JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.199.140.203

138.199.140.203 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 36%: ?

36%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.203.140.199.138.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.199.140.203

Whois 138.199.140.203

IP Abuse Reports for 138.199.140.203:

This IP address has been reported a total of 71 times from 32 distinct sources. 138.199.140.203 was first reported on December 13th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Jochen Pretli	2026-07-26 12:45:01 (2 days ago)	connection to honeypot	Email Spam Port Scan
🇬🇧 Oakley	2026-07-25 00:12:37 (4 days ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇫🇷 mrcrassi	2026-07-15 16:43:28 (1 week ago)	Triggered Cloudflare WAF (botFight) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET m ... show more Triggered Cloudflare WAF (botFight) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /produtos/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 000rosiu	2026-07-02 10:01:22 (3 weeks ago)	Triggered Cloudflare WAF (botFight) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| En ... show more Triggered Cloudflare WAF (botFight) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: /products/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-06-30 12:57:59 (4 weeks ago)	2026-06-30 12:57:59 warning[4668801]: host [138.199.140.203]: unauthorized access attempte ... show more 2026-06-30 12:57:59 warning[4668801]: host [138.199.140.203]: unauthorized access attempted: / show less	Port Scan Brute-Force
Anonymous	2026-06-27 14:55:20 (1 month ago)	SuspiciousBot Activity detected by FMBAD System 2026-06-27 17:55:20	Port Scan Hacking Bad Web Bot Web App Attack
Anonymous	2026-06-27 13:55:14 (1 month ago)	SuspiciousBot Activity detected by FMBAD System 2026-06-27 16:55:14	Port Scan Hacking Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-06-26 14:05:28 (1 month ago)	Web App Attack	Web App Attack
🇷🇺 DZBOT	2026-06-20 14:31:23 (1 month ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇷 setupgr	2026-06-19 09:39:10 (1 month ago)	(mod_security) mod_security (id:11000011) triggered by 138.199.140.203 (DE/Germany/Saxony/Falkenstei ... show more (mod_security) mod_security (id:11000011) triggered by 138.199.140.203 (DE/Germany/Saxony/Falkenstein/-/[AS24940 HETZNER-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 12:39:06.605280 2026] [security2:error] [pid 2278:tid 2336] [remote 138.199.140.203:42370] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.203.140.199.138.clients.your-server.de"] [severity "CRITICAL"] [hostname "tavernadimitris.com"] [uri "/"] [unique_id "ajUOOguYeXI6iTUJgvuy3wAAhQQ"] show less	Port Scan
🇬🇷 setupgr	2026-06-18 18:23:03 (1 month ago)	(mod_security) mod_security (id:11000011) triggered by 138.199.140.203 (DE/Germany/Saxony/Falkenstei ... show more (mod_security) mod_security (id:11000011) triggered by 138.199.140.203 (DE/Germany/Saxony/Falkenstein/-/[AS24940 HETZNER-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 21:22:59.241025 2026] [security2:error] [pid 3299839:tid 3299873] [remote 138.199.140.203:42470] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.203.140.199.138.clients.your-server.de"] [severity "CRITICAL"] [hostname "cpanagiotou.gr"] [uri "/%CE%BA%CE%B1%CF%84%CE%B1%CF%83%CE%BA%CE%B5%CF%85%CE%AD%CF%82-%CE%BA%CF%84%CE%B9%CF%81%CE%AF%CF%89%CE%BD/"] [unique_id "ajQ3g7Vo5z2-J_irJdJD_QAAyhY"] show less	Port Scan
🇬🇷 setupgr	2026-06-17 23:16:07 (1 month ago)	(mod_security) mod_security (id:11000011) triggered by 138.199.140.203 (DE/Germany/Saxony/Falkenstei ... show more (mod_security) mod_security (id:11000011) triggered by 138.199.140.203 (DE/Germany/Saxony/Falkenstein/-/[AS24940 HETZNER-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 02:16:06.663450 2026] [security2:error] [pid 2210294:tid 2210352] [remote 138.199.140.203:50344] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.203.140.199.138.clients.your-server.de"] [severity "CRITICAL"] [hostname "pankoskal.gr"] [uri "/%CF%8C%CF%81%CE%BF%CE%B9-%CF%87%CF%81%CE%B7%CF%83%CE%B7-%CE%BA%CE%B1%CE%B9-%CE%B5%CE%BC%CF%80%CE%B9%CF%83%CF%84%CE%B5%CF%85%CF%84%CE%B9%CE%BA%CE%BF%CF%84%CE%B7%CF%84%CE%B1%CF%82/"] [unique_id "ajMqtrhY-m9nTIYxKGRaegABhBU"] show less	Port Scan
🇬🇷 setupgr	2026-06-15 19:54:08 (1 month ago)	(mod_security) mod_security (id:11000011) triggered by 138.199.140.203: 1 in the last 86400 secs; Po ... show more (mod_security) mod_security (id:11000011) triggered by 138.199.140.203: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 22:54:03.482286 2026] [security2:error] [pid 1917021:tid 1917231] [client 138.199.140.203:40112] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.203.140.199.138.clients.your-server.de"] [hostname "babis.photo"] [uri "/"] [unique_id "ajBYWw799xbSHUG5HIrgvQAAANQ"] show less	Port Scan
🇬🇷 setupgr	2026-06-14 23:22:07 (1 month ago)	(mod_security) mod_security (id:11000011) triggered by 138.199.140.203: 1 in the last 86400 secs; Po ... show more (mod_security) mod_security (id:11000011) triggered by 138.199.140.203: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 02:22:07.335371 2026] [security2:error] [pid 921871:tid 921916] [remote 138.199.140.203:35432] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.203.140.199.138.clients.your-server.de"] [hostname "cpanagiotou.gr"] [uri "/%CE%B5%CF%80%CE%B9%CE%BA%CE%BF%CE%B9%CE%BD%CF%89%CE%BD%CE%AF%CE%B1/"] [unique_id "ai83n-2clReoPvlJKlh7jwAA1QA"] show less	Port Scan
🇬🇧 Oakley	2026-06-13 07:03:58 (1 month ago)	(confirmed_bot_sig) Confirmed bot	Hacking

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.92

🇩🇪 141.11.187.248

🇷🇴 92.118.39.14

🇩🇪 69.5.169.64

🇩🇪 69.5.169.45

🇺🇸 65.49.1.132

🇺🇸 2607:6bc0::10

🇰🇷 220.127.148.6

🇰🇷 220.122.115.9

🇺🇸 185.198.240.13

🇮🇳 175.101.22.17

🇩🇪 162.158.202.117

🇦🇫 149.54.9.58

🇮🇳 122.183.42.211

🇹🇷 94.154.43.12

🇻🇪 38.248.160.168

🇬🇧 35.203.211.111

🇺🇸 20.12.240.188

🇧🇷 15.228.84.231

🇮🇳 15.207.112.194