AbuseIPDB » 5.255.100.26

5.255.100.26 was found in our database!

This IP was reported 782 times. Confidence of Abuse is 65%: ?

65%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	The Infrastructure Group B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60404
Hostname(s)	tor-exit-01.wurzel.io
Domain Name	theinfrastructure.group
Country	Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 5.255.100.26

Whois 5.255.100.26

IP Abuse Reports for 5.255.100.26:

This IP address has been reported a total of 782 times from 173 distinct sources. 5.255.100.26 was first reported on December 25th 2021, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
backslash	2025-02-04 06:50:11 (4 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
Swiptly	2025-02-03 02:21:56 (4 months ago)	Aggressive SEO Bots ...	Bad Web Bot
TPI-Abuse	2025-02-02 07:08:38 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 02 02:08:30.695547 2025] [security2:error] [pid 23829:tid 23829] [client 5.255.100.26:33886] [client 5.255.100.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staben.com"] [uri "/wp-config.phpOLD"] [unique_id "Z58Z7ks9q0XfJ8OJda-b8gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
oncord	2025-01-31 06:26:54 (4 months ago)	Form spam	Web Spam
TPI-Abuse	2025-01-30 07:44:37 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 30 02:44:30.724599 2025] [security2:error] [pid 2499:tid 2514] [client 5.255.100.26:51848] [client 5.255.100.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mjkotob.com"] [uri "/wp-config.bak"] [unique_id "Z5st3tB3JyRXV-TAFPk5lgAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
oncord	2025-01-28 08:51:11 (4 months ago)	Form spam	Web Spam
strzonnek	2025-01-27 06:38:27 (4 months ago)	attack on webform	Brute-Force Web App Attack
strefapi_com	2025-01-26 05:12:18 (4 months ago)	Brute-force web ...	Hacking Brute-Force Web App Attack
strzonnek	2025-01-26 02:23:26 (4 months ago)	attack on webform	Brute-Force Web App Attack
oncord	2025-01-25 05:51:29 (4 months ago)	Form spam	Web Spam
strzonnek	2025-01-24 08:44:09 (4 months ago)	attack on webform	Brute-Force Web App Attack
TPI-Abuse	2025-01-24 02:31:56 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 5.255.100.26 (tor-exit-01.wurzel.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 23 21:31:50.248760 2025] [security2:error] [pid 1458:tid 1458] [client 5.255.100.26:58258] [client 5.255.100.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bifemales.org"] [uri "/wp-config.php_hlt"] [unique_id "Z5L7lrTWigpJ3Qsse1aUggAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
strzonnek	2025-01-23 07:31:24 (4 months ago)	attack on webform	Brute-Force Web App Attack
oncord	2025-01-22 06:17:10 (4 months ago)	Form spam	Web Spam
strzonnek	2025-01-22 02:38:12 (4 months ago)	attack on webform	Brute-Force Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩