User KIDOS joined AbuseIPDB in September 2025 and has reported 124,641 IP addresses.
Standing (weight) is good.
ACTIVE USER
| IP | Date | Comment | Categories |
|---|---|---|---|
| 🇶🇦 34.18.212.130 |
IIS malicious activity: suspicious_path
|
Web App Attack | |
| 🇮🇩 103.158.121.4 |
IIS malicious activity: module_probe_attempt
|
Web App Attack | |
| 🇩🇪 85.155.14.14 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇦 104.28.222.238 |
malicious activity
|
Web App Attack | |
| 🇺🇸 136.117.184.116 |
IIS malicious activity: high_400_error_rate (60% of requests are 400 errors)
|
Web App Attack | |
| 🇯🇵 52.112.125.8 |
malicious activity
|
Web App Attack | |
| 🇩🇪 217.198.191.195 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇶🇦 34.18.212.130 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇮🇩 103.158.121.4 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇮🇩 103.158.121.4 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇩🇪 8.209.68.49 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇩🇪 187.40.41.40 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇸 45.5.66.14 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇮🇳 187.127.177.97 |
KASM auto: exploit_/.env
|
Brute-Force SSH | |
| 🇵🇱 74.248.37.250 |
CrowdSec detected malicious activity
|
DDoS Attack | |
| 🇺🇸 13.56.253.100 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇵🇱 74.248.37.250 |
malicious activity
|
Web App Attack | |
| 🇳🇱 45.144.212.192 |
KASM auto: exploit_/.git/config
|
Brute-Force SSH | |
| 🇺🇸 178.171.61.68 |
malicious activity
|
Web App Attack | |
| 🇩🇪 187.40.41.31 |
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
|
Web App Attack | |
| 🇺🇸 35.86.221.6 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇬🇧 109.238.86.52 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH | |
| 🇫🇷 51.159.5.6 |
KASM auto: exploit_/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-
|
Brute-Force SSH | |
| 🇵🇭 49.146.48.103 |
malicious activity
|
Web App Attack | |
| 🇳🇱 45.144.212.192 |
Apache monitor: ssrf_log_spoofing
|
Brute-Force SSH |