This IP address has been reported a total of
39
times from
15 distinct
sources.
162.158.41.84 was first reported on
May 29th 2024 , and the most recent report was
7 hours ago France
with 5
reports;
Belgium
with 2
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
8
times;
Port Scan
2
times;
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
dynamix
2026-10-19 00:57:48
(7 hours ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-15 16:23:41
(3 days ago)
Web App Attack
🇫🇷
dynamix
2026-10-13 20:37:28
(5 days ago)
Multiple WAF Violations
Web App Attack
2026-10-10 02:38:16
(1 week ago)
(caddyscan) Scanner path probe from 162.158.41.84 (US/United States/-): 5 in the last 3600 secs; Por ...
show more
(caddyscan) Scanner path probe from 162.158.41.84 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 162.158.41.84 - - [10/Oct/2026:02:38:12 +0000] "GET /.env.example HTTP/1.1"
[REDACTED] 200 2627 162.158.41.84 - - [10/Oct/2026:02:38:12 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 162.158.41.84 - - [10/Oct/2026:02:38:13 +0000] "GET /.env.backup HTTP/1.1"
[REDACTED] 200 2627 162.158.41.84 - - [10/Oct/2026:02:38:13 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 162.158.41.84 - - [10/Oct/2026:02:38:13 +0000] "GET /api/.env HTTP/1.1"
show less
Port Scan
🇫🇷
dynamix
2026-10-09 15:18:21
(1 week ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-04 10:39:39
(2 weeks ago)
Multiple WAF Violations
Web App Attack
2026-09-23 17:33:31
(3 weeks ago)
(caddyscan) Scanner path probe from 162.158.41.84 (US/United States/-): 5 in the last 3600 secs; Por ...
show more
(caddyscan) Scanner path probe from 162.158.41.84 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 162.158.41.84 - - [23/Sep/2026:17:33:29 +0000] "GET /.env.example HTTP/1.1"
[REDACTED] 200 2627 162.158.41.84 - - [23/Sep/2026:17:33:29 +0000] "GET /.env.old HTTP/1.1"
[REDACTED] 200 2627 162.158.41.84 - - [23/Sep/2026:17:33:29 +0000] "GET /.env.backup HTTP/1.1"
[REDACTED] 200 2627 162.158.41.84 - - [23/Sep/2026:17:33:29 +0000] "GET /.env.bak HTTP/1.1"
[REDACTED] 200 2627 162.158.41.84 - - [23/Sep/2026:17:33:29 +0000] "GET /.env.production HTTP/1.1"
show less
Port Scan
🇫🇷
dynamix
2026-09-12 16:08:37
(1 month ago)
Multiple WAF Violations
Web App Attack
2026-09-11 18:21:52
(1 month ago)
162.158.41.84 - - [11/Sep/2026:20:21:49 +0200] "GET /z9x8c7v6b5-debug-trigger-jrinnovationszambia.co ...
show more
162.158.41.84 - - [11/Sep/2026:20:21:49 +0200] "GET /z9x8c7v6b5-debug-trigger-jrinnovationszambia.com HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
162.158.41.84 - - [11/Sep/2026:20:21:50 +0200] "GET /proc/self/cmdline HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
162.158.41.84 - - [11/Sep/2026:20:21:50 +0200] "GET /@fs/app/.env?import&raw?? HTTP/1.1" 403 124 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
162.158.41.84 - - [11/Sep/2026:20:21:51 +0200] "GET /userfiles?path=../../../../.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
162.158.41.84 - - [11/Sep/2026:20:21:51 +0200] "GET /userfiles?path=../../../../proc/self/environ HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15
...
show less
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-06 18:33:29
(1 month ago)
Web App Attack
2026-08-15 07:40:02
(2 months ago)
| [Dangerous/Kenya] Aggressive IP 162.158.41.84 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Dangerous/Kenya] Aggressive IP 162.158.41.84 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇧🇪
madeit
2026-08-12 10:09:37
(2 months ago)
Web App Attack
🇳🇱
Site.eu
2026-04-03 12:00:02
(6 months ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
mnsf
2026-03-21 00:19:55
(6 months ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
2026-01-05 17:03:44
(9 months ago)
[Mon Jan 05 18:03:43.812960 2026] [authz_core:error] [pid 31928] [client 162.158.41.84:9819] AH01630 ...
show more
[Mon Jan 05 18:03:43.812960 2026] [authz_core:error] [pid 31928] [client 162.158.41.84:9819] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Jan 05 18:03:44.001453 2026] [authz_core:error] [pid 31928] [client 162.158.41.84:9819] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Jan 05 18:03:44.190539 2026] [authz_core:error] [pid 31928] [client 162.158.41.84:9819] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Showing 1 to
15
of 39 reports
