JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

162.158.86.139

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

26 reports

16 reporters · latest 2 days ago

162.158.86.139 is on our whitelist as Cloudflare Reverse Proxy via the subnet 162.158.0.0/15.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

26 from 16 distinct reporters

First reported

July 17th 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇧🇪 Belgium 2 🇨🇿 Czechia 2

Most common categories Web App Attack 15 Brute-Force 9 Bad Web Bot 9 Hacking 3 SSH 1

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-12 01:29:54 UTC · (2 days ago)	(mod_security) mod_security (id:210492) triggered by 162.158.86.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:29:50.382558 2026] [security2:error] [pid 29569:tid 29569] [client 162.158.86.139:13257] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.86.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:29:50.382558 2026] [security2:error] [pid 29569:tid 29569] [client 162.158.86.139:13257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.visitcampbellford.com"] [uri "/wp-config.php.bak"] [unique_id "avUWjgeneHGn5_A3VjKLxwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-28 17:25:26 UTC · (2 weeks ago)	IP matched detection query Many sub paths, bad urls forwarding.	Brute-Force
🇫🇷 dynamix	2026-10-19 13:54:05 UTC · (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇺🇸 craudiovizai	2026-10-19 12:30:41 UTC · (3 weeks ago)	Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.	Web App Attack Bad Web Bot
🇨🇭 flaus	2026-10-18 14:17:39 UTC · (3 weeks ago)	$f2bV_matches	Hacking Bad Web Bot Web App Attack
🇧🇪 madeit	2026-10-18 01:09:44 UTC · (3 weeks ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 16:39:53 UTC · (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.86.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:39:49.497289 2026] [security2:error] [pid 31655:tid 31655] [client 162.158.86.139:13325] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.86.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:39:49.497289 2026] [security2:error] [pid 31655:tid 31655] [client 162.158.86.139:13325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pack88.mvscouts.org"] [uri "/.git/config"] [unique_id "atJTVXkL7ucLLIwiYIBk8gAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 langenkamp-media	2026-10-14 05:09:56 UTC · (1 month ago)	Fail2Ban: Banned from jail nginx-nohome on 3dausdu.de	Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 00:25:06 UTC · (1 month ago)	(mod_security) mod_security (id:210730) triggered by 162.158.86.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:24:59.622770 2026] [security2:error] [pid 17821:tid 17821] [client 162.158.86.139:9785] ... show more (mod_security) mod_security (id:210730) triggered by 162.158.86.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:24:59.622770 2026] [security2:error] [pid 17821:tid 17821] [client 162.158.86.139:9785] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.filmpolis.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.filmpolis.com"] [uri "/db.sql"] [unique_id "as7L2z9uI7SlFrpfTxCbpwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-10-10 21:59:50 UTC · (1 month ago)	Auto-ban: >3000 req/min op 2026-10-10	Web App Attack SSH Hacking
🇮🇹 Inartis	2026-10-01 18:00:50 UTC · (1 month ago)	162.158.86.139 - - [01/Oct/2026:20:00:33 +0200] "GET /.git/config HTTP/1.1" 302 453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 162.158.86.139 - - [01/Oct/2026:20:00:41 +0200] ... show more 162.158.86.139 - - [01/Oct/2026:20:00:33 +0200] "GET /.git/config HTTP/1.1" 302 453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 162.158.86.139 - - [01/Oct/2026:20:00:41 +0200] "GET /config.php HTTP/1.1" 302 451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 162.158.86.139 - - [01/Oct/2026:20:00:49 +0200] "GET /config.php HTTP/1.1" 302 451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-30 14:08:03 UTC · (1 month ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇧🇪 madeit	2026-09-30 12:19:43 UTC · (1 month ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 18:50:43 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 162.158.86.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:50:38.064805 2026] [security2:error] [pid 16378:tid 16378] [client 162.158.86.139:13835] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.86.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:50:38.064805 2026] [security2:error] [pid 16378:tid 16378] [client 162.158.86.139:13835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.printedweddingnapkins.com"] [uri "/.git/config"] [unique_id "arq2_qzdHsFPwh1mVfeJZgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Jacqb	2026-09-26 02:33:24 UTC · (1 month ago)	Adres potencjalnie niebezpieczny	Brute-Force Web App Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 146.70.168.121

🇩🇪 95.88.108.88

🇺🇦 5.58.9.71

🇦🇿 216.147.123.216

🇲🇽 149.232.137.188

🇨🇳 120.15.69.133

🇳🇱 109.160.32.141

🇷🇺 91.79.191.206

🇫🇷 88.170.200.130

🇺🇸 45.45.237.39

🇷🇴 2.57.121.112

🇲🇽 82.153.139.33

🇫🇷 51.38.237.146

🇦🇲 46.36.123.134

🇳🇱 5.255.123.164

🇮🇩 165.154.151.207

🇩🇪 150.241.96.46

🇫🇷 91.231.89.179

🇳🇱 45.148.10.157

🇺🇸 45.8.19.62