JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.255.123.222

5.255.123.222 was found in our database!

This IP was reported 826 times. Confidence of Abuse is 100%: ?

100%

ISP	The Infrastructure Group B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60404
Domain Name	theinfrastructure.group
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.255.123.222

Whois 5.255.123.222

IP Abuse Reports for 5.255.123.222:

This IP address has been reported a total of 826 times from 342 distinct sources. 5.255.123.222 was first reported on July 2nd 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-03 06:54:00 (19 hours ago)	(caddyscan) Scanner path probe from 5.255.123.222 (NL/The Netherlands/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 5.255.123.222 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 5.255.123.222 - - [03/Jun/2026:06:53:55 +0000] "GET /backend/.env HTTP/1.1" [REDACTED] 200 2627 5.255.123.222 - - [03/Jun/2026:06:53:55 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 5.255.123.222 - - [03/Jun/2026:06:53:55 +0000] "GET /.env.staging HTTP/1.1" [REDACTED] 200 2627 5.255.123.222 - - [03/Jun/2026:06:53:56 +0000] "GET /.aws/credentials HTTP/1.1" [REDACTED] 200 2627 5.255.123.222 - - [03/Jun/2026:06:53:56 +0000] "GET /laravel/.env HTTP/1.1" show less	Port Scan
🇳🇱 Mangelot Hosting	2026-06-03 04:53:25 (21 hours ago)	(modsecurity) srv103 ModSecurity 5.255.123.222 (NL/The Netherlands/-): 10 in the last 3600 secs; Por ... show more (modsecurity) srv103 ModSecurity 5.255.123.222 (NL/The Netherlands/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 big-cloud.nl	2026-06-03 04:36:34 (21 hours ago)	Try to access /portal/.env	Web App Attack
🇫🇷 masterguru	2026-06-03 04:01:38 (22 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 5.255.123.222 (NL/The Netherlands/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 5.255.123.222 (NL/The Netherlands/-): 1 in the last 3600 secs (0-197) show less	Hacking
Anonymous	2026-06-03 04:00:49 (22 hours ago)	5.255.123.222 - - [03/Jun/2026:06:00:42 +0200] "GET /.yarnrc HTTP/1.1" 404 156542 "-" "Mozilla/5.0 ( ... show more 5.255.123.222 - - [03/Jun/2026:06:00:42 +0200] "GET /.yarnrc HTTP/1.1" 404 156542 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 5.255.123.222 - - [03/Jun/2026:06:00:42 +0200] "GET /.yarnrc HTTP/1.1" 404 26264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 5.255.123.222 - - [03/Jun/2026:06:00:43 +0200] "GET /gcp-credentials.json HTTP/1.1" 404 26271 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 5.255.123.222 - - [03/Jun/2026:06:00:43 +0200] "GET /gcp-credentials.json HTTP/1.1" 404 156556 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 5.255.123.222 - - [03/Jun/2026:06:00:43 +0200] "GET /keyfile.json HTTP/1.1" 404 156548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KH ... show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-03 03:34:44 (22 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 5.255.123.222 (NL/The Netherlands/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 5.255.123.222 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 Savvii	2026-06-03 02:56:46 (23 hours ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-06-03 01:58:02 (1 day ago)	5.255.123.222 - - [03/Jun/2026:03:58:02 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 ... show more 5.255.123.222 - - [03/Jun/2026:03:58:02 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "pingusmc.org" ... show less	Brute-Force Web App Attack
🇺🇸 kuroneko_omu	2026-06-03 00:50:05 (1 day ago)	Fail2Ban <webattack> jail detected 10 attempts against 5.255.123.222.	DDoS Attack Hacking Brute-Force Web App Attack
🇵🇹 rncbc	2026-06-02 23:54:22 (1 day ago)	[Wed Jun 03 00:54:20.654316 2026] [authz_core:error] [pid 760585:tid 760585] [client 5.255.123.222:5 ... show more [Wed Jun 03 00:54:20.654316 2026] [authz_core:error] [pid 760585:tid 760585] [client 5.255.123.222:59034] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/ [Wed Jun 03 00:54:21.757305 2026] [authz_core:error] [pid 760585:tid 760585] [client 5.255.123.222:59034] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/.yarnrc [Wed Jun 03 00:54:22.355496 2026] [authz_core:error] [pid 760539:tid 760539] [client 5.255.123.222:35804] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/.kube ... show less	Brute-Force Bad Web Bot Web App Attack SSH
🇩🇪 updown.io	2026-06-02 23:36:55 (1 day ago)	{"level":"info","ts":1780440348.7256842,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1780440348.7256842,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"5.255.123.222","remote_port":"7020","client_ip":"5.255.123.222","proto":"HTTP/1.1","method":"GET","host":"www-admin1.z27o.status.updown.io","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15"],"Accept":["/"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000056047,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https://www-admin1.z27o.status.updown.io/"],"Content-Type":[],"Server":["Caddy"]}} {"level":"info","ts":1780443411.3389554,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"5.255.123.222","remote_port":"41156","client_ip":"5.255.123.222","proto":"HTTP/1.1","method":"GET","host":"status.shared-ownershipmortgages.com","uri":"/","headers":{"Accept":["/"],"Accept-Encoding":["gzip"], ... show less	DDoS Attack Web App Attack
🇳🇱 Savvii	2026-06-02 22:54:53 (1 day ago)	20 attempts against mh-misbehave-ban on moon	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-02 20:51:10 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 Petros Stefanakis	2026-06-02 20:17:35 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 5.255.123.222 (-)	SQL Injection
🇳🇴 doofy	2026-06-02 19:48:10 (1 day ago)	[Tue Jun 02 21:48:09.250903 2026] [authz_core:error] [pid 2080286:tid 2080365] [client 5.255.123.222 ... show more [Tue Jun 02 21:48:09.250903 2026] [authz_core:error] [pid 2080286:tid 2080365] [client 5.255.123.222:40402] AH01630: client denied by server configuration: /www/hekser.net/.yarnrc [Tue Jun 02 21:48:09.263220 2026] [authz_core:error] [pid 2080286:tid 2080363] [client 5.255.123.222:40404] AH01630: client denied by server configuration: /www/hekser.net/.env [Tue Jun 02 21:48:09.679539 2026] [authz_core:error] [pid 2080286:tid 2080352] [client 5.255.123.222:40404] AH01630: client denied by server configuration: /www/hekser.net/.env.local [Tue Jun 02 21:48:09.804212 2026] [authz_core:error] [pid 2080286:tid 2080363] [client 5.255.123.222:40402] AH01630: client denied by server configuration: /www/hekser.net/.env.production [Tue Jun 02 21:48:09.971647 2026] [authz_core:error] [pid 2080286:tid 2080352] [client 5.255.123.222:40402] AH01630: client denied by server configuration: /www/hekser.net/.env.bak ... show less	Brute-Force Web App Attack

Showing 31 to 45 of 826 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.141.46.157

🇧🇪 198.235.24.184

🇲🇽 189.178.36.53

🇧🇴 181.115.171.57

🇺🇸 144.126.217.239

🇺🇸 98.20.36.34

🇺🇸 76.143.253.230

🇺🇸 57.141.0.9

🇸🇬 43.172.195.100

🇨🇳 220.202.112.221

🇪🇹 196.188.116.56

🇳🇱 185.223.235.31

🇲🇴 182.93.50.90

🇳🇱 89.21.67.145

🇱🇹 77.90.185.79

🇩🇪 69.5.169.63

🇩🇪 69.5.169.27

🇺🇸 64.23.136.159

🇺🇸 49.51.248.237

🇺🇸 18.217.208.51