This IP address has been reported a total of
6
times from
5 distinct
sources.
138.99.199.188 was first reported on
August 11th 2023 , and the most recent report was
10 hours ago United States of America
with 1
report.
The most common categories in these recent reports were:
Web App Attack
1
time;
Bad Web Bot
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-03 13:13:44
(10 hours ago)
(mod_security) mod_security (id:210350) triggered by 138.99.199.188 (138-99-199-188.fenixwireless.co ...
show more
(mod_security) mod_security (id:210350) triggered by 138.99.199.188 (138-99-199-188.fenixwireless.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 09:13:37.852969 2026] [security2:error] [pid 31606:tid 31606] [client 138.99.199.188:47742] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||martinsgenser.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "martinsgenser.com"] [uri "/"] [unique_id "asD_gSIvWRl-j4quORkHkgAAAAs"], referer: https://buildhighqualitybacklinks.site/dir/website-growth-backlinks-131175
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
comerford
2023-09-01 14:23:09
(3 years ago)
Sep 1 15:22:30 mail postfix/smtpd[952449]: NOQUEUE: reject: RCPT from unknown[138.99.199.188]: 450 ...
show more
Sep 1 15:22:30 mail postfix/smtpd[952449]: NOQUEUE: reject: RCPT from unknown[138.99.199.188]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [138.99.199.188]; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[138.99.199.188]>
Sep 1 15:22:54 mail postfix/smtpd[952449]: NOQUEUE: reject: RCPT from unknown[138.99.199.188]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [138.99.199.188]; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[138.99.199.188]>
Sep 1 15:23:08 mail postfix/smtpd[952449]: NOQUEUE: reject: RCPT from unknown[138.99.199.188]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [138.99.199.188]; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[138.99.199.188]>
...
show less
Phishing
Email Spam
🇨🇦
George Horton
2023-08-29 14:06:00
(3 years ago)
Source IP is spoofing, and phishing using unauthorized sender
Phishing
Email Spam
Spoofing
🇷🇸
Smel
2023-08-16 14:19:25
(3 years ago)
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
Email Spam
Hacking
Brute-Force
🇩🇪
evilazrael.de
2023-08-15 16:07:10
(3 years ago)
Mail sent to address obtained from MySpace hack
Email Spam
🇷🇸
Smel
2023-08-11 16:05:49
(3 years ago)
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
Email Spam
Hacking
Brute-Force
Showing 1 to
6
of 6 reports
