User KIDOS joined AbuseIPDB in September 2025 and has reported 124,699 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇺🇸 159.89.231.100 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇺🇸 20.15.145.84 |
malicious activity
|
Web App Attack | |
| 🇺🇸 138.68.247.166 |
malicious activity
|
Web App Attack | |
| 🇺🇸 159.89.231.100 |
malicious activity
|
Web App Attack | |
| 🇺🇸 45.79.218.68 |
KASM auto: exploit_/.env
|
Brute-Force SSH | |
| 🇺🇸 206.189.190.240 |
KASM auto: bad_method_CONNECT
|
Brute-Force SSH | |
| 🇨🇦 147.182.152.131 |
KASM auto: exploit_/owa/auth/errorFE.aspx
|
Brute-Force SSH | |
| 🇮🇳 45.79.122.239 |
KASM auto: exploit_/.env
|
Brute-Force SSH | |
| 🇺🇸 31.58.16.145 |
malicious activity
|
Web App Attack | |
| 🇳🇱 45.153.34.178 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 66.132.172.131 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇵🇱 193.34.212.54 |
IIS malicious activity: high_400_error_rate (60% of requests are 400 errors)
|
Web App Attack | |
| 🇩🇪 85.192.38.175 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇸 40.80.203.118 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇫🇷 54.37.156.66 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇰🇪 102.212.236.149 |
malicious activity
|
Web App Attack | |
| 🇺🇸 178.171.61.195 |
malicious activity
|
Web App Attack | |
| 🇩🇪 165.22.81.78 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇩🇪 104.207.55.153 |
malicious activity
|
Web App Attack | |
| 🇺🇸 20.51.208.150 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 34.187.224.242 |
IIS malicious activity: high_400_error_rate (80% of requests are 400 errors)
|
Web App Attack | |
| 🇳🇱 45.74.28.166 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 67.220.70.15 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇨🇿 185.242.6.116 |
malicious activity
|
Web App Attack | |
| 🇧🇪 34.38.10.57 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack |