JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.199.58.107

138.199.58.107 was found in our database!

This IP was reported 367 times. Confidence of Abuse is 29%: ?

29%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	datacamp.co.uk
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.199.58.107

Whois 138.199.58.107

IP Abuse Reports for 138.199.58.107:

This IP address has been reported a total of 367 times from 131 distinct sources. 138.199.58.107 was first reported on April 20th 2022, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-09-03 00:01:37 (4 hours ago)	2026-09-03 00:01:37 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-09-02 19:04:15 (9 hours ago)	PORT & IP Scan.	Port Scan Brute-Force
🇺🇸 NetVexor	2026-09-02 15:06:40 (13 hours ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
Anonymous	2026-08-06 01:23:34 (4 weeks ago)	Attack detected: 138.199.58.107 [2026-08-06] Categories: 18 --- wp-login brute force (37 hits) --- 1 ... show more Attack detected: 138.199.58.107 [2026-08-06] Categories: 18 --- wp-login brute force (37 hits) --- 138.199.58.107 - - [14/May/2026:00:20:40 +0000] "POST /wp-login.php HTTP/1.1" 200 7751 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 138.199.58.107 - - [14/May/2026:00:20:42 +0000] "POST /wp-login.php HTTP/1.1" 200 7751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.199.58.107 - - [14/May/2026:00:20:44 +0000] "POST /wp-login.php HTTP/1.1" 200 7751 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 138.199.58.107 - - [14/May/2026:00:20:45 +0000] "POST /wp-login.php HTTP/1.1" 200 7751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.199.58.107 - - [14/May/2026:00:20:47 +0000] "POST /wp-login.php HTTP/1.1" 200 7750 "-" "Mozilla/5.0 (Macin show less	Brute-Force
🇺🇸 kosada.com	2026-07-25 03:38:22 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-22 00:32:25 (1 month ago)	Attack detected: 138.199.58.107 [2026-07-22] Categories: 18 --- wp-login brute force (37 hits) --- 1 ... show more Attack detected: 138.199.58.107 [2026-07-22] Categories: 18 --- wp-login brute force (37 hits) --- 138.199.58.107 - - [14/May/2026:00:20:40 +0000] "POST /wp-login.php HTTP/1.1" 200 7751 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 138.199.58.107 - - [14/May/2026:00:20:42 +0000] "POST /wp-login.php HTTP/1.1" 200 7751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.199.58.107 - - [14/May/2026:00:20:44 +0000] "POST /wp-login.php HTTP/1.1" 200 7751 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 138.199.58.107 - - [14/May/2026:00:20:45 +0000] "POST /wp-login.php HTTP/1.1" 200 7751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.199.58.107 - - [14/May/2026:00:20:47 +0000] "POST /wp-login.php HTTP/1.1" 200 7750 "-" "Mozilla/5.0 (Macin show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-11 05:27:07 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 138.199.58.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 138.199.58.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 01:27:02.276470 2026] [security2:error] [pid 23189:tid 23189] [client 138.199.58.107:45524] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.fixmyland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fixmyland.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aipHJls84g9HZEye5FWIOQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 securejdprop	2026-06-10 13:21:00 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-06-02 09:17:14 (3 months ago)	138.199.58.107 - - [02/Jun/2026:12:17:13 +0300] "GET /wp-content/plugins/fckeditor/filemanager/brows ... show more 138.199.58.107 - - [02/Jun/2026:12:17:13 +0300] "GET /wp-content/plugins/fckeditor/filemanager/browser/mcpuk/browser.html HTTP/1.1" 404 762 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-01 19:17:16 (3 months ago)	138.199.58.107 - - [01/Jun/2026:22:17:15 +0300] "GET /wp-content/plugins/fckeditor/filemanager/brows ... show more 138.199.58.107 - - [01/Jun/2026:22:17:15 +0300] "GET /wp-content/plugins/fckeditor/filemanager/browser/mcpuk/browser.html HTTP/1.1" 404 771 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-01 18:08:15 (3 months ago)	138.199.58.107 - - [01/Jun/2026:21:08:14 +0300] "GET /wp-content/plugins/fckeditor-for-wordpress-plu ... show more 138.199.58.107 - - [01/Jun/2026:21:08:14 +0300] "GET /wp-content/plugins/fckeditor-for-wordpress-plugin/filemanager/browser/mcpuk/browser.html HTTP/1.1" 404 785 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 138.199.58.107 - - [01/Jun/2026:21:08:15 +0300] "GET /japan-fixed.com/wp-content/plugins/ckeditor-for-wordpress/filemanager/browser/default/browser.html HTTP/1.1" 404 785 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" ... show less	Web App Attack
🇮🇩 sockominfo	2026-05-18 15:00:11 (3 months ago)	Zimbra: Login failures from malicious IP: 138.199.58.107. Threat Score: 5.6/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 138.199.58.107. Threat Score: 5.6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇳🇱 wlt-blocker	2026-05-14 20:51:37 (3 months ago)	Unauthorized access to webpage admin	Web App Attack
🇩🇪 outputblog.de	2026-05-14 17:11:32 (3 months ago)	apache-wp-probephp	Port Scan Hacking Brute-Force
🇺🇸 bigwavedave	2026-05-14 01:11:10 (3 months ago)	Wordpress Attack	Web App Attack

Showing 1 to 15 of 367 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.238.237.254

🇲🇽 201.149.53.243

🇨🇳 123.149.0.74

🇩🇪 102.165.53.67

🇷🇺 91.144.158.231

🇨🇳 36.33.167.165

🇳🇱 34.12.105.38

🇺🇸 20.12.242.111

🇺🇸 216.25.89.91

🇬🇧 195.206.182.198

🇩🇪 167.94.146.38

🇮🇳 151.185.42.183

🇺🇸 147.185.132.191

🇺🇸 107.180.88.176

🇷🇺 95.25.1.98

🇳🇱 91.148.244.131

🇫🇷 77.239.124.208

🇹🇭 202.129.16.119

🇺🇦 178.213.6.219

🇺🇸 172.190.13.234