JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.199.7.185

138.199.7.185 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 14%: ?

14%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-138-199-7-185.datapacket.com
Domain Name	datacamp.co.uk
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.199.7.185

Whois 138.199.7.185

IP Abuse Reports for 138.199.7.185:

This IP address has been reported a total of 94 times from 30 distinct sources. 138.199.7.185 was first reported on March 27th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-28 11:50:48 (1 week ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2026-04-20 11:22:17 (1 month ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 138 ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 138.199.7.185 (unn-138-199-7-185.datapacket.com) show less	Brute-Force
🇫🇷 Octopuce	2026-04-19 16:57:01 (1 month ago)	Aggressive web search of vulnerable pages: /postnews.php /cgi-bin/postnews.php /txets.php /wp-conten ... show more Aggressive web search of vulnerable pages: /postnews.php /cgi-bin/postnews.php /txets.php /wp-content/txets.php /wp-includes/widgets/txets.php ... show less	Web App Attack
🇦🇺 oncord	2026-02-27 07:49:37 (3 months ago)	Form spam	Web Spam
🇺🇸 jhuisi	2026-01-21 14:31:46 (4 months ago)	MailMan List Subscription Abuse	Web App Attack
🇺🇸 xmission.com	2025-10-09 06:26:24 (8 months ago)	Blocked by UFW (TCP on 48967) Source port: 44244 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 48967) Source port: 44244 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 138.199.7.185) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-10-04 00:49:24 (8 months ago)	Blocked by UFW (TCP on 9101) Source port: 53483 TTL: 49 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 53483 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 138.199.7.185) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 exxos	2025-09-21 23:05:34 (8 months ago)	Attacks with Bad user agents	Hacking
Anonymous	2025-08-04 15:08:29 (10 months ago)	Botnet - login attempts with leaked random user/pass lists	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-06-15 19:34:56 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 138.199.7.185 (unn-138-199-7-185.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 138.199.7.185 (unn-138-199-7-185.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 15:34:49.576947 2025] [security2:error] [pid 614723:tid 614723] [client 138.199.7.185:1659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clayrivers.com"] [uri "/.env"] [unique_id "aE8gWUON317ohh7zHVF4JgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2025-06-15 18:42:24 (11 months ago)	138.199.7.185 - - [15/Jun/2025:21:42:20 +0300] "GET /.env HTTP/1.1" 404 273 "-" "Go-http-client/1.1" ... show more 138.199.7.185 - - [15/Jun/2025:21:42:20 +0300] "GET /.env HTTP/1.1" 404 273 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-06-15 18:39:46 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 138.199.7.185 (unn-138-199-7-185.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 138.199.7.185 (unn-138-199-7-185.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 14:39:40.582733 2025] [security2:error] [pid 3592688:tid 3592688] [client 138.199.7.185:42617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khaoula.com"] [uri "/.env"] [unique_id "aE8TbCcwarfbZLAayKFOzgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-15 17:00:07 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 138.199.7.185 (unn-138-199-7-185.datapacket.com ... show more (mod_security) mod_security (id:210492) triggered by 138.199.7.185 (unn-138-199-7-185.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 13:00:00.164323 2025] [security2:error] [pid 2775141:tid 2775141] [client 138.199.7.185:29316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yarbro.org"] [uri "/.env"] [unique_id "aE78EFRuL4ZEfxEfNUhe9wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2025-06-15 14:10:09 (11 months ago)	Detected as a bad bot	Bad Web Bot
🇳🇿 Tripwire	2025-06-15 13:44:38 (11 months ago)	Scanning for exploits - /.env	Web App Attack

Showing 1 to 15 of 94 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 132.196.92.64

🇺🇸 98.102.148.242

🇪🇸 82.223.216.36

🇫🇷 45.81.243.62

🇺🇸 3.131.96.130

🇷🇴 2.57.121.112

🇺🇸 152.32.235.90

🇵🇱 151.115.48.199

🇮🇳 136.232.11.10

🇵🇰 115.42.66.88

🇺🇸 107.150.96.215

🇺🇸 107.15.192.159

🇵🇱 87.251.64.155

🇬🇧 193.163.125.6

🇹🇷 178.233.124.218

🇷🇴 92.118.39.236

🇺🇸 65.49.1.122

🇺🇸 34.106.229.228

🇺🇸 172.183.94.135

🇺🇸 143.42.1.53