AbuseIPDB » 5.255.100.26

5.255.100.26 was found in our database!

This IP was reported 817 times. Confidence of Abuse is 59%: ?

59%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	The Infrastructure Group B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60404
Hostname(s)	tor-exit-01.wurzel.io
Domain Name	theinfrastructure.group
Country	Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 5.255.100.26

Whois 5.255.100.26

IP Abuse Reports for 5.255.100.26:

This IP address has been reported a total of 817 times from 176 distinct sources. 5.255.100.26 was first reported on December 25th 2021, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2025-07-16 04:39:53 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 00:39:46.701740 2025] [security2:error] [pid 5211:tid 5348] [client 5.255.100.26:39568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.beltagin.com"] [uri "/.git/config"] [unique_id "aHctEvs0g76VwYJuoLZUOQAAAVU"] show less	Brute-Force Bad Web Bot Web App Attack
xmission.com	2025-07-15 02:44:11 (5 days ago)	Blocked by UFW (TCP on 52306) Source port: 39968 TTL: 53 Packet length: 60 T ... show moreBlocked by UFW (TCP on 52306) Source port: 39968 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 5.255.100.26) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
TPI-Abuse	2025-07-15 01:50:23 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 21:50:17.469565 2025] [security2:error] [pid 32689:tid 32689] [client 5.255.100.26:35088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.waterjetsolutions.com"] [uri "/.git/config"] [unique_id "aHWz2cGj1oi3cy9e3IypagAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
ipblock.com	2025-07-14 05:24:00 (6 days ago)	IPBlock protected site ID [4055-d][s=06]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=06]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
xmission.com	2025-07-12 01:51:51 (1 week ago)	Blocked by UFW (TCP on 58114) Source port: 33356 TTL: 53 Packet length: 60 T ... show moreBlocked by UFW (TCP on 58114) Source port: 33356 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 5.255.100.26) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
oncord	2025-07-11 08:42:11 (1 week ago)	Form spam	Web Spam
ᴀʀᴛ	2025-07-11 00:13:19 (1 week ago)	Triggered Cloudflare WAF (l7ddos) from NL. ASN: 60404 (LITESERVER) Protocol: HTTP/2 (GET ... show moreTriggered Cloudflare WAF (l7ddos) from NL. ASN: 60404 (LITESERVER) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
triplecode	2025-07-09 06:00:16 (1 week ago)	Reported from hMailServer	Hacking
ipblock.com	2025-07-07 02:44:00 (1 week ago)	IPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
Site.eu	2025-07-04 08:52:46 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
TPI-Abuse	2025-07-04 00:53:14 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 03 20:53:09.431200 2025] [security2:error] [pid 12666:tid 12666] [client 5.255.100.26:37436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "braintechsoftwaresolutions.com"] [uri "/wp-config.php6"] [unique_id "aGcl9ZSfEbwxnWyBgzctFgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-02 08:03:44 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 02 04:03:40.402610 2025] [security2:error] [pid 16544:tid 16544] [client 5.255.100.26:55874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mcwyo.com"] [uri "/.git/config"] [unique_id "aGTn3N_Hz39neQQMXCaAqgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-01 02:26:45 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 22:26:40.925436 2025] [security2:error] [pid 15242:tid 15317] [client 5.255.100.26:45788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.credit-protector.com.credit-card-cap.com"] [uri "/.git/config"] [unique_id "aGNHYBmKnq8mpVDRk7f56AAAAIs"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-30 04:26:27 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 00:26:20.053296 2025] [security2:error] [pid 1168:tid 1168] [client 5.255.100.26:50446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.sutherlandyogastudio.com"] [uri "/.git/config"] [unique_id "aGIR7Lx5utt7mW9fKqY80gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-30 02:02:17 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 22:02:13.197176 2025] [security2:error] [pid 845489:tid 845489] [client 5.255.100.26:56102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knuf1.fritsknuf.com"] [uri "/.git/config"] [unique_id "aGHwJbQfDoyJ5K8GxHqNYAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack