JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

162.158.49.200

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

14 reports

11 reporters · latest 3 weeks ago

162.158.49.200 is on our whitelist as Cloudflare Reverse Proxy via the subnet 162.158.0.0/15.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇮🇪 Ireland
City: Dublin, Leinster

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

14 from 11 distinct reporters

First reported

December 11th 2025

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇧🇪 Belgium 3 🇳🇱 Netherlands 2 🇨🇿 Czechia 1

Most common categories Web App Attack 6 Hacking 3 Brute-Force 2 SSH 2

Old reports The most recent abuse report for this IP address is from 3 weeks ago. This IP is on our whitelist as Cloudflare Reverse Proxy.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 abdubhai	2026-10-19 09:43:21 UTC · (3 weeks ago)	162.158.49.200 - - [19/Oct/2026: ...	Brute-Force
Anonymous	2026-10-12 17:14:37 UTC · (4 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇧🇪 madeit	2026-10-08 16:07:58 UTC · (1 month ago)		Web App Attack
🇧🇪 madeit	2026-09-29 03:21:32 UTC · (1 month ago)		Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-21 22:01:52 UTC · (1 month ago)	Auto-ban: >3000 req/min op 2026-09-21	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-09-19 22:00:00 UTC · (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-18.	Web App Attack SSH Hacking
🇧🇪 madeit	2026-09-13 05:58:03 UTC · (1 month ago)		Web App Attack
🇺🇸 MPL	2026-08-03 21:34:42 UTC · (3 months ago)	tcp/443 (10 or more attempts)	Port Scan
🇲🇽 octageeks.com	2026-06-22 04:17:15 UTC · (4 months ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇦🇺 nzhost.co.nz	2026-05-16 01:01:36 UTC · (5 months ago)	$f2bV_matches	Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-05-13 16:55:44 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 162.158.49.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 12:55:38.288169 2026] [security2:error] [pid 6018:tid 6018] [client 162.158.49.200:12045] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.49.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 12:55:38.288169 2026] [security2:error] [pid 6018:tid 6018] [client 162.158.49.200:12045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "claireashtoncounseling.com"] [uri "/.env"] [unique_id "agStCinwHIMevGQro7XFLQAAAAM"], referer: https://www.google.com/search?q=claireashtoncounseling.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-04-03 15:49:01 UTC · (7 months ago)	162.158.49.200 - - [03/Apr/2026:17:49:00 +0200] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 169 "-" "-" "136.243.2.38" ...	Brute-Force Web App Attack
🇬🇧 no1knows.com	2025-12-22 11:53:13 UTC · (10 months ago)	2025/12/22 11:53:08 [error] 828381#828381: 16809 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 162.158.49.200, server: _, request: "GET /.well-known/index.php HTTP/1.1", upstream: "fastcgi://un ... show more 2025/12/22 11:53:08 [error] 828381#828381: 16809 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 162.158.49.200, server: _, request: "GET /.well-known/index.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "transmission.no1knows.com" 2025/12/22 11:53:09 [error] 828381#828381: 16809 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 162.158.49.200, server: _, request: "GET /.well-known/admin.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "transmission.no1knows.com" 2025/12/22 11:53:10 [error] 828381#828381: 16809 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 162.158.49.200, server: _, request: "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "transmission.no1knows.com" ... show less	Brute-Force Bad Web Bot
🇬🇧 pinguin	2025-12-11 10:14:07 UTC · (10 months ago)	Triggered Cloudflare WAF (firewallManaged) from IE. Action taken: LOG Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; [email protected]) This report was generated by: https://github.com/sefinek/Cloudf ... show more Triggered Cloudflare WAF (firewallManaged) from IE. Action taken: LOG Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 147.185.133.235

🇺🇸 66.132.172.124

🇺🇸 4.148.17.77

🇸🇪 170.62.100.155

🇺🇸 168.144.62.68

🇺🇸 165.227.16.57

🇳🇱 164.92.219.243

🇺🇸 107.152.44.215

🇧🇩 103.159.2.113

🇰🇪 41.139.140.219

🇲🇽 189.228.56.78

🇺🇦 176.105.198.90

🇺🇸 172.58.149.141

🇫🇷 162.19.79.61

🇨🇳 117.50.50.224

🇫🇷 45.80.27.169

🇬🇧 31.14.254.29

🇨🇳 223.83.183.254

🇺🇿 213.230.86.79

🇺🇸 192.241.97.197