JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.199.43.102

138.199.43.102 was found in our database!

This IP was reported 492 times. Confidence of Abuse is 58%: ?

58%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-138-199-43-102.datapacket.com
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.199.43.102

Whois 138.199.43.102

IP Abuse Reports for 138.199.43.102:

This IP address has been reported a total of 492 times from 64 distinct sources. 138.199.43.102 was first reported on November 21st 2023, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 raiolanetworks.com	2026-09-20 16:49:35 (11 hours ago)	Honeypot detection: Cisco ASA exploit attempt. 6 events observed. Reported automatically from a hone ... show more Honeypot detection: Cisco ASA exploit attempt. 6 events observed. Reported automatically from a honeypot sensor. show less	Hacking
🇨🇿 lp	2026-09-20 15:23:58 (12 hours ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 138.199.43.102 2026-09-20T16:43:32+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 138.199.43.102 2026-09-20T16:43:32+02:00 vpn Access-Reject 'jeramy' station: 138.199.43.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇦🇺 actrix	2026-09-17 22:41:33 (3 days ago)	Sophos XGS VPN portal credential stuffing: 6 failed authentication attempts across 5 distinct userna ... show more Sophos XGS VPN portal credential stuffing: 6 failed authentication attempts across 5 distinct usernames since 2026-09-18. Automated distributed attack. show less	Brute-Force Web App Attack
Anonymous	2026-09-17 16:21:29 (3 days ago)	LH-Watcher: FAKE_ID SQL_INJECTION	SQL Injection Web App Attack Bad Web Bot
🇦🇺 actrix	2026-09-16 19:59:43 (4 days ago)	Sophos XGS VPN portal credential stuffing: 8 failed authentication attempts across 7 distinct userna ... show more Sophos XGS VPN portal credential stuffing: 8 failed authentication attempts across 7 distinct usernames since 2026-09-17. Automated distributed attack. show less	Brute-Force Web App Attack
🇩🇪 CELOS-SOC	2026-09-15 06:30:15 (5 days ago)	Multiple Unauthorized VPN Login Attempts	Hacking Brute-Force
🇬🇧 EntrustIT	2026-09-15 03:33:47 (6 days ago)	Failed SSL VPN login attempts (dictionary/spray brute force) - 3 attempts between 2026-09-14T15:24:4 ... show more Failed SSL VPN login attempts (dictionary/spray brute force) - 3 attempts between 2026-09-14T15:24:49Z and 2026-09-15T03:33:47Z. Usernames tried: cisco,daniela,reports show less	Brute-Force
🇦🇺 actrix	2026-09-14 11:09:42 (6 days ago)	Sophos XGS VPN portal credential stuffing: 15 failed authentication attempts across 10 distinct user ... show more Sophos XGS VPN portal credential stuffing: 15 failed authentication attempts across 10 distinct usernames since 2026-09-13. Automated distributed attack. show less	Brute-Force Web App Attack
🇦🇺 actrix	2026-09-14 09:24:17 (6 days ago)	Sophos XGS VPN portal credential stuffing: 14 failed authentication attempts across 10 distinct user ... show more Sophos XGS VPN portal credential stuffing: 14 failed authentication attempts across 10 distinct usernames since 2026-09-13. Automated distributed attack. show less	Brute-Force Web App Attack
🇩🇪 CELOS-SOC	2026-09-13 18:30:16 (1 week ago)	Multiple Unauthorized VPN Login Attempts	Hacking Brute-Force
🇬🇧 EntrustIT	2026-09-13 17:08:06 (1 week ago)	SSL VPN brute-force: 8 failed login attempts between 2026-09-11 20:33 and 2026-09-13 17:08 UTC. User ... show more SSL VPN brute-force: 8 failed login attempts between 2026-09-11 20:33 and 2026-09-13 17:08 UTC. Usernames tried included: communications, volunteer, support, corp, xerox. show less	Brute-Force SSH
🇬🇧 EntrustIT	2026-09-10 18:30:20 (1 week ago)	Fortigate SSL-VPN brute force / credential stuffing. 1 failed login attempt(s) between 2026-09-10 18 ... show more Fortigate SSL-VPN brute force / credential stuffing. 1 failed login attempt(s) between 2026-09-10 18:30:20 and 2026-09-10 18:30:20 UTC. Usernames attempted (sample): cathy. show less	Brute-Force
🇪🇸 raiolanetworks.com	2026-09-09 16:44:39 (1 week ago)	Honeypot detection: Cisco ASA exploit attempt. 4 events observed. Reported automatically from a hone ... show more Honeypot detection: Cisco ASA exploit attempt. 4 events observed. Reported automatically from a honeypot sensor. show less	Hacking
🇨🇿 lp	2026-09-09 15:21:14 (1 week ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 138.199.43.102 2026-09-09T16:32:20+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 138.199.43.102 2026-09-09T16:32:20+02:00 vpn Access-Reject 'mcafee' station: 138.199.43.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2026-09-09 14:44:18 (1 week ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack

Showing 1 to 15 of 492 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.66

🇧🇪 198.235.24.209

🇧🇪 198.235.24.195

🇺🇸 185.191.171.13

🇦🇱 141.98.143.239

🇺🇸 100.29.192.48

🇰🇷 1.209.110.147

🇺🇸 2607:f298:5:117b::5fe:f994

🇫🇷 2001:41d0:33d:9200::40c

🇺🇸 205.210.31.6

🇹🇳 196.178.156.246

🇬🇧 195.140.214.23

🇩🇪 193.124.20.249

🇧🇬 193.24.211.218

🇫🇷 152.228.135.87

🇮🇹 95.75.68.64

🇳🇱 89.21.67.190

🇺🇸 70.167.234.161

🇵🇰 39.61.145.111

🇬🇧 35.203.211.135