This IP address has been reported a total of
39
times from
22 distinct
sources.
138.124.63.217 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 13
reports;
Netherlands
with 12
reports;
United States of America
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
25
times;
Hacking
14
times;
Brute-Force
11
times;
Exploited Host
7
times;
Bad Web Bot
5
times;
Other
6
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-17.
show less
Automated credential attack against a legacy web authentication flow: 4 matching requests observed b ...
show moreAutomated credential attack against a legacy web authentication flow: 4 matching requests observed between 2026-10-18T11:38:36+00:00 and 2026-10-18T11:45:57+00:00 UTC.
show less
[SatOct1711:22:31.2595922026][security2:error][pid2391522:tid2391548][client138.124.63.217:0]ModSecu ...
show more[SatOct1711:22:31.2595922026][security2:error][pid2391522:tid2391548][client138.124.63.217:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"lacer.ch\"][uri\"/media/sourcerer/js/popup.js\"][unique_id\"atM-V33X1JYymmu3KBB-rAAAAA8\"]
show less
