JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.151.43.37

66.151.43.37 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 87%: ?

87%

ISP	HOSTKEY B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS57043
Domain Name	hostkey.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.151.43.37

Whois 66.151.43.37

IP Abuse Reports for 66.151.43.37:

This IP address has been reported a total of 30 times from 16 distinct sources. 66.151.43.37 was first reported on July 16th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-18 22:03:51 (9 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-17. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-07-17 21:59:14 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-17	Web App Attack SSH Hacking
🇫🇷 dynamix	2026-07-17 16:53:00 (1 day ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-07-17 16:43:42 (1 day ago)	(caddyscan) Scanner path probe from 66.151.43.37 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 66.151.43.37 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 66.151.43.37 - - [17/Jul/2026:16:43:40 +0000] "GET /wp-config.php.bak HTTP/1.1" [REDACTED] 200 2627 66.151.43.37 - - [17/Jul/2026:16:43:40 +0000] "GET /wp-config.php.old HTTP/1.1" [REDACTED] 200 2627 66.151.43.37 - - [17/Jul/2026:16:43:41 +0000] "GET /wp-config.php.save HTTP/1.1" [REDACTED] 200 2627 66.151.43.37 - - [17/Jul/2026:16:43:41 +0000] "GET /wp-config.php.txt HTTP/1.1" [REDACTED] 200 2627 66.151.43.37 - - [17/Jul/2026:16:43:41 +0000] "GET /wp-config.php~ HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-17 16:03:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.151.43.37 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 66.151.43.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 12:03:00.375098 2026] [security2:error] [pid 29597:tid 29597] [client 66.151.43.37:42910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bcwildcats.org.bknj2.org"] [uri "/.env"] [unique_id "alpSNGo0ldG_p_N--QPQlQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-07-17 13:30:03 (1 day ago)	ModSecurity rule 949110 triggered on wp1. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇳🇱 e.fierstra	2026-07-17 13:12:10 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 12:51:09 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.151.43.37 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 66.151.43.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 08:51:04.391297 2026] [security2:error] [pid 9597:tid 9597] [client 66.151.43.37:55910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.movieheadshots.robertmcatee.com"] [uri "/.env"] [unique_id "alolOE73slqU2jFKPQg81AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 helios.live	2026-07-17 11:26:54 (1 day ago)	2026/07/17 11:26:48 [error] 793370#793370: 1992104 access forbidden by rule, client: 66.151.43.37, ... show more 2026/07/17 11:26:48 [error] 793370#793370: 1992104 access forbidden by rule, client: 66.151.43.37, server: kocerroxy.com, request: "GET /.env.sample HTTP/1.1", host: "kocerroxy.com" 2026/07/17 11:26:49 [error] 793370#793370: 1992108 access forbidden by rule, client: 66.151.43.37, server: kocerroxy.com, request: "GET /.env.dist HTTP/1.1", host: "kocerroxy.com" 2026/07/17 11:26:50 [error] 793370#793370: 1992115 access forbidden by rule, client: 66.151.43.37, server: kocerroxy.com, request: "GET /.env.template HTTP/1.1", host: "kocerroxy.com" 2026/07/17 11:26:52 [error] 793370#793370: 1992118 access forbidden by rule, client: 66.151.43.37, server: kocerroxy.com, request: "GET /.env.production.local HTTP/1.1", host: "kocerroxy.com" 2026/07/17 11:26:53 [error] 793370#793370: 1992129 access forbidden by rule, client: 66.151.43.37, server: kocerroxy.com, request: "GET /.env.development.local HTTP/1.1", host: "kocerroxy.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 11:20:32 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.151.43.37 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 66.151.43.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:20:24.630200 2026] [security2:error] [pid 19694:tid 19694] [client 66.151.43.37:60732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.philadelphiacalligraphers.org.book-arts.com"] [uri "/.env"] [unique_id "aloP-GWYXJLhuINWUM0QRgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 10:46:23 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.151.43.37 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 66.151.43.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:46:15.516988 2026] [security2:error] [pid 31095:tid 31095] [client 66.151.43.37:35120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deharrisassoc.com"] [uri "/.env.test"] [unique_id "aloH9_HFi4borx2PuVNeEQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-17 10:28:17 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 10:09:48 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.151.43.37 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 66.151.43.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:09:41.583462 2026] [security2:error] [pid 18184:tid 18299] [client 66.151.43.37:60968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.photo.gallery.the-aquifer.com"] [uri "/.env.production"] [unique_id "aln_ZRCltmlPc4saqahV_gAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-17 10:06:21 (1 day ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=156	Hacking
Anonymous	2026-07-17 09:18:17 (1 day ago)	66.151.43.37 - - [17/Jul/2026:11:18:12 +0200] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows ... show more 66.151.43.37 - - [17/Jul/2026:11:18:12 +0200] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" 66.151.43.37 - - [17/Jul/2026:11:18:12 +0200] "GET /.env.local HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" 66.151.43.37 - - [17/Jul/2026:11:18:12 +0200] "GET /.env.production HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" 66.151.43.37 - - [17/Jul/2026:11:18:13 +0200] "GET /.env.development HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.232.176.7

🇧🇷 186.225.225.119

🇵🇱 172.64.198.206

🇨🇳 117.50.127.153

🇨🇳 115.190.149.134

🇩🇪 69.5.169.126

🇨🇦 66.70.191.209

🇭🇰 47.83.207.150

🇺🇸 45.130.83.178

🇮🇩 36.91.101.203

🇮🇳 2405:201:c039:421b:a96d:c8d1:b258:7de4

🇹🇭 199.21.172.68

🇵🇦 191.98.196.14

🇺🇸 165.232.143.54

🇺🇸 137.131.30.172

🇰🇷 132.226.168.151

🇨🇳 125.120.240.250

🇨🇳 119.96.193.72

🇨🇳 117.176.220.76

🇺🇸 65.49.1.34