JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.199.6.225

Recent Activity

Abuse Confidence Score

75% Critical

69 reports

55 reporters · latest 9 hours ago

ISP: Datacamp Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS212238
Hostname(s): unn-138-199-6-225.datapacket.com
Domain Name: datacamp.co.uk
Country: 🇨🇭 Switzerland
City: Zurich, Zurich

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

69 from 55 distinct reporters

First reported

February 6th 2025

Most recent report

9 hours ago

Last 60 days

Top reporter locations 🇷🇺 Russian Federation 5 🇩🇪 Germany 2 🇺🇸 United States of America 2

Most common categories Web App Attack 11 Brute-Force 6 SSH 4 Hacking 3 Bad Web Bot 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dot.mg	2026-11-15 10:18:05 UTC · (9 hours ago)	Bad behaviour	Web Spam
Anonymous	2026-11-15 06:42:50 UTC · (13 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇵🇹 Information Security	2026-11-15 06:39:07 UTC · (13 hours ago)	Web App Attack ...	Web App Attack
Anonymous	2026-11-13 04:39:53 UTC · (2 days ago)	(sshd) Failed SSH login from 138.199.6.225 (CH/Switzerland/unn-138-199-6-225.datapacket.com): 4 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Nov 13 06:39:14 xn--80aqlfee4d sshd[20750]: Did not receive identification stri ... show more (sshd) Failed SSH login from 138.199.6.225 (CH/Switzerland/unn-138-199-6-225.datapacket.com): 4 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Nov 13 06:39:14 xn--80aqlfee4d sshd[20750]: Did not receive identification string from 138.199.6.225 Nov 13 06:39:15 xn--80aqlfee4d sshd[20751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.6.225 user=root Nov 13 06:39:17 xn--80aqlfee4d sshd[20751]: Failed password for root from 138.199.6.225 port 57798 ssh2 Nov 13 06:39:19 xn--80aqlfee4d sshd[20751]: Failed password for root from 138.199.6.225 port 57798 ssh2 show less	Port Scan
🇷🇺 OK	2026-11-12 16:55:15 UTC · (3 days ago)	SSH	Hacking Port Scan Brute-Force SSH
Anonymous	2026-11-12 05:07:11 UTC · (3 days ago)	2026-11-12T08:07:04.361805+03:00 main sshd-session[2251971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.6.225 user=root 2026-11-12T08:07:06.140941+03:00 main sshd-session[2251971]: Failed password ... show more 2026-11-12T08:07:04.361805+03:00 main sshd-session[2251971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.6.225 user=root 2026-11-12T08:07:06.140941+03:00 main sshd-session[2251971]: Failed password for root from 138.199.6.225 port 50480 ssh2 2026-11-12T08:07:08.823640+03:00 main sshd-session[2251971]: Failed password for root from 138.199.6.225 port 50480 ssh2 2026-11-12T08:07:09.543226+03:00 main sshd-session[2251971]: Connection closed by authenticating user root 138.199.6.225 port 50480 [preauth] 2026-11-12T08:07:10.381463+03:00 main sshd-session[2251995]: Invalid user victim from 138.199.6.225 port 32962 ... show less	Brute-Force SSH
Anonymous	2026-11-12 04:33:18 UTC · (3 days ago)	2026-11-12T07:33:16.745677zimbra sshd[14901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.6.225 user=root 2026-11-12T07:33:18.109196zimbra sshd[14901]: Failed password for root from 138.199.6.225 p ... show more 2026-11-12T07:33:16.745677zimbra sshd[14901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.6.225 user=root 2026-11-12T07:33:18.109196zimbra sshd[14901]: Failed password for root from 138.199.6.225 port 58188 ssh2 ... show less	Brute-Force SSH
🇷🇺 ago.su	2026-11-12 02:59:30 UTC · (3 days ago)	F2B blocked SSH BF [otd]	Brute-Force SSH
🇩🇪 SCHAPPY	2026-11-02 06:08:43 UTC · (1 week ago)	Mutliple attempts to access forbidden web resources, HTTP code 403.	Web App Attack
Anonymous	2026-11-02 05:45:21 UTC · (1 week ago)	CrowdSec detection: csi/appsec-detect	Web App Attack
🇷🇸 pexodelic	2026-10-31 07:35:02 UTC · (2 weeks ago)	Automated report from web, SSH and FTP server logs: 16 requests probing for exposed secrets (.env, .git, config files). First reported 2026-10-30 15:05 UTC, last reported 2026-10-31 08:35 UTC; counts cover the current log rotation window.	Web App Attack
🇨🇭 zynex	2026-10-30 16:13:30 UTC · (2 weeks ago)	URL Probing: /laravel/.env	Web App Attack
🇺🇸 francelink.fr	2026-10-30 16:01:28 UTC · (2 weeks ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T15:58:16.000Z.	Web App Attack
🇳🇱 Site.eu	2026-10-30 15:53:10 UTC · (2 weeks ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-10-30 14:30:05 UTC · (2 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 194.26.129.227

🇺🇸 216.139.9.228

🇳🇱 195.178.110.30

🇬🇧 172.71.241.152

🇬🇧 172.71.26.34

🇧🇩 103.172.28.62

🇸🇮 102.220.161.248

🇸🇳 41.214.24.243

🇺🇸 184.154.76.22

🇵🇰 39.34.186.46

🇪🇹 196.188.93.169

🇨🇴 161.10.77.51

🇻🇺 138.226.239.233

🇺🇸 34.71.46.110

🇮🇷 2.180.17.117

🇳🇱 195.178.110.217

🇸🇪 185.246.130.20

🇨🇳 180.153.236.119

🇺🇸 161.35.8.147

🇯🇵 160.251.255.178