JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.199.18.67

138.199.18.67 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 11%: ?

11%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-138-199-18-67.datapacket.com
Domain Name	datacamp.co.uk
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.199.18.67

Whois 138.199.18.67

IP Abuse Reports for 138.199.18.67:

This IP address has been reported a total of 75 times from 44 distinct sources. 138.199.18.67 was first reported on June 18th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-03 16:04:10 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇱 spd.co.il	2026-05-29 03:02:48 (2 weeks ago)	Web application attack detected	Hacking Web App Attack
🇫🇷 ELYAZ	2026-04-09 22:21:26 (2 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 138.199.18.67 (DE/German ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 138.199.18.67 (DE/Germany/unn-138-199-18-67.datapacket.com): (CF_ENABLE) show less	Port Scan
🇳🇱 FREAKISH	2026-04-03 18:35:06 (2 months ago)	2026-04-03 20:35:06: Minecraft server scan detected from 138.199.18.67 on port 25565 of 127.0.0.1	Port Scan
🇺🇸 cpxducky	2026-04-03 18:34:42 (2 months ago)	2026-04-03 18:34:42: Minecraft server scan detected from 138.199.18.67 on port 25565 of mail.cpxduck ... show more 2026-04-03 18:34:42: Minecraft server scan detected from 138.199.18.67 on port 25565 of mail.cpxducky.com show less	Port Scan
🇺🇸 LockBlock	2026-04-03 18:34:23 (2 months ago)	2026-04-03 18:34:23: Minecraft server scan detected from 138.199.18.67 on port 25565 of racknerd-e7e ... show more 2026-04-03 18:34:23: Minecraft server scan detected from 138.199.18.67 on port 25565 of racknerd-e7e1a9 show less	Port Scan
🇺🇸 xmission.com	2026-03-29 16:31:48 (2 months ago)	Blocked by UFW (TCP on 54840) Source port: 26373 TTL: 110 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 54840) Source port: 26373 TTL: 110 Packet length: 52 TOS: 0x08 This report (for 138.199.18.67) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 rtbh.com.tr	2026-03-02 20:11:51 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-08-04 15:27:34 (10 months ago)	Botnet - login attempts with leaked random user/pass lists	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-08-03 17:33:18 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 138.199.18.67 (unn-138-199-18-67.datapacket.com ... show more (mod_security) mod_security (id:225170) triggered by 138.199.18.67 (unn-138-199-18-67.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 03 13:33:14.408607 2025] [security2:error] [pid 3498:tid 3498] [client 138.199.18.67:48138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gacstoday.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gacstoday.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aI-dWiyeUBmYD6nqm8trJAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-24 10:02:15 (1 year ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2025-01-23 22:01:05 (1 year ago)		Web App Attack
🇸🇬 Aidar Kamalov	2024-12-19 16:17:09 (1 year ago)	2024-12-19T16:16:49.652544+00:00 siptest-sip-ulap-net /usr/sbin/kamailio[1303989]: NOTICE: [ver. VER ... show more 2024-12-19T16:16:49.652544+00:00 siptest-sip-ulap-net /usr/sbin/kamailio[1303989]: NOTICE: [ver. VERSION_CONFIG] {REGISTER 1 1 REGISTER 506840717-1694022417-1862663616} <script>: AUTH: REGISTER FAILED from 138.199.18.67 (code: -5) fd=213.35.113.38, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] 2024-12-19T16:16:49.962174+00:00 siptest-sip-ulap-net /usr/sbin/kamailio[1303991]: NOTICE: [ver. VERSION_CONFIG] {REGISTER 1 2 REGISTER 506840717-1694022417-1862663616} <script>: AUTH: REGISTER FAILED from 138.199.18.67 (code: -3) fd=213.35.113.38, adu=sip:213.35.113.38, aa=MD5, ar=213.35.113.38, au=8001, ad=, aU=8001, [email protected] 2024-12-19T16:16:50.328757+00:00 siptest-sip-ulap-net /usr/sbin/kamailio[1303985]: NOTICE: [ver. VERSION_CONFIG] {REGISTER 1 3 REGISTER 506840717-1694022417-1862663616} <script>: AUTH: REGISTER FAILED from 138.199.18.67 (code: -3) fd=213.35.113.38, adu=sip:213.35.113.38, aa=MD5, ar=213.35.113.38, au=8001, ad=, aU=8001 ... show less	Fraud VoIP
🇳🇱 Savvii	2024-08-30 05:32:12 (1 year ago)	20 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇩🇪 R.G.	2024-08-30 03:15:59 (1 year ago)	(ScanningForFiles) Scanning for files triggerd 138.199.18.67 (DE/Germany/unn-138-199-18-67.datapacke ... show more (ScanningForFiles) Scanning for files triggerd 138.199.18.67 (DE/Germany/unn-138-199-18-67.datapacket.com): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 161.153.39.92

🇺🇸 154.29.158.89

🇺🇸 137.184.90.64

🇸🇬 128.199.231.249

🇺🇸 198.62.0.134

🇻🇳 171.244.142.31

🇺🇸 159.203.129.56

🇦🇫 103.132.98.160

🇺🇸 67.215.255.140

🇺🇸 66.132.172.132

🇫🇷 62.210.142.160

🇺🇸 47.77.227.200

🇳🇱 45.148.10.152

🇺🇸 43.166.255.102

🇸🇬 43.134.105.81

🇺🇸 13.217.95.0

🇺🇸 13.57.246.181

🇮🇷 5.232.124.8

🇺🇸 2602:80d:1008::3e

🇺🇸 217.28.137.166