JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.255.125.179

5.255.125.179 was found in our database!

This IP was reported 558 times. Confidence of Abuse is 100%: ?

100%

ISP	The Infrastructure Group B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60404
Domain Name	theinfrastructure.group
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.255.125.179

Whois 5.255.125.179

IP Abuse Reports for 5.255.125.179:

This IP address has been reported a total of 558 times from 219 distinct sources. 5.255.125.179 was first reported on May 5th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 todix	2026-06-06 22:29:56 (1 week ago)	Web App Attack Exploid from 5.255.125.179	Web App Attack
🇩🇪 dbmwebdesign	2026-06-06 11:50:15 (1 week ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇬🇧 Axel	2026-06-06 11:12:01 (1 week ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇹🇷 baku.hosting	2026-06-06 11:03:11 (1 week ago)	CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 5.255.125.179 (NL/The Netherla ... show more CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 5.255.125.179 (NL/The Netherlands/-): 5 in the last 3600 secs show less	Brute-Force Web App Attack
Anonymous	2026-06-06 09:50:34 (1 week ago)	(caddyscan) Scanner path probe from 5.255.125.179 (NL/The Netherlands/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 5.255.125.179 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 5.255.125.179 - - [06/Jun/2026:09:50:29 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 5.255.125.179 - - [06/Jun/2026:09:50:29 +0000] "GET /.env.test HTTP/1.1" [REDACTED] 200 2627 5.255.125.179 - - [06/Jun/2026:09:50:29 +0000] "GET /.env.backup HTTP/1.1" [REDACTED] 200 2627 5.255.125.179 - - [06/Jun/2026:09:50:29 +0000] "GET /web/.env HTTP/1.1" [REDACTED] 200 2627 5.255.125.179 - - [06/Jun/2026:09:50:29 +0000] "GET /src/.env HTTP/1.1" show less	Port Scan
🇳🇱 Site.eu	2026-06-06 07:44:45 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-06-06 06:48:24 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 5.255.125.179 (NL/The Netherlands/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 5.255.125.179 (NL/The Netherlands/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇱🇻 garmtech.com	2026-06-06 05:50:05 (1 week ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
🇩🇪 gadix	2026-06-06 00:17:54 (1 week ago)	[06/Jun/2026:02:17:54.133397 +0200] aiNnMn8iwdaM7hAqw3GbMAAAAM4 5.255.125.179 39850 127.0.0.1 7081 [ ... show more [06/Jun/2026:02:17:54.133397 +0200] aiNnMn8iwdaM7hAqw3GbMAAAAM4 5.255.125.179 39850 127.0.0.1 7081 [06/Jun/2026:02:17:54.134316 +0200] aiNnMumDcNBu1Ie3jkp42QAAARQ 5.255.125.179 39862 127.0.0.1 7081 [06/Jun/2026:02:17:54.139566 +0200] aiNnMn8iwdaM7hAqw3GbMwAAANE 5.255.125.179 39898 127.0.0.1 7081 ... show less	Web App Attack
🇬🇧 prime_fusion_ld	2026-06-05 22:31:17 (1 week ago)	Blocked by CSF/LFD on vps.primefusion.co.uk. Trigger: 1 Ports: *	Port Scan
🇩🇪 gadix	2026-06-05 21:36:48 (1 week ago)	[05/Jun/2026:23:36:47.418380 +0200] aiNBbxDJbvrlU6AGboDO_gAAAAY 5.255.125.179 41386 127.0.0.1 7080 [ ... show more [05/Jun/2026:23:36:47.418380 +0200] aiNBbxDJbvrlU6AGboDO_gAAAAY 5.255.125.179 41386 127.0.0.1 7080 [05/Jun/2026:23:36:47.419064 +0200] aiNBbzuu6nyQIwVV8bJCsgAAAAM 5.255.125.179 41392 127.0.0.1 7080 [05/Jun/2026:23:36:47.428038 +0200] aiNBb_NYnQMz2ZpqQE0ZawAAAAU 5.255.125.179 41402 127.0.0.1 7080 ... show less	Web App Attack
Anonymous	2026-06-05 21:15:15 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 5.255.125.179 (-)	SQL Injection
Anonymous	2026-06-05 20:55:11 (1 week ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇩🇪 Dominik Lysiak	2026-06-05 14:44:44 (1 week ago)	5.255.125.179 - - [05/Jun/2026:16:44:43 +0200] "GET /.env.bak HTTP/1.1" 502 150 "-" "Mozilla/5.0 (X1 ... show more 5.255.125.179 - - [05/Jun/2026:16:44:43 +0200] "GET /.env.bak HTTP/1.1" 502 150 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" 5.255.125.179 - - [05/Jun/2026:16:44:43 +0200] "GET /.env.local HTTP/1.1" 502 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.255.125.179 - - [05/Jun/2026:16:44:43 +0200] "GET /laravel/.env HTTP/1.1" 502 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" ... show less	Web App Attack
Anonymous	2026-06-05 11:48:30 (1 week ago)	5.255.125.179 - - [05/Jun/2026:13:48:30 +0200] "GET /.env.old HTTP/1.1" 403 384 "-" "Mozilla/5.0 (Wi ... show more 5.255.125.179 - - [05/Jun/2026:13:48:30 +0200] "GET /.env.old HTTP/1.1" 403 384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 5.255.125.179 - - [05/Jun/2026:13:48:30 +0200] "GET /.env.bak HTTP/1.1" 403 384 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 558 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 195.12.170.204

🇩🇪 193.124.20.252

🇨🇳 117.63.114.11

🇰🇷 115.178.75.242

🇺🇸 103.203.57.21

🇬🇧 81.19.219.200

🇩🇪 69.5.169.33

🇺🇸 50.46.141.125

🇳🇱 45.142.193.223

🇺🇸 20.84.47.39

🇵🇱 194.180.49.220

🇷🇺 188.134.69.129

🇨🇳 182.138.158.56

🇺🇸 135.237.127.82

🇸🇬 128.199.231.249

🇳🇱 91.92.40.5

🇺🇸 72.240.125.133

🇺🇸 3.225.45.252

🇳🇱 204.76.203.221

🇳🇱 185.223.235.23