๐จ๐ฟ
rawnullbyte
2026-07-19 08:30:36
(1 day ago)
๐จ Honeypot triggered! ๐ฅ๏ธ System: NPot ๐ฏ Target: ENV_FILE_EXPOSURE ๐ฃ๏ธ Path: /.env ๐ค Attacker IP: 138. ...
show more
๐จ Honeypot triggered! ๐ฅ๏ธ System: NPot ๐ฏ Target: ENV_FILE_EXPOSURE ๐ฃ๏ธ Path: /.env ๐ค Attacker IP: 138.124.66.222 โฐ Time: 2026-07-19 08:30:36 ๐ก User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0
show less
Web App Attack
๐ฉ๐ช
Mykola Spesivtsev
2026-07-19 08:02:23
(1 day ago)
HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env, Method:GET, UA:Mozilla/5.0 (X11; Ubunt ...
show more
HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env, Method:GET, UA:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0
show less
Port Scan
Web App Attack
Bad Web Bot
๐จ๐ฟ
rawnullbyte
2026-07-18 23:11:26
(1 day ago)
๐จ Honeypot triggered! ๐ฅ๏ธ System: NPot ๐ฏ Target: ENV_FILE_EXPOSURE ๐ฃ๏ธ Path: /.env ๐ค Attacker IP: 138. ...
show more
๐จ Honeypot triggered! ๐ฅ๏ธ System: NPot ๐ฏ Target: ENV_FILE_EXPOSURE ๐ฃ๏ธ Path: /.env ๐ค Attacker IP: 138.124.66.222 โฐ Time: 2026-07-18 23:11:26 ๐ก User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
show less
Web App Attack
๐ฉ๐ช
Mykola Spesivtsev
2026-07-18 23:07:31
(1 day ago)
HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env, Method:GET, UA:Mozilla/5.0 (Windows NT ...
show more
HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Sa
show less
Port Scan
Web App Attack
Bad Web Bot
๐จ๐ฟ
rawnullbyte
2026-07-18 22:02:44
(1 day ago)
๐จ Honeypot triggered! ๐ฅ๏ธ System: NPot ๐ฏ Target: Unknown ๐ฃ๏ธ Path: /fake_path_for_validation_check_404 ...
show more
๐จ Honeypot triggered! ๐ฅ๏ธ System: NPot ๐ฏ Target: Unknown ๐ฃ๏ธ Path: /fake_path_for_validation_check_404_xyz.txt ๐ค Attacker IP: 138.124.66.222 โฐ Time: 2026-07-18 22:02:43 ๐ก User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
show less
Web App Attack
๐ฉ๐ช
pltcldvlpr
2026-07-18 20:59:47
(1 day ago)
CMS/framework probe: 138.124.66.222 - - [18/Jul/2026:22:59:47 +0200] "GET /.env HTTP/1.1" 404 564 "- ...
show more
CMS/framework probe: 138.124.66.222 - - [18/Jul/2026:22:59:47 +0200] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" asn=215540 org="GLOBAL CONNECTIVITY SOLUTIONS LLP" country=DE
...
show less
Web App Attack
๐จ๐ฟ
rawnullbyte
2026-07-18 20:47:42
(1 day ago)
๐จ Honeypot triggered! ๐ฅ๏ธ System: NPot ๐ฏ Target: Unknown ๐ฃ๏ธ Path: /fake_path_for_validation_check_404 ...
show more
๐จ Honeypot triggered! ๐ฅ๏ธ System: NPot ๐ฏ Target: Unknown ๐ฃ๏ธ Path: /fake_path_for_validation_check_404_xyz.txt ๐ค Attacker IP: 138.124.66.222 โฐ Time: 2026-07-18 20:47:42 ๐ก User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
show less
Web App Attack
๐ฌ๐ง
pinguin
2026-07-18 20:45:48
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ง๐พ
StatsMe
2026-07-16 01:43:53
(4 days ago)
2026-07-15T16:25:50.245937+0300
ET SCAN NMAP -sS window 1024
Port Scan
๐ท๐ด
abuse_IP_reporter
2026-07-15 22:45:04
(4 days ago)
Jul 16 00:45:12 server UFW BLOCK SRC=138.124.66.222 PROTO=TCP SPT=59893 DPT=9090
Port Scan
๐ณ๐ฑ
BIV
2026-07-15 22:38:10
(4 days ago)
Honeypot multi-source hit. Sources: dshield:fw. Ports: 3000,9090. Automated tiered (T-Pot+DShield).
Port Scan
Hacking
๐ฉ๐ช
EinfxchFinn
2026-07-15 21:58:54
(4 days ago)
Unauthorized connection attempt to port 9090 from 138.124.66.222
Port Scan
๐ณ๐ฑ
StopAbuse
2026-07-15 21:17:11
(4 days ago)
tcp/9090
Port Scan
๐ซ๐ฎ
6kilowatti
2026-07-15 19:31:33
(4 days ago)
2026-07-15T22:31:32.430056+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ...
show more
2026-07-15T22:31:32.430056+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=138.124.66.222 DST=83.148.240.21 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=28138 PROTO=TCP SPT=59893 DPT=9090 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
๐ฌ๐ง
essinghigh
2026-07-15 19:14:17
(4 days ago)
IPS Detection: 138.124.66.222 -> DPT: 9090
Port Scan