AbuseIPDB » 5.255.231.166

5.255.231.166 was found in our database!

This IP was reported 688 times. Confidence of Abuse is 0%: ?

ISP	Yandex enterprise network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208398
Hostname(s)	5-255-231-166.spider.yandex.com
Domain Name	yandex.net
Country	Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Important Note: 5.255.231.166 is an IP address from within our whitelist belonging to the subnet 5.255.192.0/18, which we identify as: "Yandex".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 5.255.231.166

Whois 5.255.231.166

IP Abuse Reports for 5.255.231.166:

This IP address has been reported a total of 688 times from 61 distinct sources. 5.255.231.166 was first reported on December 13th 2020, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
advena	2023-05-19 22:15:56 (2 years ago)	5.255.231.166 (AS13238 YANDEX) was intercepted at 2023-05-19T22:08:56Z after violating WAF directive ... show more5.255.231.166 (AS13238 YANDEX) was intercepted at 2023-05-19T22:08:56Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
advena	2023-05-19 08:15:55 (2 years ago)	5.255.231.166 (AS13238 YANDEX) was intercepted at 2023-05-19T08:12:27Z after violating WAF directive ... show more5.255.231.166 (AS13238 YANDEX) was intercepted at 2023-05-19T08:12:27Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
advena	2023-05-17 17:15:54 (2 years ago)	5.255.231.166 (AS13238 YANDEX) was intercepted at 2023-05-17T17:05:44Z after violating WAF directive ... show more5.255.231.166 (AS13238 YANDEX) was intercepted at 2023-05-17T17:05:44Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
IrisFlower	2023-05-16 23:26:27 (2 years ago)	Unauthorized connection attempt detected from IP address 5.255.231.166 to port 80 [J]	Port Scan Hacking
ozisp.com.au	2023-05-11 08:07:35 (2 years ago)	RU_YANDEX-MNT_<33>1683792453 [1:2032979:1] ET SCAN Yandex Webcrawler User-Agent (YandexBot) [Classif ... show moreRU_YANDEX-MNT_<33>1683792453 [1:2032979:1] ET SCAN Yandex Webcrawler User-Agent (YandexBot) [Classification: Not Suspicious Traffic] [Priority: 3] {TCP} 5.255.231.166:34810 show less	Hacking
Bytemark	2023-05-10 23:45:47 (2 years ago)	5.255.231.166 - - [11/May/2023:00:45:46 +0100] "GET /news.php HTTP/1.1" 200 23030 "-" "Mozilla/5.0 ( ... show more5.255.231.166 - - [11/May/2023:00:45:46 +0100] "GET /news.php HTTP/1.1" 200 23030 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" show less	Brute-Force Web App Attack
mclo	2023-05-09 13:56:37 (2 years ago)	5.255.231.166 - - [09/May/2023:15:56:36 +0200] "GET /robots.txt HTTP/1.1" 404 162 "-" "Mozilla/5.0 ( ... show more5.255.231.166 - - [09/May/2023:15:56:36 +0200] "GET /robots.txt HTTP/1.1" 404 162 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" ... show less	Web App Attack
Bytemark	2023-05-08 23:40:47 (2 years ago)	5.255.231.166 - - [09/May/2023:00:40:46 +0100] "GET /robots.txt HTTP/1.1" 404 17344 "-" "Mozilla/5.0 ... show more5.255.231.166 - - [09/May/2023:00:40:46 +0100] "GET /robots.txt HTTP/1.1" 404 17344 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" show less	Brute-Force Web App Attack
hermawan	2023-05-05 18:52:30 (2 years ago)	[Sat May 06 01:52:28.216667 2023] [security2:error] [pid 204899:tid 139916923094592] [client 5.255.2 ... show more[Sat May 06 01:52:28.216667 2023] [security2:error] [pid 204899:tid 139916923094592] [client 5.255.231.166:51482] [client 5.255.231.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "ZFVQbK2nV8obofAlY20O2wAAAQg"] [staklim-malang.info] [staklim-malang.info] top=[204959] [9t1jyqamM5Q] [ZFVQbK2nV8obofAlY20O2wAAAQg] keep_alive=[0] [2023-05-06 01:52:28.216670] [R:ZFVQbK2nV8obofAlY20O2wAAAQg] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-malang.info' ACCEPT:'/' Accept-Encoding:'identity ... show less	Hacking Web App Attack
Bytemark	2023-05-05 15:40:41 (2 years ago)	5.255.231.166 - - [05/May/2023:16:40:41 +0100] "GET /viewtopic.php?t=9124&start=15 HTTP/1.1" 200 187 ... show more5.255.231.166 - - [05/May/2023:16:40:41 +0100] "GET /viewtopic.php?t=9124&start=15 HTTP/1.1" 200 18716 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" show less	Brute-Force Web App Attack
hermawan	2023-05-01 12:17:43 (2 years ago)	[Mon May 01 19:17:40.593882 2023] [security2:error] [pid 476622:tid 139997160117824] [client 5.255.2 ... show more[Mon May 01 19:17:40.593882 2023] [security2:error] [pid 476622:tid 139997160117824] [client 5.255.231.166:34562] [client 5.255.231.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexMetrika/2.0; +http://yandex.com/bots yabs01) request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/"] [unique_id "ZE-t5BQ8o1iMJYojk5FS9QAAAeI"] [staklim-malang.info] [staklim-malang.info] top=[476708] [4k4lz1hxBKA] [ZE-t5BQ8o1iMJYojk5FS9QAAAeI] keep_alive=[0] [2023-05-01 19:17:40.593884] [R:ZE-t5BQ8o1iMJYojk5FS9QAAAeI] UA:'Mozilla/5.0 (compatible; YandexMetrika/2.0; +http://yandex.com/bots yabs01)' Host:'staklim-malang.info' ACCEPT:'/' Accept-Encoding:'gzip,deflate ... show less	Hacking Web App Attack
rh24	2023-04-30 18:39:41 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 5.255.231.166 (RU/Ru ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 5.255.231.166 (RU/Russia/5-255-231-166.spider.yandex.com) show less	Bad Web Bot
Mediashaker	2023-04-29 01:11:57 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 5.255.231.166 (RU/Ru ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 5.255.231.166 (RU/Russia/5-255-231-166.spider.yandex.com) show less	Bad Web Bot
ozisp.com.au	2023-04-09 09:55:27 (2 years ago)	RU_YANDEX-MNT_<33>1681034125 [1:2032979:1] ET SCAN Yandex Webcrawler User-Agent (YandexBot) [Classif ... show moreRU_YANDEX-MNT_<33>1681034125 [1:2032979:1] ET SCAN Yandex Webcrawler User-Agent (YandexBot) [Classification: Not Suspicious Traffic] [Priority: 3] {TCP} 5.255.231.166:40458 show less	Hacking
GabrielJST	2023-04-06 18:51:11 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 5.255.231.166 (RU/Ru ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 5.255.231.166 (RU/Russia/5-255-231-166.spider.yandex.com) show less	Bad Web Bot

Showing 646 to 660 of 688 reports

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩

Recently Reported IPs:

131.104.80.77

114.103.88.155

131.104.69.20

91.230.168.227

92.222.180.245

182.148.232.66

59.151.232.9

62.240.36.62

131.104.255.231

113.160.113.204

20.171.207.123

223.74.204.66

131.104.244.219

114.97.119.210

143.110.209.171

201.134.188.164

156.225.39.195

165.22.222.227

170.150.75.199

188.130.128.186