JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.199.18.76

138.199.18.76 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 50%: ?

50%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-138-199-18-76.datapacket.com
Domain Name	datacamp.co.uk
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.199.18.76

Whois 138.199.18.76

IP Abuse Reports for 138.199.18.76:

This IP address has been reported a total of 103 times from 59 distinct sources. 138.199.18.76 was first reported on July 20th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-04 18:27:53 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.199.18.76 (DE/Germany/unn-138-199 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.199.18.76 (DE/Germany/unn-138-199-18-76.datapacket.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇲🇽 impra	2026-05-29 03:21:57 (2 weeks ago)	Detected 6 connection attempts.	Port Scan Hacking Web App Attack
🇫🇮 as211431.net	2026-05-28 21:00:57 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Charlesiv	2026-05-28 20:01:16 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 212238 (Datacamp Limited ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 212238 (Datacamp Limited) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-05-28T18:49:10Z Ray ID: a02f700fac7707da UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 show less	Bad Web Bot
🇺🇸 octageeks.com	2026-05-19 04:08:08 (3 weeks ago)	Wordpress malicious attack:[octascan]	Web App Attack
Anonymous	2026-05-18 23:17:11 (3 weeks ago)	[Mon May 18 23:54:20.542637 2026] [access_compat:error] [pid 159605:tid 159605] [client 138.199.18.7 ... show more [Mon May 18 23:54:20.542637 2026] [access_compat:error] [pid 159605:tid 159605] [client 138.199.18.76:39447] AH01797: client denied by server configuration: /var/www/html/wp-content [Mon May 18 23:54:20.542637 2026] [access_compat:error] [pid 159605:tid 159605] [client 138.199.18.76:39447] AH01797: client denied by server configuration: /var/www/html/wp-content ... show less	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-05-18 21:49:25 (3 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 138.199.18.76 (DE/Germany/unn-138-1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 138.199.18.76 (DE/Germany/unn-138-199-18-76.datapacket.com): 1 in the last 3600 secs show less	Web App Attack
🇱🇻 garmtech.com	2026-05-18 19:56:49 (3 weeks ago)	Attempted access to sensitive endpoint (/wp-content/plugins/fix/up.php) detected. Automated scan or ... show more Attempted access to sensitive endpoint (/wp-content/plugins/fix/up.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-18 19:05:50 (3 weeks ago)	138.199.18.76 - - [18/May/2026:22:05:47 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 285 ... show more 138.199.18.76 - - [18/May/2026:22:05:47 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 2854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-18 18:07:01 (3 weeks ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 deskpass.com	2026-05-18 18:05:11 (3 weeks ago)	GET /wp-content/plugins/fix/up.php	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-18 16:39:52 (3 weeks ago)	138.199.18.76 - - [18/May/2026:19:39:45 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 251 ... show more 138.199.18.76 - - [18/May/2026:19:39:45 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 138.199.18.76 - - [18/May/2026:19:39:48 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Web App Attack
🇩🇪 Lino Project	2026-05-17 08:45:05 (3 weeks ago)	138.199.18.76 - - [17/May/2026:10:45:04 +0200] "GET /xmlrpc.php HTTP/1.1" 403 344 "-" "Mozilla/5.0 ( ... show more 138.199.18.76 - - [17/May/2026:10:45:04 +0200] "GET /xmlrpc.php HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-13 13:32:14 (4 weeks ago)	apache-auth	Brute-Force Web App Attack
🇵🇹 SubnetShadowSpecter	2026-05-13 11:36:17 (1 month ago)	[Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatic ... show more [Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatically blocked, and the IP Address banned. [Method]: GET. [Request]: => /wp-content/plugins/fix/up.php. Access revoked. [User-Agent]: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36. [OS]: Unknown. [IP Address]: 138.199.18.76. [RPS] High overshoot requests per second (RPS). [Date]: 2026-05-13 11:28:46 UTC. show less	Bad Web Bot Hacking Web App Attack

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 47.79.10.104

🇵🇹 81.193.216.17

🇺🇸 52.87.218.134

🇳🇱 45.156.128.121

🇸🇬 45.78.204.246

🇺🇸 198.98.62.211

🇮🇹 185.156.234.183

🇮🇳 139.59.4.137

🇸🇾 91.144.21.210

🇸🇬 47.128.122.136

🇸🇬 43.160.225.169

🇭🇰 34.150.84.7

🇸🇬 34.143.245.70

🇮🇷 5.237.81.66

🇰🇷 222.107.156.227

🇲🇳 203.21.120.126

🇺🇸 172.202.9.120

🇧🇷 170.245.120.109

🇸🇬 152.42.240.74

🇺🇸 137.131.9.65