162.159.98.253
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.
162.159.98.253 is on our whitelist as Cloudflare Reverse Proxy via the subnet 162.158.0.0/15.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇭🇰 Hong Kong
- City
- Hong Kong
Abuse Reports
Total reports
13 from
11 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
This IP is on our whitelist as Cloudflare Reverse Proxy.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 dynamix |
Multiple WAF Violations
|
Web App Attack | |
| 🇩🇪 ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| 🇩🇪 yitzhaq |
|
Web App Attack Hacking | |
| 🇯🇵 Watch40x |
Automated report from Watch40x security system. Web application probing detected.
|
Web App Attack | |
| 🇩🇪 jbcrn |
|
Bad Web Bot Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-25.
|
Web App Attack SSH Hacking | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2026-09-09
|
Web App Attack SSH Hacking | |
| 🇩🇪 dom4k |
162.159.98.253 - - [09/Sep/2026:04:58:17 +0000] "GET /.env.development.local HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
...
|
Web Spam Bad Web Bot Web App Attack | |
| 🇬🇧 sandra361 |
Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=162.159.98.253 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=1946 DF PROTO=TCP SPT=10182 DPT=443 WINDOW=65535 RES=0x00 ACK RST URGP=0
|
Port Scan | |
| 🇬🇧 sandra361 |
Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=162.159.98.253 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=62684 DF PROTO=TCP SPT=12443 DPT=443 WINDOW=65535 RES=0x00 ACK RST URGP=0
|
Port Scan | |
| 🇯🇵 S.O.B.A. Dev. |
Persistent port scanning or vulnerability scanning
|
Port Scan | |
| 🇧🇪 madeit |
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown