JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

162.158.87.134

Neutral Activity Whitelisted Subnet

Abuse confidence score ?

0% Low Risk

98 reports

29 reporters · latest 4 months ago

162.158.87.134 is an IP address from within our whitelist belonging to the subnet 162.158.0.0/15, which we identify as "Cloudflare Reverse Proxy".

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

162.158.87.134 has been reported 98 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 162.158.87.134

This IP address has been reported a total of 98 times from 29 distinct sources. 162.158.87.134 was first reported on November 30th 2022, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-05-14 04:46:05 (4 months ago)	[ThuMay1406:46:00.1586672026][security2:error][pid2753821:tid2753849][client162.158.87.134:0]ModSecu ... show more [ThuMay1406:46:00.1586672026][security2:error][pid2753821:tid2753849][client162.158.87.134:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"kvsm-blackstone.com.136-243-54-122.cpanel.site\"][uri\"/.git/config\"][unique_id\"agVTiARwgw-iMeNfAHe3-QAAABE\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 trentwiles.com	2026-05-12 16:20:56 (4 months ago)	Unauthorized connection attempt detected from IP address 162.158.87.134 to port 80 [SYD]	Port Scan
🇺🇸 TPI-Abuse	2026-05-08 07:51:40 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 03:51:33.757670 2026] [security2:error] [pid 11283:tid 11283] [client 162.158.87.134:11101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arnoldwell.com"] [uri "/.git/config"] [unique_id "af2WBQew_bbwSZvWTKrh8gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-24 21:04:40 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 17:04:33.060174 2026] [security2:error] [pid 32531:tid 32531] [client 162.158.87.134:12686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "explorediablo.com"] [uri "/.git/config"] [unique_id "aeva4RECnIRT8paicc8gyAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Séfora Srl	2026-04-22 13:01:50 (5 months ago)	Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ... show more Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail show less	Bad Web Bot
🇫🇷 masterguru	2026-04-06 06:34:09 (5 months ago)	Blocked Cloudflare Worker request. Pattern match "." at REQUEST_HEADERS:cf-worker. (5025-197)	Hacking
🇩🇪 arc21	2026-04-05 01:57:23 (5 months ago)	2026-04-05T01:57:22.828179+00:00 database-prodv1-game kernel: [2518171.418939] [UFW BLOCK] IN=eth0 O ... show more 2026-04-05T01:57:22.828179+00:00 database-prodv1-game kernel: [2518171.418939] [UFW BLOCK] IN=eth0 OUT= MAC=92:00:06:71:5d:8a:d2:74:7f:6e:37:e3:08:00 SRC=162.158.87.134 DST=142.132.169.25 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=45571 DF PROTO=TCP SPT=10830 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 mnsf	2026-04-04 20:05:35 (5 months ago)	Scanning/Probing (26)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-04 01:09:16 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 21:09:09.664936 2026] [security2:error] [pid 29108:tid 29108] [client 162.158.87.134:13262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jesusthechristministry.org"] [uri "/.env.production"] [unique_id "adBktcQiY03AWzZFqEtMBwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-03 17:09:39 (5 months ago)	[Fri Apr 03 19:09:31.564150 2026] [authz_core:error] [pid 10644] [client 162.158.87.134:10058] AH016 ... show more [Fri Apr 03 19:09:31.564150 2026] [authz_core:error] [pid 10644] [client 162.158.87.134:10058] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Apr 03 19:09:38.117870 2026] [authz_core:error] [pid 9982] [client 162.158.87.134:9737] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Apr 03 19:09:38.224952 2026] [authz_core:error] [pid 9982] [client 162.158.87.134:9737] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 16:28:43 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 12:28:35.565251 2026] [security2:error] [pid 7212:tid 7212] [client 162.158.87.134:13023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.debzy.com"] [uri "/.git/refs/heads/main"] [unique_id "acv2MxNKoxFp4Pw0TQu1hQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 11:40:00 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 07:39:51.500412 2026] [security2:error] [pid 12585:tid 12635] [client 162.158.87.134:12635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adambarnard.com"] [uri "/.git/config"] [unique_id "acuyh6XMXxd_i07zkas79gAAAcc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 03:59:03 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 23:58:54.748447 2026] [security2:error] [pid 6542:tid 6542] [client 162.158.87.134:13325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.grantjennings.com"] [uri "/.git/refs/heads/master"] [unique_id "actGfu_E9GYqa9cfuS_vyQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 01:40:50 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 162.158.87.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 21:40:43.974314 2026] [security2:error] [pid 28098:tid 28098] [client 162.158.87.134:9514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "401k.waggonerfinancial.com"] [uri "/.git/index"] [unique_id "acsmG6t9pec6XXfA2aZ2AgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-03-31 01:06:31 (5 months ago)	Scanning/Probing (11)	Brute-Force Web App Attack

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 169.40.142.129

🇸🇬 159.89.197.147

🇫🇷 91.231.89.253

🇷🇺 213.234.8.114

🇧🇷 200.149.213.242

🇺🇸 104.219.251.77

🇻🇳 27.79.4.145

🇷🇴 2.57.122.53

🇳🇱 195.178.110.48

🇵🇪 190.119.63.98

🇧🇷 187.115.144.103

🇧🇷 187.16.96.250

🇰🇷 169.211.128.234

🇫🇷 169.155.254.22

🇦🇫 149.54.40.182

🇨🇳 111.225.148.184

🇨🇦 51.222.83.202

🇫🇷 31.77.227.120

🇺🇸 184.105.139.125

🇦🇷 181.111.219.176