JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.199.18.72

138.199.18.72 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 1%: ?

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-138-199-18-72.datapacket.com
Domain Name	datacamp.co.uk
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.199.18.72

Whois 138.199.18.72

IP Abuse Reports for 138.199.18.72:

This IP address has been reported a total of 25 times from 18 distinct sources. 138.199.18.72 was first reported on March 30th 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 [email protected]	2026-05-22 13:11:08 (2 weeks ago)	[Fri May 22 15:11:08.064285 2026] [authz_core:error] [pid 239699:tid 239753] [remote 138.199.18.72:4 ... show more [Fri May 22 15:11:08.064285 2026] [authz_core:error] [pid 239699:tid 239753] [remote 138.199.18.72:44952] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php show less	Brute-Force Web App Attack
Anonymous	2025-08-04 15:15:13 (10 months ago)	Botnet - login attempts with leaked random user/pass lists	Hacking Brute-Force Web App Attack
Anonymous	2025-05-27 01:11:12 (1 year ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇧🇷 hostseries	2025-05-08 22:05:52 (1 year ago)	Brute-force cPanel Services	Brute-Force
🇧🇷 hostseries	2025-05-06 14:18:21 (1 year ago)	Brute-force cPanel Services	Brute-Force
🇧🇷 hostseries	2025-04-29 21:35:59 (1 year ago)	Brute-force cPanel Services	Brute-Force
Anonymous	2024-11-05 22:00:40 (1 year ago)	WAF detection: Web Protocol Attack	Hacking
🇺🇸 mnsf	2023-12-17 07:26:20 (2 years ago)	Too many Status 40X (16)	Brute-Force Web App Attack
Anonymous	2023-09-19 11:46:45 (2 years ago)	138.199.18.72 - - [19/Sep/2023:13:46:45 +0200] "GET /pforum/showthread.php?id=3014 HTTP/1.1" 404 500 ... show more 138.199.18.72 - - [19/Sep/2023:13:46:45 +0200] "GET /pforum/showthread.php?id=3014 HTTP/1.1" 404 5002 "http://www.traumatic.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" 138.199.18.72 - - [19/Sep/2023:13:46:45 +0200] "GET /pforum/showthread.php?id=3014 HTTP/1.1" 404 5002 "http://www.traumatic.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" 138.199.18.72 - - [19/Sep/2023:13:46:45 +0200] "GET /pforum/showthread.php?id=3014 HTTP/1.1" 404 5002 "http://www.traumatic.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" 138.199.18.72 - - [19/Sep/2023:13:46:45 +0200] "GET /pforum/showthread.php?id=3014 HTTP/1.1" 404 5002 "http://www.traumatic.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" ... show less	Hacking Bad Web Bot
🇦🇺 MAGIC	2023-08-30 16:13:10 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇪🇸 itbyhf	2023-07-30 17:24:57 (2 years ago)	Jul 30 17:24:54 hardcore-tesla sshd[741253]: Invalid user admin from 138.199.18.72 port 45047 Jul 30 ... show more Jul 30 17:24:54 hardcore-tesla sshd[741253]: Invalid user admin from 138.199.18.72 port 45047 Jul 30 17:24:54 hardcore-tesla sshd[741256]: Invalid user oracle from 138.199.18.72 port 57283 Jul 30 17:24:54 hardcore-tesla sshd[741258]: Invalid user karaf from 138.199.18.72 port 43419 Jul 30 17:24:54 hardcore-tesla sshd[741252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.18.72 Jul 30 17:24:56 hardcore-tesla sshd[741252]: Failed password for invalid user hshzkyqh from 138.199.18.72 port 40165 ssh2 ... show less	Brute-Force SSH
🇪🇸 itbyhf	2023-07-30 17:09:16 (2 years ago)	Jul 30 17:09:11 hardcore-tesla sshd[741158]: pam_unix(sshd:auth): authentication failure; logname= u ... show more Jul 30 17:09:11 hardcore-tesla sshd[741158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.18.72 Jul 30 17:09:13 hardcore-tesla sshd[741158]: Failed password for invalid user OpenVASVT from 138.199.18.72 port 41173 ssh2 Jul 30 17:09:15 hardcore-tesla sshd[741158]: error: PAM: Authentication failure for illegal user OpenVASVT from 138.199.18.72 Jul 30 17:09:15 hardcore-tesla sshd[741158]: Failed keyboard-interactive/pam for invalid user OpenVASVT from 138.199.18.72 port 41173 ssh2 Jul 30 17:09:15 hardcore-tesla sshd[741158]: Received disconnect from 138.199.18.72 port 41173:11: Bye Bye [preauth] ... show less	Brute-Force SSH
Anonymous	2023-07-21 07:30:00 (2 years ago)	"Illegal file type"	Brute-Force
🇺🇸 ChamberofCommerce.com	2023-07-21 06:09:18 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇩🇪 sebaro11	2022-09-19 03:38:56 (3 years ago)	Portscan on 1433/TCP blocked by UFW	Port Scan

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.87

🇫🇮 204.168.240.142

🇳🇱 176.65.148.197

🇹🇷 88.242.222.107

🇺🇸 65.49.1.183

🇺🇸 64.62.156.193

🇩🇪 43.228.157.6

🇬🇧 35.203.211.79

🇬🇧 2a00:1450:4009:c0b::126

🇺🇸 195.184.76.116

🇬🇧 193.104.58.51

🇩🇪 192.109.200.78

🇯🇵 160.251.197.41

🇨🇳 111.228.35.115

🇭🇷 93.139.190.12

🇫🇷 86.252.144.90

🇬🇧 35.203.210.166

🇮🇳 223.185.128.141

🇹🇳 197.28.23.207

🇫🇷 157.173.96.244