JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.255.124.203

5.255.124.203 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 100%: ?

100%

ISP	The Infrastructure Group B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60404
Domain Name	theinfrastructure.group
Country	🇳🇱 Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.255.124.203

Whois 5.255.124.203

IP Abuse Reports for 5.255.124.203:

This IP address has been reported a total of 89 times from 75 distinct sources. 5.255.124.203 was first reported on July 24th 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-07-28 22:45:00 (4 minutes ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇪🇸 librebit	2026-07-28 18:36:23 (4 hours ago)	Brute force	Brute-Force
🇧🇷 diego	2026-07-28 08:28:05 (14 hours ago)	[rede-188] 2026-07-28 08:10:52, Client: 5.255.124.203, Protocol: 6, Unauthorized activity to HTTP: P ... show more [rede-188] 2026-07-28 08:10:52, Client: 5.255.124.203, Protocol: 6, Unauthorized activity to HTTP: POST /cgi-bin/../../../../../../../../../../bin/sh show less	Web App Attack
🇩🇪 barbarella	2026-07-28 07:28:36 (15 hours ago)	Multiple (7) times attack on https port 443: illegal attempt to access local shell (POST /cgi-bin/.% ... show more Multiple (7) times attack on https port 443: illegal attempt to access local shell (POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) 07:28:36 illegal attempt to access local shell (POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) 07:28:36 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input) 07:28:36 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input) 07:28:36 Hacking attempt (POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input) 07:28:36 hacking attempt (POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input) 07:28:36 Hacking attempt (POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input) show less	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-07-28 06:50:38 (15 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇦🇷 Bruno	2026-07-28 05:57:36 (16 hours ago)	Port Scanner: 5.255.124.203	Port Scan
🇵🇱 lns.bz	2026-07-28 05:40:44 (17 hours ago)	SSH bruteforce [BY]	SSH
🇮🇹 CoreTech srl	2026-07-28 05:01:43 (17 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_tcp_issues,ndpi_probing_attempt	Hacking
🇷🇺 Kotiacat_one	2026-07-27 23:45:50 (23 hours ago)	2026-07-28T02:45:50.468054+03:00 kotia sshd[2678065]: Invalid user admin from 5.255.124.203 port 360 ... show more 2026-07-28T02:45:50.468054+03:00 kotia sshd[2678065]: Invalid user admin from 5.255.124.203 port 36088 ... show less	Brute-Force SSH
🇫🇷 EvoX	2026-07-27 23:19:52 (23 hours ago)	🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 23/TELNET • Credential used: admin:ad ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 23/TELNET • Credential used: admin:admin • Number of login attempts: 1 show less	Hacking
🇺🇸 Cyber Crusader	2026-07-27 23:19:26 (23 hours ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇮🇩 Burayot	2026-07-27 23:10:40 (23 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 5.255.124.203 (-): 1 in the last 36 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 5.255.124.203 (-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 banankicks	2026-07-27 22:10:38 (1 day ago)	Unauthorized connection attempt detected from IP address 5.255.124.203 to port 23 (banankicks-server ... show more Unauthorized connection attempt detected from IP address 5.255.124.203 to port 23 (banankicks-server) [U] show less	Brute-Force Exploited Host
🇳🇱 0xffffffff	2026-07-27 18:42:57 (1 day ago)	[2026-07-27 21:42:55.530890] [core:error] [pid 1038339:tid 127684730345152] [client 5.255.124.203:59 ... show more [2026-07-27 21:42:55.530890] [core:error] [pid 1038339:tid 127684730345152] [client 5.255.124.203:59210] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) , URI:'/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh' [2026-07-27 21:42:55.867544] [core:error] [pid 1038340:tid 127684260648640] [client 5.255.124.203:59226] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) , URI:'/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh' [2026-07-27 21:42:55.901241] [authz_core:error] [pid 1038339:tid 127684864628416] [client 5.255.124.203:59230] AH01630: client denied by server configuration: /var/www/*/hello.world , error_notes:wrong-host , URI:'/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input' [2026-07-27 21:42:55.911450] [authz_core:error] [pid 1038339:tid 12768421032 show less	Web App Attack Bad Web Bot
🇦🇺 dyln	2026-07-27 17:45:10 (1 day ago)	Dyls honeypot brute-force: Telnet (1 total hits)	Brute-Force

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 190.111.144.227

🇷🇺 45.85.65.96

🇺🇸 38.100.203.82

🇩🇪 4.184.60.71

🇺🇸 159.223.140.98

🇻🇳 103.195.240.46

🇺🇸 74.82.47.18

🇺🇸 66.93.167.241

🇵🇱 57.128.223.80

🇳🇱 45.148.10.239

🇺🇸 43.130.57.46

🇮🇹 217.26.178.20

🇺🇸 216.25.89.110

🇩🇪 213.209.159.226

🇪🇨 200.24.133.89

🇵🇱 193.186.39.208

🇧🇷 181.217.162.32

🇺🇸 104.28.163.178

🇺🇦 91.215.146.88

🇵🇱 74.248.139.103