User KIDOS joined AbuseIPDB in September 2025 and has reported 107,229 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇻🇳 103.159.51.70 |
KASM auto: exploit_/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-
|
Brute-Force SSH | |
| 🇧🇪 35.190.201.131 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack | |
| 🇸🇪 158.173.241.31 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇮🇸 45.133.193.88 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 192.18.143.53 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇳🇱 92.119.164.62 |
KASM auto: exploit_/.env.test.local
|
Brute-Force SSH | |
| 🇨🇦 20.48.160.90 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇮🇳 20.204.147.74 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇯🇵 131.186.44.175 |
KASM auto: exploit_/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-
|
Brute-Force SSH | |
| 🇲🇳 180.149.126.4 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇨🇦 20.104.50.220 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack | |
| 🇳🇱 45.198.224.27 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇩🇪 195.63.19.206 |
malicious activity
|
Web App Attack | |
| 🇺🇸 34.217.38.245 |
malicious activity
|
Web App Attack | |
| 🇨🇦 4.204.224.164 |
malicious activity
|
Web App Attack | |
| 🇺🇸 145.79.182.167 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇨🇦 20.63.81.20 |
malicious activity
|
Web App Attack | |
| 🇺🇸 52.36.210.140 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇳🇱 34.34.247.176 |
malicious activity
|
Web App Attack | |
| 🇳🇱 188.166.21.235 |
IIS malicious activity: high_400_error_rate (80% of requests are 400 errors)
|
Web App Attack | |
| 🇳🇱 174.138.4.243 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇨🇦 52.139.44.162 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇨🇦 20.48.179.39 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇯🇵 20.210.161.193 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇲🇾 47.250.141.111 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH |