User KIDOS joined AbuseIPDB in September 2025 and has reported 114,533 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 20.169.50.119 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 72.63.215.158 |
IIS malicious activity: suspicious_user_agent
|
Web App Attack | |
| 🇩🇴 179.53.50.204 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 181.177.99.28 |
IIS malicious activity: suspicious_user_agent
|
Web App Attack | |
| 🇺🇸 195.225.131.189 |
IIS malicious activity: suspicious_user_agent
|
Web App Attack | |
| 🇮🇳 45.127.73.6 |
KASM auto: exploit_/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-
|
Brute-Force SSH | |
| 🇺🇸 34.9.172.22 |
IIS malicious activity: burst_requests
|
Web App Attack | |
| 🇺🇸 146.6.161.99 |
IIS malicious activity: xss_attempt
|
Web App Attack | |
| 🇺🇸 47.253.234.235 |
KASM auto: exploit_/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-
|
Brute-Force SSH | |
| 🇨🇳 124.88.113.1 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇨🇳 113.206.196.44 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇪🇸 80.28.235.124 |
IIS malicious activity: search_abuse
|
Web App Attack | |
| 🇺🇸 129.213.151.234 |
KASM auto: exploit_/.git/HEAD
|
Brute-Force SSH | |
| 🇺🇸 165.154.135.210 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 128.14.188.199 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack | |
| 🇩🇪 217.198.191.197 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack | |
| 🇺🇸 37.19.210.18 |
KASM auto: exploit_/.env.production
|
Brute-Force SSH | |
| 🇺🇸 146.103.53.159 |
malicious activity
|
Web App Attack | |
| 🇺🇸 167.172.134.198 |
KASM auto: exploit_/.git/config
|
Brute-Force SSH | |
| 🇹🇼 34.81.105.166 |
KASM auto: exploit_/.git/config
|
Brute-Force SSH | |
| 🇺🇸 104.37.27.13 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇸 104.222.46.33 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇸 129.146.27.170 |
IIS malicious activity: multiple_500_errors
|
Web App Attack | |
| 🇫🇷 193.32.126.236 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇮🇹 187.15.150.40 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack |