JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 162.159.113.107

162.159.113.107 was found in our database!

This IP was reported 98 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 162.159.113.107 is an IP address from within our whitelist belonging to the subnet 162.158.0.0/15, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 162.159.113.107

Whois 162.159.113.107

IP Abuse Reports for 162.159.113.107:

This IP address has been reported a total of 98 times from 39 distinct sources. 162.159.113.107 was first reported on November 20th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-08-25 22:49:28 (1 day ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇧 cg-design.co.uk	2026-08-22 23:37:46 (4 days ago)	(mod_security) mod_security triggered on hostname [redacted] 162.159.113.107 (-)	SQL Injection
🇺🇸 chrisj	2026-08-20 18:07:53 (6 days ago)	[Thu Aug 20 18:07:51.925488 2026] [proxy_fcgi:error] [pid 1229827:tid 1229834] [remote 162.159.113.1 ... show more [Thu Aug 20 18:07:51.925488 2026] [proxy_fcgi:error] [pid 1229827:tid 1229834] [remote 162.159.113.107:10090] AH01071: Got error 'Primary script unknown' [Thu Aug 20 18:07:52.676038 2026] [proxy_fcgi:error] [pid 1229827:tid 1229836] [remote 162.159.113.107:10090] AH01071: Got error 'Primary script unknown' [Thu Aug 20 18:07:53.129620 2026] [proxy_fcgi:error] [pid 1229827:tid 1229837] [remote 162.159.113.107:10090] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
Anonymous	2026-08-13 07:26:23 (2 weeks ago)	162.159.113.107 - - [13/Aug/2026:09:26:22 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 4 ... show more 162.159.113.107 - - [13/Aug/2026:09:26:22 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 162.159.113.107 - - [13/Aug/2026:09:26:22 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 162.159.113.107 - - [13/Aug/2026:09:26:22 +0200] "GET //2021/wp-includes/wlwmanifest.xml HTTP/1.1" 404 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 162.159.113.107 - - [13/Aug/2026:09:26:22 +0200] "GET //2021/wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 162.159.113.107 - - [13/Aug/2026:09:26:22 +0200] "GET //shop/wp-includes/wlwmanifest.xml ... show less	Brute-Force Web App Attack
Anonymous	2026-08-09 16:55:42 (2 weeks ago)	162.159.113.107 - - [09/Aug/2026:18:55:41 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 43 ... show more 162.159.113.107 - - [09/Aug/2026:18:55:41 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.159.113.107 - - [09/Aug/2026:18:55:41 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.159.113.107 - - [09/Aug/2026:18:55:41 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.159.113.107 - - [09/Aug/2026:18:55:41 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.159.113.107 - - [09/Aug/2026:18:55:41 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP ... show less	Brute-Force Web App Attack
🇩🇪 Vincent Falzon	2026-07-28 21:57:15 (4 weeks ago)	SSH brute-force / unauthorized login attempts observed against sovereign infrastructure. Hits: 1. Co ... show more SSH brute-force / unauthorized login attempts observed against sovereign infrastructure. Hits: 1. Confidence: 75. Recent sample: 2026-07-28T21:52:18.951Z: show less	Brute-Force SSH
Anonymous	2026-07-17 03:55:34 (1 month ago)	162.159.113.107 - - [17/Jul/2026:05:55:33 +0200] "GET /wp-content/mysql.sql HTTP/1.1" 404 449 "-" "M ... show more 162.159.113.107 - - [17/Jul/2026:05:55:33 +0200] "GET /wp-content/mysql.sql HTTP/1.1" 404 449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.107 - - [17/Jul/2026:05:55:33 +0200] "GET /wp-content/mysql.sql HTTP/1.1" 404 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.107 - - [17/Jul/2026:05:55:33 +0200] "GET /.env.example HTTP/1.1" 404 449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.107 - - [17/Jul/2026:05:55:33 +0200] "GET /.env.example HTTP/1.1" 404 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.107 - - [17/Jul/2026:05:55:33 +0200] "GET /.env.dev.local HTTP/1.1" 404 449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.107 - - [17/Jul/2026:05:55:33 +0200] "GET /.env.dev.local HTTP/1.1" 404 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.107 - - [17/Jul/2026:05:55:33 +0200] "GET /php-inf ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-06 17:54:40 (1 month ago)	[Mon Jul 06 19:54:40.338410 2026] [authz_core:error] [pid 9998] [client 162.159.113.107:9416] AH0163 ... show more [Mon Jul 06 19:54:40.338410 2026] [authz_core:error] [pid 9998] [client 162.159.113.107:9416] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Jul 06 19:54:40.339756 2026] [authz_core:error] [pid 10251] [client 162.159.113.107:9391] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Jul 06 19:54:40.342879 2026] [authz_core:error] [pid 10252] [client 162.159.113.107:9387] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 mawan	2026-07-06 13:44:06 (1 month ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
Anonymous	2026-07-05 05:12:37 (1 month ago)	[Sun Jul 05 07:12:36.747147 2026] [authz_core:error] [pid 11367] [client 162.159.113.107:13621] AH01 ... show more [Sun Jul 05 07:12:36.747147 2026] [authz_core:error] [pid 11367] [client 162.159.113.107:13621] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jul 05 07:12:36.783436 2026] [authz_core:error] [pid 11367] [client 162.159.113.107:13621] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jul 05 07:12:36.802732 2026] [authz_core:error] [pid 11367] [client 162.159.113.107:13621] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-06-30 11:33:46 (1 month ago)	suricata IPS/IDS detection, ruleset ET WEB_SERVER WEB-PHP phpinfo access, ET WEB_SPECIFIC_APPS WordP ... show more suricata IPS/IDS detection, ruleset ET WEB_SERVER WEB-PHP phpinfo access, ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) show less	Port Scan
🇫🇷 dynamix	2026-06-30 05:19:40 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 15:45:35 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 162.159.113.107 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 162.159.113.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 11:45:28.922118 2026] [security2:error] [pid 11873:tid 11873] [client 162.159.113.107:9926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madisonmedia.ai"] [uri "/.git/config"] [unique_id "akFBmDglHXkMnH4J-mPyrQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-06-24 04:05:00 (2 months ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-06-23 23:36:51 (2 months ago)	[Wed Jun 24 01:36:50.022769 2026] [authz_core:error] [pid 7720] [client 162.159.113.107:12300] AH016 ... show more [Wed Jun 24 01:36:50.022769 2026] [authz_core:error] [pid 7720] [client 162.159.113.107:12300] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Jun 24 01:36:50.134991 2026] [authz_core:error] [pid 7720] [client 162.159.113.107:12300] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Jun 24 01:36:50.521608 2026] [authz_core:error] [pid 7720] [client 162.159.113.107:12300] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.173.10.75

🇲🇦 196.74.39.97

🇬🇧 193.163.125.254

🇺🇸 192.185.82.151

🇺🇦 188.163.7.202

🇧🇷 179.189.199.247

🇺🇸 173.80.66.79

🇯🇵 172.105.208.132

🇵🇰 103.4.92.103

🇬🇧 91.230.225.117

🇺🇸 72.128.26.108

🇵🇱 57.128.201.254

🇺🇸 45.56.100.177

🇺🇸 35.86.242.24

🇻🇳 27.79.46.185

🇺🇸 20.84.124.149

🇰🇷 211.178.247.182

🇩🇪 167.233.192.208

🇧🇷 164.163.15.22

🇳🇱 160.119.71.27