AbuseIPDB » 138.199.27.248
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example previewIP Abuse Reports for 138.199.27.248:
This IP address has been reported a total of 147 times from 28 distinct sources. 138.199.27.248 was first reported on , and the most recent report was . In the last 60 days, the only reporter location was: United States of America with 2 reports. The most common categories in these recent reports were: Bad Web Bot 2 times; DDoS Attack 2 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | ||
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | ||
| 🇮🇩 sockominfo |
|
Hacking Web App Attack | ||
| 🇺🇸 RAP |
2026-01-09 09:02:01 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇩🇪 SMARTNET |
Aisuru(Mirai variant) DDoS
|
DDoS Attack | ||
| 🇬🇧 Audir8 | RRHosting |
|
Web App Attack | ||
| 🇬🇧 Audir8 | RRHosting |
|
Web App Attack | ||
| 🇳🇱 exxos |
Attacks with Bad user agents
|
Hacking | ||
| 🇳🇱 exxos |
http-no-verb
|
Hacking | ||
| Anonymous |
Botnet - login attempts with leaked random user/pass lists
|
Hacking Brute-Force Web App Attack | ||
| 🇩🇪 Ozelot |
Failed password for Vaultwarden instance
|
Brute-Force Web App Attack | ||
| 🇩🇰 Papy Abuse |
honeypots-httpproxy
|
Port Scan | ||
| Anonymous |
Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK
|
Brute-Force SSH | ||
| Anonymous |
|
Brute-Force SSH | ||
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩