This IP address has been reported a total of
150
times from
27 distinct
sources.
162.158.63.45 was first reported on
November 22nd 2020 , and the most recent report was
1 hour ago Belgium
with 3
reports;
France
with 2
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
6
times;
Hacking
2
times;
Port Scan
1
time;
SSH
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
dynamix
2026-10-19 19:26:15
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-07 21:33:20
(1 week ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-06 20:05:38
(1 week ago)
Web App Attack
🇩🇪
netclix.gr
2026-09-25 14:45:45
(3 weeks ago)
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 162.158.63.45 (US/United States/-): 1 in the ...
show more
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 162.158.63.45 (US/United States/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 162.158.63.45 - - [25/Sep/2026:17:45:22 +0300] "GET /login_up.php HTTP/2.0" 200 29668 "-" "Go-http-client/1.1" "192.241.141.144"'/login_up.php' '' '/opt/psa/admin/htdocs'
show less
Port Scan
🇧🇪
madeit
2026-09-05 09:43:06
(1 month ago)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-03 22:00:15
(1 month ago)
Auto-ban: >3000 req/min op 2026-09-03
Web App Attack
SSH
Hacking
🇧🇪
madeit
2026-08-25 16:10:00
(1 month ago)
Web App Attack
🇮🇩
securejdprop
2026-08-21 09:22:08
(1 month ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇺🇸
TPI-Abuse
2026-08-19 04:10:54
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 00:10:48.663704 2026] [security2:error] [pid 14352:tid 14352] [client 162.158.63.45:12433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.holboxwhalesharktours.net"] [uri "/.git/config"] [unique_id "aoUsyHVUmm8ru79ZR-0AYgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-18 08:46:20
(2 months ago)
Web App Attack
🇧🇪
madeit
2026-08-10 07:44:37
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 20:02:05
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 162.158.63.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.63.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 16:02:00.872686 2026] [security2:error] [pid 28317:tid 28317] [client 162.158.63.45:9682] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.kclawoffice.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.kclawoffice.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "alfnOI36Ye5_0dEFPEidXwAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-03 18:35:11
(3 months ago)
Aggressive web scan
Web App Attack
2026-06-29 21:43:20
(3 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 05:10:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 01:10:36.026037 2026] [security2:error] [pid 24350:tid 24350] [client 162.158.63.45:14150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.midoc.gabosoftware.com"] [uri "/.env.development"] [unique_id "ab4oTAm2INugOYIvvQU5WQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
15
of 150 reports
