/wp1.php' not found or unable to stat
...
show less
[Sat Mar 21 19:52:46.609071 2026] [php:error] [pid 4121937] [client 162.158.38.100:12984] script '/v ...
show more[Sat Mar 21 19:52:46.609071 2026] [php:error] [pid 4121937] [client 162.158.38.100:12984] script '/var/www/html/gfile.php' not found or unable to stat
[Sat Mar 21 19:52:46.632305 2026] [php:error] [pid 4121937] [client 162.158.38.100:12984] script '/var/www/html/a2.php' not found or unable to stat
[Sat Mar 21 19:52:46.655396 2026] [php:error] [pid 4121937] [client 162.158.38.100:12984] script '/var/www/html/sty.php' not found or unable to stat
[Sat Mar 21 19:52:46.677974 2026] [php:error] [pid 4121937] [client 162.158.38.100:12984] script '/var/www/html/xxxx.php' not found or unable to stat
[Sat Mar 21 19:52:46.700164 2026] [php:error] [pid 4121937] [client 162.158.38.100:12984] script '/var/www/html/h.php' not found or unable to stat
...
show less
Blocked by UFW on vds [80/tcp]
Source port: 38380
TTL: 55
Packet length: 60
TOS: 0x00
This report w ...
show moreBlocked by UFW on vds [80/tcp]
Source port: 38380
TTL: 55
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
