JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.255.122.18

5.255.122.18 was found in our database!

This IP was reported 270 times. Confidence of Abuse is 54%: ?

54%

ISP	The Infrastructure Group B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60404
Domain Name	theinfrastructure.group
Country	🇳🇱 Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.255.122.18

Whois 5.255.122.18

IP Abuse Reports for 5.255.122.18:

This IP address has been reported a total of 270 times from 146 distinct sources. 5.255.122.18 was first reported on October 14th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 rh24	2026-05-28 03:31:51 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 5.255.122.18 (-)	SQL Injection
Anonymous	2026-05-28 02:42:17 (1 month ago)	(caddyscan) Scanner path probe from 5.255.122.18 (NL/The Netherlands/-): 5 in the last 3600 secs; Po ... show more (caddyscan) Scanner path probe from 5.255.122.18 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 5.255.122.18 - - [28/May/2026:02:42:14 +0000] "GET /.aws/credentials HTTP/1.1" [REDACTED] 200 2627 5.255.122.18 - - [28/May/2026:02:42:15 +0000] "GET /app/.env HTTP/1.1" [REDACTED] 200 2627 5.255.122.18 - - [28/May/2026:02:42:15 +0000] "GET /.ssh/id_dsa HTTP/1.1" [REDACTED] 200 2627 5.255.122.18 - - [28/May/2026:02:42:15 +0000] "GET /public/.env HTTP/1.1" [REDACTED] 200 2627 5.255.122.18 - - [28/May/2026:02:42:15 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
🇦🇺 AWW-Admin	2026-05-28 02:22:46 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 5.255.122.18 (-)	SQL Injection
🇩🇪 iNetWorker	2026-05-28 02:11:17 (1 month ago)	trolling for resource vulnerabilities	Web App Attack
🇩🇪 todix	2026-05-28 02:08:24 (1 month ago)	Web App Attack Exploid from 5.255.122.18	Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-05-28 01:55:54 (1 month ago)	5.255.122.18 - - [28/May/2026:02:55:52 +0100] "GET /roundcube/sitemap.xml HTTP/2.0" 404 994 "https:/ ... show more 5.255.122.18 - - [28/May/2026:02:55:52 +0100] "GET /roundcube/sitemap.xml HTTP/2.0" 404 994 "https://webmail.betatechnologies.info/sitemap.xml" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" show less	Bad Web Bot
🇱🇻 garmtech.com	2026-05-28 01:46:14 (1 month ago)	Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probi ... show more Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing. show less	Web App Attack
Anonymous	2026-05-28 01:16:28 (1 month ago)	(caddyscan) Scanner path probe from 5.255.122.18 (NL/The Netherlands/-): 5 in the last 3600 secs; Po ... show more (caddyscan) Scanner path probe from 5.255.122.18 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 5.255.122.18 - - [28/May/2026:01:16:26 +0000] "GET /.env.backup HTTP/1.1" [REDACTED] 200 2627 5.255.122.18 - - [28/May/2026:01:16:26 +0000] "GET /.env.example HTTP/1.1" [REDACTED] 200 2627 5.255.122.18 - - [28/May/2026:01:16:26 +0000] "GET /.env.staging HTTP/1.1" [REDACTED] 200 2627 5.255.122.18 - - [28/May/2026:01:16:26 +0000] "GET /.env.old HTTP/1.1" [REDACTED] 200 2627 5.255.122.18 - - [28/May/2026:01:16:26 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
🇫🇷 LRNP	2026-05-28 00:52:14 (1 month ago)	mirror2.urbanterror.info:443 5.255.122.18 - - [28/May/2026:00:52:08 +0000] "GET /sitemap.xml HTTP/1. ... show more mirror2.urbanterror.info:443 5.255.122.18 - - [28/May/2026:00:52:08 +0000] "GET /sitemap.xml HTTP/1.1" 404 118 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 DingTalk(2.7.10) com.laiwang.DingTalk/35900215 Channel/201200 language/zh-Hans-CN" mirror2.urbanterror.info:443 5.255.122.18 - - [28/May/2026:00:52:08 +0000] "GET /robots.txt HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Linux; Android 14; SM-S921B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" mirror2.urbanterror.info:443 5.255.122.18 - - [28/May/2026:00:52:08 +0000] "GET /asset-manifest.json HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Linux; Android 14; SM-S921B Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/131.0.0.0 Mobile Safari/537.36 MMWEBID/4123 MicroMessenger/8.0.55.2540(0x28003735)" mirror2.urbanterror.info:443 5.255.122.18 - - [28/May/2026:00:52:08 +0000] "GET /manifest.json HTTP/1.1" 404 181 "-" "Mozi ... show less	Bad Web Bot Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-05-28 00:48:20 (1 month ago)	Blocked by YFC Security on https://1904.brixzly.com — type: directory_scan_attempts	Web App Attack
Anonymous	2026-05-27 23:50:09 (1 month ago)	5.255.122.18 detected on srv01	Brute-Force
🇩🇪 Gwyneth Llewelyn	2026-05-27 22:42:57 (1 month ago)	2026/05/27 23:42:55 [error] 3403#3403: 8103471 access forbidden by rule, client: 5.255.122.18, serv ... show more 2026/05/27 23:42:55 [error] 3403#3403: 8103471 access forbidden by rule, client: 5.255.122.18, server: [redacted], request: "GET /api/.env HTTP/2.0", host: "urbanglass.betatechnologies.info" 2026/05/27 23:42:55 [error] 3403#3403: 8103518 access forbidden by rule, client: 5.255.122.18, server: [redacted], request: "GET /admin/.env HTTP/2.0", host: "urbanglass.betatechnologies.info" 2026/05/27 23:42:55 [error] 3402#3402: 8103472 access forbidden by rule, client: 5.255.122.18, server: [redacted], request: "GET /.vault.env HTTP/2.0", host: "urbanglass.betatechnologies.info" show less	Brute-Force Web App Attack
🇫🇷 LRNP	2026-05-27 20:42:45 (1 month ago)	mirror2.urbanterror.info:443 5.255.122.18 - - [27/May/2026:20:42:39 +0000] "GET /sitemap.xml HTTP/1. ... show more mirror2.urbanterror.info:443 5.255.122.18 - - [27/May/2026:20:42:39 +0000] "GET /sitemap.xml HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) UBrowser/8.0.0.0 Chrome/120.0.0.0 Safari/537.36" mirror2.urbanterror.info:443 5.255.122.18 - - [27/May/2026:20:42:39 +0000] "GET /robots.txt HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" mirror2.urbanterror.info:443 5.255.122.18 - - [27/May/2026:20:42:40 +0000] "GET /asset-manifest.json HTTP/1.1" 404 118 "-" "Mozilla/5.0 (iPad; CPU OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1" mirror2.urbanterror.info:443 5.255.122.18 - - [27/May/2026:20:42:41 +0000] "GET /manifest.json HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" mirror2.urbanterror.inf ... show less	Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-05-27 17:21:03 (1 month ago)	2026/05/27 18:21:03 [error] 3401#3401: 8050062 access forbidden by rule, client: 5.255.122.18, serv ... show more 2026/05/27 18:21:03 [error] 3401#3401: 8050062 access forbidden by rule, client: 5.255.122.18, server: streaming.betatechnologies.info, request: "GET /.env HTTP/2.0", host: "streaming.betatechnologies.info" 2026/05/27 18:21:03 [error] 3409#3409: 8050061 access forbidden by rule, client: 5.255.122.18, server: streaming.betatechnologies.info, request: "GET /backend/.env HTTP/2.0", host: "streaming.betatechnologies.info" 2026/05/27 18:21:03 [error] 3402#3402: 8050057 access forbidden by rule, client: 5.255.122.18, server: streaming.betatechnologies.info, request: "GET /.vault.env HTTP/2.0", host: "streaming.betatechnologies.info" show less	Brute-Force Web App Attack
🇩🇪 Nevermind	2026-05-27 16:07:25 (1 month ago)	5.255.122.18 - - [27/May/2026:18:07:24 +0200] "GET /.git/config HTTP/1.1" 403 4206 "-" "Mozilla/5.0 ... show more 5.255.122.18 - - [27/May/2026:18:07:24 +0200] "GET /.git/config HTTP/1.1" 403 4206 "-" "Mozilla/5.0 (iPad; CPU OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.7 Mobile/15E148 Safari/604.1" 5.255.122.18 - - [27/May/2026:18:07:24 +0200] "GET /.aws/credentials HTTP/1.1" 404 4203 "-" "Mozilla/5.0 (iPad; CPU OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.7 Mobile/15E148 Safari/604.1" 5.255.122.18 - - [27/May/2026:18:07:24 +0200] "GET /.env.old HTTP/1.1" 403 4206 "-" "Mozilla/5.0 (Linux; U; Android 14; zh-CN; SM-S921B Build/UP1A.231005.007) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/131.0.0.0 MQQBrowser/14.5 Mobile Safari/537.36" 5.255.122.18 - - [27/May/2026:18:07:24 +0200] "GET /app/.env HTTP/1.1" 403 4206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Web App Attack

Showing 1 to 15 of 270 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.212.129.205

🇭🇰 103.210.21.178

🇱🇹 45.227.254.170

🇺🇸 216.9.1.45

🇧🇪 198.235.24.208

🇨🇦 167.99.182.39

🇨🇦 143.110.217.244

🇰🇪 105.165.236.138

🇮🇳 103.181.109.62

🇺🇸 54.189.134.195

🇫🇷 31.56.58.122

🇬🇧 5.226.140.58

🇸🇴 197.220.92.185

🇲🇾 113.211.215.22

🇷🇺 45.195.221.26

🇯🇵 43.165.190.208

🇳🇱 185.223.235.48

🇺🇸 162.216.150.5

🇨🇳 111.55.74.17

🇺🇸 81.30.98.92