User KIDOS joined AbuseIPDB in September 2025 and has reported 97,961 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 172.202.118.23 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇺🇸 40.124.173.7 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇱🇹 141.98.11.171 |
KASM auto: exploit_/.env
|
Brute-Force SSH | |
| 🇺🇸 3.16.155.161 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 54.245.59.89 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇸🇬 20.205.229.184 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇨🇳 120.53.233.188 |
IIS malicious activity: sql_injection_attempt
|
Web App Attack | |
| 🇨🇦 4.204.201.85 |
IIS malicious activity: suspicious_path
|
Web App Attack | |
| 🇳🇱 5.61.209.44 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 35.92.42.127 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 44.243.123.152 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 54.185.34.196 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 35.91.175.199 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇩🇪 43.131.14.132 |
IIS malicious activity: multiple_403_errors
|
Web App Attack | |
| 🇸🇬 43.156.224.49 |
IIS malicious activity: sql_injection_attempt
|
Web App Attack | |
| 🇪🇸 158.158.96.17 |
malicious activity
|
Web App Attack | |
| 🇧🇷 20.197.178.120 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇩🇪 43.228.157.102 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇸🇪 90.129.216.171 |
IIS malicious activity: high_400_errors_per_5_minutes (100 errors in 5 minutes)
|
Web App Attack | |
| 🇧🇬 84.238.141.22 |
malicious activity
|
Web App Attack | |
| 🇺🇸 103.11.76.74 |
malicious activity
|
Web App Attack | |
| 🇧🇷 20.197.178.120 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇸 151.247.70.91 |
IIS malicious activity: suspicious_user_agent
|
Web App Attack | |
| 🇺🇸 43.172.79.4 |
IIS malicious activity: sql_injection_attempt
|
Web App Attack | |
| 🇷🇺 46.8.22.65 |
malicious activity
|
Web App Attack |