JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

162.158.74.129

Neutral Activity Whitelisted Subnet

Abuse confidence score ?

0% Low Risk

99 reports

24 reporters · latest 2 months ago

162.158.74.129 is an IP address from within our whitelist belonging to the subnet 162.158.0.0/15, which we identify as "Cloudflare Reverse Proxy".

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Manchester, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

162.158.74.129 has been reported 99 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 162.158.74.129

This IP address has been reported a total of 99 times from 24 distinct sources. 162.158.74.129 was first reported on December 7th 2020, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-07-30 06:59:29 (2 months ago)	tcp/443 (5 or more attempts)	Port Scan
🇩🇪 ValtonTahiri	2026-07-22 06:00:50 (2 months ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=162.158.74.129; proto=TCP; source_port=11889; target_port=8080; flags=SYN show less	Port Scan
🇺🇸 micropedro	2026-07-20 10:03:29 (2 months ago)	8 incidents: port scanning. First: 2026-07-20 06:03, Last: 2026-07-20 06:03 UTC. Triggers: firewall- ... show more 8 incidents: port scanning. First: 2026-07-20 06:03, Last: 2026-07-20 06:03 UTC. Triggers: firewall-tcp. show less	Port Scan
🇧🇷 maviei	2026-07-12 20:19:47 (2 months ago)	2026-07-12T17:19:44.772535-03:00 srv1251771 kernel: [116347.359749] [UFW BLOCK] IN=eth0 OUT= MAC=40: ... show more 2026-07-12T17:19:44.772535-03:00 srv1251771 kernel: [116347.359749] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.74.129 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=29319 DF PROTO=TCP SPT=13059 DPT=2095 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-12T17:19:45.774354-03:00 srv1251771 kernel: [116348.361633] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.74.129 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=29320 DF PROTO=TCP SPT=13059 DPT=2095 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-12T17:19:46.799373-03:00 srv1251771 kernel: [116349.385977] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.74.129 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=29321 DF PROTO=TCP SPT=13059 DPT=2095 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇷 maviei	2026-07-11 19:29:07 (2 months ago)	2026-07-11T16:29:04.067654-03:00 srv1251771 kernel: [26906.887904] [UFW BLOCK] IN=eth0 OUT= MAC=40:e ... show more 2026-07-11T16:29:04.067654-03:00 srv1251771 kernel: [26906.887904] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.74.129 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=3882 DF PROTO=TCP SPT=12012 DPT=2095 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-11T16:29:05.099070-03:00 srv1251771 kernel: [26907.919247] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.74.129 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=3883 DF PROTO=TCP SPT=12012 DPT=2095 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-11T16:29:06.123488-03:00 srv1251771 kernel: [26908.942988] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.74.129 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=3884 DF PROTO=TCP SPT=12012 DPT=2095 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-07-10 11:14:00 (2 months ago)	"Packet Flood; Triggered WAF; Multiple attempts to access nonexistent vulnerable php files"	DDoS Attack
🇩🇪 wiredalter	2026-07-01 23:30:41 (2 months ago)	Blocked by UFW on dVPS [2053/tcp] Source Port: 11989 TTL: 54 Packet Length: 60 TOS: 0x08 Analyzed b ... show more Blocked by UFW on dVPS [2053/tcp] Source Port: 11989 TTL: 54 Packet Length: 60 TOS: 0x08 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇬🇧 pinguin	2026-05-08 06:06:22 (4 months ago)	Triggered Cloudflare WAF (firewallManaged) from GB. Action taken: LOG Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallManaged) from GB. Action taken: LOG Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇹 Fusty	2025-09-17 15:00:07 (1 year ago)	Unauthorized attempt on (TCP on port 8880). Source port: 60478 TTL: 54 Packet length: 60 Timestamp: ... show more Unauthorized attempt on (TCP on port 8880). Source port: 60478 TTL: 54 Packet length: 60 Timestamp: 2025-09-17 17:00:04 show less	Port Scan
Anonymous	2025-06-23 19:34:52 (1 year ago)	wp admin page access attempt ...	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-04-23 09:28:10 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 162.158.74.129 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 162.158.74.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 05:28:05.971059 2025] [security2:error] [pid 29464:tid 29464] [client 162.158.74.129:63448] [client 162.158.74.129] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|globetechsecurities.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "globetechsecurities.com"] [uri "/images/stories/admin-post.php"] [unique_id "aAiypS4u7KmFmIUqpQAVRwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-04-08 14:10:45 (1 year ago)	Port probe to tcp/2053 (kerberos de-multiplexer) [srv125]	Port Scan
Anonymous	2025-04-06 09:45:40 (1 year ago)	[Sun Apr 06 11:45:38.922077 2025] [authz_core:error] [pid 30375] [client 162.158.74.129:21650] AH016 ... show more [Sun Apr 06 11:45:38.922077 2025] [authz_core:error] [pid 30375] [client 162.158.74.129:21650] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Apr 06 11:45:39.133900 2025] [authz_core:error] [pid 30375] [client 162.158.74.129:21650] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Apr 06 11:45:39.342104 2025] [authz_core:error] [pid 30375] [client 162.158.74.129:21650] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-02-13 06:04:37 (1 year ago)	Port probe to tcp/2095 (nbx ser) [srv125]	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-02-09 00:58:40 (1 year ago)	Port probe to tcp/2082 [srv125]	Port Scan

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 2602:80d:1003::11

🇳🇱 2400:cb00:996:1000:d865:e6f4:4d5c:5b2b

🇧🇷 201.20.90.150

🇹🇼 198.235.24.91

🇺🇸 185.242.2.11

🇸🇰 158.173.242.85

🇷🇺 92.50.143.246

🇮🇩 69.5.21.196

🇺🇸 64.238.9.184

🇺🇸 48.216.210.148

🇧🇼 41.76.247.13

🇺🇸 20.102.113.3

🇳🇱 2400:cb00:994:1000:fba8:20a4:b959:5e62

🇰🇷 115.178.75.242

🇦🇴 102.130.193.145

🇫🇷 85.217.140.39

🇷🇺 77.91.65.142

🇺🇸 73.110.89.80

🇺🇸 72.76.203.245

🇹🇷 62.169.153.65