JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.109.55.42

65.109.55.42 was found in our database!

This IP was reported 149 times. Confidence of Abuse is 100%: ?

100%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.42.55.109.65.clients.your-server.de
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.109.55.42

Whois 65.109.55.42

IP Abuse Reports for 65.109.55.42:

This IP address has been reported a total of 149 times from 86 distinct sources. 65.109.55.42 was first reported on May 28th 2026, and the most recent report was 52 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Roderic	2026-06-19 01:19:07 (52 minutes ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇬🇷 setupgr	2026-06-19 00:24:30 (1 hour ago)	(mod_security) mod_security (id:11000011) triggered by 65.109.55.42 (FI/Finland/Uusimaa/Helsinki/-/[ ... show more (mod_security) mod_security (id:11000011) triggered by 65.109.55.42 (FI/Finland/Uusimaa/Helsinki/-/[AS24940 HETZNER-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 03:24:27.629265 2026] [security2:error] [pid 2278:tid 2428] [client 65.109.55.42:36820] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.42.55.109.65.clients.your-server.de"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/robots.txt"] [unique_id "ajSMOwuYeXI6iTUJgvuNaQAAAIg"] show less	Port Scan
🇬🇧 poundawebsiteltd	2026-06-18 18:36:29 (7 hours ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 65.109.55.42 - - [18/Jun/2026:19: ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 65.109.55.42 - - [18/Jun/2026:19:36:27 +0100] GET / HTTP/1.1 403 177 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.21-SNAPSHOT show less	Web App Attack
🇺🇸 abenage	2026-06-18 06:52:01 (19 hours ago)	65.109.55.42 - - [18/Jun/2026:00:52:00 -0600] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (W ... show more 65.109.55.42 - - [18/Jun/2026:00:52:00 -0600] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.21-SNAPSHOT" show less	Bad Web Bot
🇩🇪 Viveronese	2026-06-18 06:10:53 (20 hours ago)	HTTP vulnerability scanning	Web App Attack
🇯🇵 GuangChen233	2026-06-18 04:43:21 (21 hours ago)	Blocked by CrowdSec: Ip 65.109.55.42 performed 'crowdsecurity/http-bad-user-agent' (2 events over 8. ... show more Blocked by CrowdSec: Ip 65.109.55.42 performed 'crowdsecurity/http-bad-user-agent' (2 events over 8.26036525s) at 2026-06-18 04:43:19.914858221 0000 UTC show less	Bad Web Bot Web App Attack
🇦🇹 nomzamo	2026-06-18 04:37:50 (21 hours ago)	Fail2Ban reported: nginx-badbots	Brute-Force Bad Web Bot
🇩🇪 Skyrider	2026-06-18 04:25:26 (21 hours ago)	crowdsecurity/http-bad-user-agent	Bad Web Bot
Anonymous	2026-06-17 22:10:13 (1 day ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇦🇺 paulshipley.com.au	2026-06-17 19:00:21 (1 day ago)	[Thu Jun 18 05:00:20.614919 2026] [security2:error] [pid 399826] [client 65.109.55.42:46094] [client ... show more [Thu Jun 18 05:00:20.614919 2026] [security2:error] [pid 399826] [client 65.109.55.42:46094] [client 65.109.55.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/robots.txt"] [unique_id "ajLuxBi6A-MM8xPgLBS3hAAAAAk"] ... show less	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-17 18:08:02 (1 day ago)	Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice02,wa01,wa02]	Hacking Bad Web Bot
🇨🇭 4server	2026-06-17 17:41:53 (1 day ago)	[WedJun1719:41:48.1976812026][security2:error][pid2121607:tid2121837][client65.109.55.42:0]ModSecuri ... show more [WedJun1719:41:48.1976812026][security2:error][pid2121607:tid2121837][client65.109.55.42:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"probuild.ch\"][uri\"/robots.txt\"][unique_id\"ajLcXNiQzfS_a0ucuafAJAAAAEo\"] show less	Hacking Web App Attack
🇺🇸 Alvino	2026-06-17 16:53:52 (1 day ago)	Blocked due to using a VPN or data center IP with abuse: 100	Web Spam VPN IP
🇫🇮 kumiko	2026-06-17 14:45:47 (1 day ago)	[2026-06-17 17:45:46] Known bad bot [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K ... show more [2026-06-17 17:45:46] Known bad bot [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.21-SNAPSHOT] show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-17 14:12:51 (1 day ago)	[WedJun1716:12:45.9435602026][security2:error][pid2757571:tid2757691][client65.109.55.42:0]ModSecuri ... show more [WedJun1716:12:45.9435602026][security2:error][pid2757571:tid2757691][client65.109.55.42:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.maurokorangraf.ch\"][uri\"/robots.txt\"][unique_id\"ajKrXQ15ft7kdm56qlNASAAAAAI\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 149 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.153.143

🇰🇷 218.149.228.164

🇬🇧 193.163.125.76

🇩🇪 167.94.145.17

🇺🇸 154.197.57.83

🇺🇸 73.140.240.113

🇧🇬 5.188.206.66

🇭🇰 223.197.153.138

🇷🇴 193.32.162.83

🇨🇴 152.200.205.179

🇫🇮 147.185.133.216

🇧🇷 129.121.42.131

🇮🇳 125.19.253.154

🇮🇳 125.19.245.34

🇨🇳 120.224.237.226

🇺🇸 45.56.122.18

🇺🇸 13.89.125.30

🇬🇧 217.146.80.114

🇳🇱 204.76.203.231

🇹🇳 197.1.91.103