JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 162.55.245.41

162.55.245.41 was found in our database!

This IP was reported 474 times. Confidence of Abuse is 100%: ?

100%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.41.245.55.162.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 162.55.245.41

Whois 162.55.245.41

IP Abuse Reports for 162.55.245.41:

This IP address has been reported a total of 474 times from 216 distinct sources. 162.55.245.41 was first reported on June 19th 2025, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-17 07:44:20 (4 minutes ago)	(mod_security) mod_security (id:210492) triggered by 162.55.245.41 (static.41.245.55.162.clients.you ... show more (mod_security) mod_security (id:210492) triggered by 162.55.245.41 (static.41.245.55.162.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 03:44:14.798453 2026] [security2:error] [pid 18706:tid 18706] [client 162.55.245.41:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.backlogica.com"] [uri "/.env"] [unique_id "atMnTmDbgr2vYFWuLBJ_IQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-10-17 06:48:00 (1 hour ago)	csagent: score 20.0: secrets grab x2; 2 domain(s) in 0s	Web App Attack
Anonymous	2026-10-17 06:03:34 (1 hour ago)	(caddyscan) Scanner path probe from 162.55.245.41 (DE/Germany/static.41.245.55.162.clients.your-serv ... show more (caddyscan) Scanner path probe from 162.55.245.41 (DE/Germany/static.41.245.55.162.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:05:09:57 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:05:12:45 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:05:13:17 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:05:17:11 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:06:03:32 +0000] "GET /.env HTTP/1.1" show less	Port Scan
🇺🇸 CBJ	2026-10-17 05:20:48 (2 hours ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 infra-monitor	2026-10-17 05:00:05 (2 hours ago)	Automated ban via infra-monitor: suspicious-probe	Port Scan
🇮🇹 Progetto1	2026-10-17 04:50:05 (2 hours ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 hidemail.app	2026-10-17 04:49:04 (2 hours ago)	Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto ... show more Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban. show less	Web App Attack Hacking
🇭🇷 IgorS.zg.hr	2026-10-17 04:27:00 (3 hours ago)	Web application attack detected by fail2ban	Hacking Web App Attack
🇲🇽 octageeks.com	2026-10-17 04:18:21 (3 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2026-10-17 04:13:56 (3 hours ago)	Web scanner: GET /.env	Web App Attack Hacking
🇳🇱 Alt255	2026-10-17 03:47:20 (4 hours ago)	[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.55.245.41 - - [17/Oct/2026:05:47:09 +0200] "GET /.env HTTP/1.1" 404 40598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-17 03:37:26 (4 hours ago)	(caddyscan) Scanner path probe from 162.55.245.41 (DE/Germany/static.41.245.55.162.clients.your-serv ... show more (caddyscan) Scanner path probe from 162.55.245.41 (DE/Germany/static.41.245.55.162.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:03:31:26 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:03:35:24 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:03:36:19 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:03:37:25 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:03:37:25 +0000] "GET /.env HTTP/1.1" show less	Port Scan
🇹🇷 nazemes	2026-10-17 03:00:34 (4 hours ago)	Honeypot path probe: /.env on applabco.com	Bad Web Bot Web App Attack
🇨🇭 copestack	2026-10-17 01:30:14 (6 hours ago)	Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)	Web App Attack
Anonymous	2026-10-17 01:04:24 (6 hours ago)	(caddyscan) Scanner path probe from 162.55.245.41 (DE/Germany/static.41.245.55.162.clients.your-serv ... show more (caddyscan) Scanner path probe from 162.55.245.41 (DE/Germany/static.41.245.55.162.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:00:55:54 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:00:56:17 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:01:01:02 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:01:01:28 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 162.55.245.41 - - [17/Oct/2026:01:04:19 +0000] "GET /.env HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 474 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.191.116.213

🇫🇮 147.185.133.67

🇳🇱 91.92.42.213

🇺🇸 2620:24:c040:4::bd

🇺🇸 216.25.89.136

🇺🇸 205.210.31.105

🇳🇱 195.178.110.227

🇪🇸 172.68.134.249

🇺🇸 70.182.31.136

🇵🇰 59.103.216.143

🇨🇦 51.222.87.125

🇺🇸 43.165.67.31

🇺🇸 40.121.179.100

🇺🇸 38.110.248.236

🇧🇪 198.235.24.216

🇦🇷 186.39.37.230

🇩🇪 172.70.243.180

🇨🇳 117.14.113.155

🇮🇩 103.160.68.21

🇲🇾 47.250.58.33