Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 162.159.122.132
This IP address has been reported a total of
13
times from
8 distinct
sources.
162.159.122.132 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Belgium
with 3
reports;
Brazil
with 1
report;
Czechia
with 1
report.
The most common categories in these recent reports were:
Web App Attack
4
times;
Brute-Force
1
time;
Port Scan
1
time;
SQL Injection
1
time;
SSH
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-23T13:36:58.571517+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2164417]: pam_unix(sshd: ...
show more2026-09-23T13:36:58.571517+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2164417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.159.122.132
2026-09-23T13:36:59.953925+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2164417]: Failed password for invalid user aleya from 162.159.122.132 port 60835 ssh2
2026-09-23T13:37:03.382454+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2164417]: Failed password for invalid user aleya from 162.159.122.132 port 60835 ssh2
...
show less
[Sun Feb 08 02:37:07.880408 2026] [php:error] [pid 1477635] [client 162.159.122.132:13189] script '/ ...
show more[Sun Feb 08 02:37:07.880408 2026] [php:error] [pid 1477635] [client 162.159.122.132:13189] script '/var/www/html/manager.php' not found or unable to stat
[Sun Feb 08 02:37:08.578139 2026] [php:error] [pid 1477635] [client 162.159.122.132:13189] script '/var/www/html/9.php' not found or unable to stat
[Sun Feb 08 02:37:09.975887 2026] [php:error] [pid 1477635] [client 162.159.122.132:13189] script '/var/www/html/ds.php' not found or unable to stat
[Sun Feb 08 02:37:21.349409 2026] [php:error] [pid 1478795] [client 162.159.122.132:12970] script '/var/www/html/radio.php' not found or unable to stat
[Sun Feb 08 02:37:28.150120 2026] [php:error] [pid 1478795] [client 162.159.122.132:12970] script '/var/www/html/1.php' not found or unable to stat
...
show less
Confirmed malicious activity observed via T-Pot honeypot Observed 11 events on port 80 (unknown) fro ...
show moreConfirmed malicious activity observed via T-Pot honeypot Observed 11 events on port 80 (unknown) from 2026-01-04T18:52:16+00:00 to 2026-01-04T18:54:33.900000+00:00. Sample: {"src_port": 10843, "dest_port": 80, "src_ip": "162.159.122.132", "event_type": "flow"}
show less
[Thu Dec 18 06:55:36.141234 2025] [php:error] [pid 1028390] [client 162.159.122.132:11999] script '/ ...
show more[Thu Dec 18 06:55:36.141234 2025] [php:error] [pid 1028390] [client 162.159.122.132:11999] script '/var/www/html/ab.php' not found or unable to stat
[Thu Dec 18 06:56:29.956633 2025] [php:error] [pid 1028309] [client 162.159.122.132:9364] script '/var/www/html/flower.php' not found or unable to stat
[Thu Dec 18 06:56:33.129770 2025] [php:error] [pid 1028309] [client 162.159.122.132:9364] script '/var/www/html/gg.php' not found or unable to stat
[Thu Dec 18 08:45:16.993899 2025] [php:error] [pid 1109832] [client 162.159.122.132:13536] script '/var/www/html/adminfuns.php' not found or unable to stat, referer: https://www.google.fr/
[Thu Dec 18 08:45:37.671190 2025] [php:error] [pid 1109825] [client 162.159.122.132:11769] script '/var/www/html/gaza.php' not found or unable to stat, referer: https://www.google.de/
...
show less
Brute-Force
Web App Attack
Anonymous
[Thu Dec 04 22:42:06.952907 2025] [authz_core:error] [pid 28358] [client 162.159.122.132:13863] AH01 ...
show more[Thu Dec 04 22:42:06.952907 2025] [authz_core:error] [pid 28358] [client 162.159.122.132:13863] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Dec 04 22:42:07.241810 2025] [authz_core:error] [pid 28358] [client 162.159.122.132:13863] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Dec 04 22:42:07.496121 2025] [authz_core:error] [pid 28358] [client 162.159.122.132:13863] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Showing 1 to
13
of 13 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
