JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.27.42.255

37.27.42.255 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.255.42.27.37.clients.your-server.de
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.27.42.255

Whois 37.27.42.255

IP Abuse Reports for 37.27.42.255:

This IP address has been reported a total of 19 times from 15 distinct sources. 37.27.42.255 was first reported on April 16th 2024, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 MazenHost	2024-04-22 11:42:20 (2 years ago)	1713753621 - 04/22/2024 04:40:21 Host: 37.27.42.255/37.27.42.255 Port: 11 TCP Blocked ...	Port Scan
🇧🇪 cmbplf	2024-04-22 04:24:42 (2 years ago)	124 requests to /.env	Brute-Force Bad Web Bot
🇧🇪 sid3windr	2024-04-20 23:20:20 (2 years ago)	GET /.git/config (Tarpitted for 29m50s, wasted 105.0kB)	Web App Attack
🇧🇪 sid3windr	2024-04-20 23:20:20 (2 years ago)	GET /.git/config (Tarpitted for 29m50s, wasted 105kB)	Web App Attack
🇧🇪 beruys.com	2024-04-20 19:00:37 (2 years ago)	[Sat Apr 20 21:00:36.986640 2024] [proxy_fcgi:error] [pid 1276100:tid 140118073538304] [client 37.27 ... show more [Sat Apr 20 21:00:36.986640 2024] [proxy_fcgi:error] [pid 1276100:tid 140118073538304] [client 37.27.42.255:57824] AH01071: Got error 'Primary script unknown' [Sat Apr 20 21:00:37.113356 2024] [proxy_fcgi:error] [pid 1276100:tid 140117654099712] [client 37.27.42.255:57876] AH01071: Got error 'Primary script unknown' [Sat Apr 20 21:00:37.233368 2024] [proxy_fcgi:error] [pid 1276099:tid 140118039967488] [client 37.27.42.255:57928] AH01071: Got error 'Primary script unknown' ... show less	DDoS Attack SSH
🇺🇦 URAN Publishing Service	2024-04-20 15:58:03 (2 years ago)	37.27.42.255 - - [20/Apr/2024:18:58:01 +0300] "GET /.env HTTP/1.1" 404 494 "-" "Mozilla/5.0 (X11; Li ... show more 37.27.42.255 - - [20/Apr/2024:18:58:01 +0300] "GET /.env HTTP/1.1" 404 494 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 37.27.42.255 - - [20/Apr/2024:18:58:03 +0300] "GET /api/.env HTTP/1.1" 404 494 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15" ... show less	Web App Attack
🇧🇪 sid3windr	2024-04-20 12:19:06 (2 years ago)	GET /.git/config (Tarpitted for 1d4h53m5s, wasted 5.95MB)	Web App Attack
🇰🇷 ZerglingGo	2024-04-20 11:27:00 (2 years ago)	INFO: 37.27.42.255:57587 - "GET / HTTP/1.1" 404 Not Found ... show more INFO: 37.27.42.255:57587 - "GET / HTTP/1.1" 404 Not Found INFO: 37.27.42.255:62965 - "GET /.env HTTP/1.1" 404 Not Found INFO: 37.27.42.255:59103 - "POST /.env HTTP/1.1" 404 Not Found INFO: 37.27.42.255:63663 - "GET /.env.prod HTTP/1.1" 404 Not Found INFO: 37.27.42.255:65156 - "POST /.env.prod HTTP/1.1" 404 Not Found INFO: 37.27.42.255:52030 - "GET /.env.production HTTP/1.1" 404 Not Found INFO: 37.27.42.255:62523 - "POST /.env.production HTTP/1.1" 404 Not Found INFO: 37.27.42.255:60976 - "GET /redmine/.env HTTP/1.1" 404 Not Found INFO: 37.27.42.255:50508 - "POST /redmine/.env HTTP/1.1" 404 Not Found show less	Web App Attack
🇫🇮 Christopher Hughes	2024-04-20 08:25:56 (2 years ago)	[Sat Apr 20 09:25:53.684270 2024] [proxy_fcgi:error] [pid 1370306:tid 140686166824512] [client 37.27 ... show more [Sat Apr 20 09:25:53.684270 2024] [proxy_fcgi:error] [pid 1370306:tid 140686166824512] [client 37.27.42.255:64365] AH01071: Got error 'Primary script unknown' [Sat Apr 20 09:25:53.939555 2024] [proxy_fcgi:error] [pid 1370307:tid 140685730633280] [client 37.27.42.255:64967] AH01071: Got error 'Primary script unknown' [Sat Apr 20 09:25:54.072923 2024] [proxy_fcgi:error] [pid 1370555:tid 140685747418688] [client 37.27.42.255:49200] AH01071: Got error 'Primary script unknown' [Sat Apr 20 09:25:55.475831 2024] [proxy_fcgi:error] [pid 1370306:tid 140684673676864] [client 37.27.42.255:52541] AH01071: Got error 'Primary script unknown' [Sat Apr 20 09:25:55.728785 2024] [proxy_fcgi:error] [pid 1370306:tid 140684665284160] [client 37.27.42.255:53473] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇨🇭 Mario Bretscher	2024-04-19 18:57:58 (2 years ago)	[Fri Apr 19 20:57:56.867105 2024] [php:error] [pid 250528] [client 37.27.42.255:62040] script '/var/ ... show more [Fri Apr 19 20:57:56.867105 2024] [php:error] [pid 250528] [client 37.27.42.255:62040] script '/var/www/html/app_dev.php' not found or unable to stat [Fri Apr 19 20:57:57.048162 2024] [php:error] [pid 250587] [client 37.27.42.255:62217] script '/var/www/html/phpinfo.php' not found or unable to stat [Fri Apr 19 20:57:57.194481 2024] [php:error] [pid 251774] [client 37.27.42.255:62314] script '/var/www/html/info.php' not found or unable to stat ... show less	Web App Attack
Anonymous	2024-04-19 00:08:43 (2 years ago)	$f2bV_matches	Web App Attack
Anonymous	2024-04-18 17:49:00 (2 years ago)	androxgh0st group activity	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-18 01:56:03 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 37.27.42.255 (static.255.42.27.37.clients.your- ... show more (mod_security) mod_security (id:210492) triggered by 37.27.42.255 (static.255.42.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 17 21:55:55.403508 2024] [security2:error] [pid 9088] [client 37.27.42.255:64627] [client 37.27.42.255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.93"] [uri "/.git/config"] [unique_id "ZiB9qxcWUGou8vSzgRQFFgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 www.elivecd.org	2024-04-17 17:44:27 (2 years ago)	2024/04/17 18:44:27 [error] 1584325#1584325: 166479 FastCGI sent in stderr: "PHP message: BOT WARNI ... show more 2024/04/17 18:44:27 [error] 1584325#1584325: 166479 FastCGI sent in stderr: "PHP message: BOT WARNING: visitor used the honeypot: 37.27.42.255, url was '78.141.243.157' and abuseipdb '29', function: ELP_site_live" while reading response header from upstream, client: 37.27.42.255, server: www.elivecd.org, request: "GET / HTTP/1.1", upstream: "fastcgi://unix:/run/php/php8.2-fpm-elivewp.sock:", host: "78.141.243.157" ... show less	Web Spam Email Spam
🇺🇸 TPI-Abuse	2024-04-17 06:13:38 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 37.27.42.255 (static.255.42.27.37.clients.your- ... show more (mod_security) mod_security (id:210492) triggered by 37.27.42.255 (static.255.42.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 17 02:13:32.824211 2024] [security2:error] [pid 30225:tid 47357650188032] [client 37.27.42.255:56319] [client 37.27.42.255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.86"] [uri "/.env"] [unique_id "Zh9ojJ5N4N2wQrLjFc9RRQAAAMU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.227

🇲🇽 187.191.48.4

🇬🇧 87.115.211.6

🇬🇧 217.146.80.110

🇧🇾 81.30.98.142

🇺🇸 45.130.83.84

🇮🇩 36.64.131.68

🇬🇧 146.200.82.219

🇮🇶 130.193.229.47

🇨🇳 121.229.25.10

🇻🇳 103.200.25.198

🇮🇳 103.116.137.16

🇳🇱 91.92.40.151

🇹🇼 60.199.224.55

🇺🇦 46.149.191.249

🇹🇭 1.20.228.110

🇨🇳 202.105.98.252

🇭🇰 199.45.155.74

🇵🇱 104.164.171.72

🇸🇰 93.174.180.151