User KIDOS joined AbuseIPDB in September 2025 and has reported 123,985 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇹🇭 43.164.2.43 |
malicious activity
|
Web App Attack | |
| 🇺🇸 40.124.122.204 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇵🇱 193.193.208.153 |
malicious activity
|
Web App Attack | |
| 🇺🇸 199.165.159.41 |
KASM auto: exploit_/.git/config
|
Brute-Force SSH | |
| 🇧🇪 34.79.51.100 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇧🇪 104.199.87.248 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇧🇪 35.205.121.111 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 34.24.85.52 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇸 23.239.27.128 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇩🇪 94.183.174.99 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack | |
| 🇧🇪 34.156.56.233 |
IIS malicious activity: suspicious_path
|
Web App Attack | |
| 🇺🇸 40.119.28.116 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇧🇪 35.205.254.119 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇧🇪 104.199.36.53 |
malicious activity
|
Web App Attack | |
| 🇧🇷 138.122.21.19 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack | |
| 🇰🇷 1.212.91.83 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇮🇩 103.39.51.160 |
malicious activity
|
Web App Attack | |
| 🇫🇷 185.217.127.51 |
KASM auto: exploit_/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-
|
Brute-Force SSH | |
| 🇧🇪 207.175.194.102 |
KASM auto: exploit_/.env-sample
|
Brute-Force SSH | |
| 🇧🇪 34.79.51.148 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 192.241.134.93 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇳🇱 34.32.130.68 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇳🇱 34.32.130.68 |
IIS malicious activity: suspicious_path
|
Web App Attack | |
| 🇺🇸 54.176.44.67 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 40.124.186.171 |
KASM auto: exploit_/actuator/health
|
Brute-Force SSH |