User KIDOS joined AbuseIPDB in September 2025 and has reported 124,434 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇬🇧 23.81.36.5 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇨🇳 117.27.135.88 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 20.171.121.149 |
IIS malicious activity: suspicious_path
|
Web App Attack | |
| 🇺🇸 142.93.49.93 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇧🇪 34.38.39.106 |
Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)
|
DDoS Attack | |
| 🇺🇸 20.83.36.75 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇲🇽 158.23.179.22 |
malicious activity
|
Web App Attack | |
| 🇩🇪 45.3.43.63 |
malicious activity
|
Web App Attack | |
| 🇲🇽 158.23.85.214 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇳🇱 64.225.75.242 |
IIS malicious activity: high_400_error_rate (80% of requests are 400 errors)
|
Web App Attack | |
| 🇳🇱 167.71.0.19 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇧🇪 34.52.152.34 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇲🇽 158.23.85.214 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇩🇪 95.114.186.182 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇧🇪 34.52.152.34 |
malicious activity
|
Web App Attack | |
| 🇵🇹 185.113.143.107 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇩🇪 95.114.186.182 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇺🇸 20.102.110.94 |
KASM auto: exploit_/actuator/health
|
Brute-Force SSH | |
| 🇺🇸 52.165.83.60 |
KASM auto: exploit_/actuator/health
|
Brute-Force SSH | |
| 🇺🇸 74.249.130.253 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇧🇪 23.251.135.142 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇧🇪 23.251.135.142 |
malicious activity
|
Web App Attack | |
| 🇸🇪 83.227.131.161 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇺🇸 4.150.194.44 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇨🇭 84.227.238.107 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH |