JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

162.158.87.114

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

84 reports

32 reporters · latest 2 days ago

162.158.87.114 is on our whitelist as Cloudflare Reverse Proxy via the subnet 162.158.0.0/15.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

84 from 32 distinct reporters

First reported

December 4th 2022

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 10 🇧🇪 Belgium 3 🇩🇪 Germany 2

Most common categories Web App Attack 15 Brute-Force 8 Bad Web Bot 8 Port Scan 3 Hacking 3

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 Prcek	2026-11-12 03:19:05 UTC · (2 days ago)	PortScan:HOST=162.158.87.114,DPORTS=443	Port Scan
🇧🇪 madeit	2026-11-09 01:13:30 UTC · (5 days ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-11-07 06:09:30 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 01:09:23.306374 2026] [security2:error] [pid 16733:tid 16733] [client 162.158.87.114:13979] ... show more (mod_security) mod_security (id:210492) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 01:09:23.306374 2026] [security2:error] [pid 16733:tid 16733] [client 162.158.87.114:13979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.harintonmechanical.com"] [uri "/.env.production"] [unique_id "au7AkxeBxLSx9WwIrQr8iQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-10-28 22:52:23 UTC · (2 weeks ago)		Web App Attack
🇺🇸 ph	2026-10-28 11:33:35 UTC · (2 weeks ago)	Bad web bot attempting to run wp-admin on non-WP site	Hacking Bad Web Bot Web App Attack
🇺🇸 dot.mg	2026-10-25 05:29:03 UTC · (2 weeks ago)	Scan of vulnerable files	Web App Attack
🇺🇸 TPI-Abuse	2026-10-18 12:42:06 UTC · (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 08:41:58.121933 2026] [security2:error] [pid 24103:tid 24103] [client 162.158.87.114:12352] ... show more (mod_security) mod_security (id:210730) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 08:41:58.121933 2026] [security2:error] [pid 24103:tid 24103] [client 162.158.87.114:12352] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jpfamilyllc.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jpfamilyllc.com"] [uri "/config.php.bak"] [unique_id "atS-lmIUJ1jjSGuqppPydAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-18 03:13:45 UTC · (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:13:36.381014 2026] [security2:error] [pid 28382:tid 28396] [client 162.158.87.114:14285] ... show more (mod_security) mod_security (id:210730) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:13:36.381014 2026] [security2:error] [pid 28382:tid 28396] [client 162.158.87.114:14285] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|boatservicesgroup.com\|F\|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "boatservicesgroup.com"] [uri "/boatservicesgroup.com.sql"] [unique_id "atQ5YHkH2jVhsSajg8UcmQAAAQo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 22:15:13 UTC · (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:15:07.322484 2026] [security2:error] [pid 16085:tid 16085] [client 162.158.87.114:13657] ... show more (mod_security) mod_security (id:210730) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:15:07.322484 2026] [security2:error] [pid 16085:tid 16085] [client 162.158.87.114:13657] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jalenbattle.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jalenbattle.com"] [uri "/admin/config.php.bak"] [unique_id "atPzaxtOZ4zw377iPSowwAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 16:52:24 UTC · (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:52:20.035905 2026] [security2:error] [pid 9421:tid 9421] [client 162.158.87.114:13841] M ... show more (mod_security) mod_security (id:210492) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:52:20.035905 2026] [security2:error] [pid 9421:tid 9421] [client 162.158.87.114:13841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mdgcontrols.motioncontrolpartners.com"] [uri "/.git/config"] [unique_id "as-zRAYfyYhVB5uIGnQY4gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Tamsy	2026-10-14 05:10:30 UTC · (1 month ago)	HTTPD - 4xx scan	Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 22:06:44 UTC · (1 month ago)	(mod_security) mod_security (id:210730) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:06:38.324503 2026] [security2:error] [pid 17095:tid 17095] [client 162.158.87.114:12351] ... show more (mod_security) mod_security (id:210730) triggered by 162.158.87.114 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:06:38.324503 2026] [security2:error] [pid 17095:tid 17095] [client 162.158.87.114:12351] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|feministvoice.blog\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "feministvoice.blog"] [uri "/database.sql"] [unique_id "as6rbiNwkXBx2MYHIahwxwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-10-13 11:25:06 UTC · (1 month ago)	Multiple WAF Violations	Web App Attack
🇧🇪 madeit	2026-10-05 06:00:06 UTC · (1 month ago)		Web App Attack
🇺🇸 seajaydaboi36	2026-10-01 00:11:32 UTC · (1 month ago)	Automated detection: unsolicited connection to Pterodactyl Wings server.	Port Scan Hacking Brute-Force

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.95

🇧🇷 177.131.164.234

🇸🇪 83.209.249.224

🇳🇱 80.82.77.215

🇫🇷 45.80.27.169

🇯🇵 216.226.78.20

🇵🇱 172.68.159.205

🇦🇺 168.144.161.182

🇳🇱 109.160.32.156

🇳🇱 93.123.109.95

🇺🇸 194.195.208.213

🇷🇴 193.32.162.84

🇧🇷 179.126.69.34

🇺🇸 162.216.149.174

🇬🇧 154.16.44.225

🇳🇱 85.155.14.18

🇳🇱 77.67.26.216

🇮🇶 65.20.131.212

🇫🇷 62.210.245.197

🇲🇾 47.250.159.245