JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.255.103.235

5.255.103.235 was found in our database!

This IP was reported 661 times. Confidence of Abuse is 0%: ?

ISP	The Infrastructure Group B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60404
Domain Name	theinfrastructure.group
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.255.103.235

Whois 5.255.103.235

IP Abuse Reports for 5.255.103.235:

This IP address has been reported a total of 661 times from 255 distinct sources. 5.255.103.235 was first reported on August 19th 2022, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 avgsmoe	2026-05-05 20:59:11 (3 months ago)	CROWDSEC offender. Observed 81 times.	Port Scan Brute-Force Web App Attack
Anonymous	2026-04-10 01:45:21 (4 months ago)		Web Spam
🇩🇪 LRob	2026-04-07 20:15:19 (4 months ago)	Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ... show more Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 04:25:27 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 5.255.103.235 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 5.255.103.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 00:25:23.566289 2026] [security2:error] [pid 687522:tid 687522] [client 5.255.103.235:51646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.abu-dhabi-boat-registration.com"] [uri "/.git/config"] [unique_id "adSHM0CSnb5TCwCpct5giQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 gnom4ik	2026-04-04 19:21:17 (4 months ago)	ban-reviewer auto report; ip=5.255.103.235; scenario=ssh:bruteforce; verdict=valid_ban; confidence=0 ... show more ban-reviewer auto report; ip=5.255.103.235; scenario=ssh:bruteforce; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
Anonymous	2026-03-17 20:03:14 (5 months ago)	2026-03-17 11:00:24,637 fail2ban.actions [3511917]: NOTICE [tor] Ban 5.255.103.235 2026-03-1 ... show more 2026-03-17 11:00:24,637 fail2ban.actions [3511917]: NOTICE [tor] Ban 5.255.103.235 2026-03-17 14:00:09,250 fail2ban.actions [3511917]: NOTICE [tor] Ban 5.255.103.235 2026-03-17 16:01:28,299 fail2ban.actions [3511917]: NOTICE [tor] Ban 5.255.103.235 2026-03-17 19:01:13,802 fail2ban.actions [3511917]: NOTICE [tor] Ban 5.255.103.235 2026-03-17 22:03:07,185 fail2ban.actions [3511917]: NOTICE [tor] Ban 5.255.103.235 show less	Brute-Force
🇫🇷 ✨	2026-03-11 02:29:17 (5 months ago)	Rule : PLESK BOT 2026-03-11 02:18:37 Unauthorized login attempt to Plesk Panel from IP 5.255.103.235 ... show more Rule : PLESK BOT 2026-03-11 02:18:37 Unauthorized login attempt to Plesk Panel from IP 5.255.103.235 with username admin show less	Hacking Brute-Force Web App Attack
🇮🇳 liveaspankaj	2026-03-07 19:23:45 (5 months ago)	DDoS attack: 63 requests in 5m (GET / or repair.php).	DDoS Attack
Anonymous	2026-02-28 17:59:56 (5 months ago)		Web Spam Bad Web Bot
🇫🇮 gnom4ik	2026-02-22 05:41:05 (6 months ago)	ban-reviewer auto report; ip=5.255.103.235; scenario=ssh:bruteforce; verdict=valid_ban; confidence=0 ... show more ban-reviewer auto report; ip=5.255.103.235; scenario=ssh:bruteforce; verdict=valid_ban; confidence=0.95; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ssh:bruteforce scenario indicates brute-force attack pattern; IP has 2 active decisions in lookback window; IP has 2 total decisions, indicating repeated abuse; Decision duration of 8340 minutes (about 5.8 days) is consistent with sustained brute-force att show less	Port Scan Hacking Brute-Force SSH
Anonymous	2026-02-21 23:39:05 (6 months ago)		Web App Attack
Anonymous	2026-02-08 16:30:26 (6 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 avgsmoe	2026-01-30 04:25:05 (6 months ago)	REPEAT offender. Observed 300 times.	Port Scan Brute-Force
🇧🇪 taivas.nl	2026-01-20 05:32:20 (7 months ago)	Many_bad_calls	Web App Attack
🇧🇪 taivas.nl	2026-01-19 11:02:12 (7 months ago)	Bad_requests	Bad Web Bot

Showing 1 to 15 of 661 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.16

🇨🇳 119.100.36.159

🇺🇸 203.161.43.31

🇸🇻 201.247.170.155

🇭🇰 199.45.154.123

🇧🇪 198.235.24.251

🇸🇪 171.25.158.87

🇮🇩 103.59.160.61

🇳🇱 45.148.10.141

🇬🇭 41.139.5.39

🇺🇸 34.148.104.165

🇺🇸 34.94.4.247

🇷🇴 2.57.122.53

🇮🇩 182.5.8.224

🇳🇱 176.65.148.185

🇨🇦 172.253.238.154

🇺🇸 162.216.150.56

🇺🇦 31.128.160.171

🇺🇸 20.228.149.118

🇨🇦 15.156.65.180