User KIDOS joined AbuseIPDB in September 2025 and has reported 123,911 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 66.146.235.202 |
malicious activity
|
Web App Attack | |
| 🇺🇸 162.244.146.177 |
malicious activity
|
Web App Attack | |
| 🇨🇦 45.3.53.173 |
malicious activity
|
Web App Attack | |
| 🇧🇷 187.17.228.241 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack | |
| 🇺🇸 65.49.1.38 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇸 136.113.169.19 |
malicious activity
|
Web App Attack | |
| 🇺🇸 34.34.253.170 |
IIS malicious activity: high_400_error_rate (80% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇸 34.168.119.43 |
IIS malicious activity: high_400_error_rate (80% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇸 100.31.87.143 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇩🇪 85.155.14.31 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 98.158.235.207 |
malicious activity
|
Web App Attack | |
| 🇨🇦 209.50.188.134 |
malicious activity
|
Web App Attack | |
| 🇺🇸 66.132.159.125 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇬🇧 172.239.96.10 |
IIS malicious activity: high_400_error_rate (50% of requests are 400 errors)
|
Web App Attack | |
| 🇵🇱 194.180.49.41 |
KASM auto: exploit_/.env
|
Brute-Force SSH | |
| 🇬🇧 172.239.96.155 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇮🇩 38.248.19.246 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack | |
| 🇺🇸 20.150.193.100 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇸🇬 95.111.197.80 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack | |
| 🇩🇪 206.81.21.44 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇦🇲 176.32.193.16 |
IIS malicious activity: high_400_error_rate (60% of requests are 400 errors)
|
Web App Attack | |
| 🇧🇪 34.62.16.205 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇬🇧 139.190.224.235 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇺🇸 20.171.13.13 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇳🇱 45.74.28.3 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH |