138.124.67.224

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
74 reports
42 reporters · latest 8 months ago
ISP
GLOBAL CONNECTIVITY SOLUTIONS LLP
Usage Type
Data Center/Web Hosting/Transit
ASN
AS215540
Domain Name
globconnex.com
Country
🇳🇱 Netherlands
City
Kerkrade, Limburg
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

138.124.67.224 has been reported 74 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
74 from 42 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇯🇵 beon
[DateTime=>2026-02-16T23:43:07Z (UTC)] , [HoneyPot_Hit=>once] , [HoneyPot=>/.env/] , [total_Hit=>once]
Bad Web Bot Web App Attack Hacking
🇩🇪 Vegascosmetics
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇺🇸 nationaleventpros.com
vulnerability scan
Web App Attack
🇬🇧 Swiptly
Bot scanning for environment files .env .env/\* ...
Web App Attack
🇨🇦 polycoda
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)
Hacking Web App Attack
🇺🇸 etu brutus
138.124.67.224 Blocked by [Attack Vector List] ...
Hacking Brute-Force Exploited Host
🇺🇸 gumbysoft
Unauthorized web vulnerability scan (/.env, wordpress, etc.)
Web App Attack
🇸🇬 anotherwatcher
bad bot
Bad Web Bot
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇺🇸 mnsf
Scanning/Probing (11)
Brute-Force Web App Attack
🇺🇸 myagent.site
Blocking for trying to access an exploit file: /.env
Hacking
🇬🇧 poundawebsiteltd
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 138.124.67.224 - - [09/Feb/2026:04:02:21 +0000] GET /.env HTTP/1.1 403 3091 - Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0
Web App Attack
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇮🇩 Burayot
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 138.124.67.224 (CH/Switzerland/-): 1 in the last 3600 secs
Web App Attack
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/138.124.67.224 2026-02-05 23:11:19 /.env 2026-02-05 23:55:20 /.env 2026-02-05 23:54:59 /.env 2026-02-05 23:47:58 /.env 2026-02-05 23:52:13 /.env
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.51
🇧🇷 191.7.159.201
🇳🇱 176.65.132.39
🇫🇷 146.19.44.31
🇨🇳 115.190.181.18
🇺🇦 195.74.72.41
🇺🇿 144.124.196.158
🇰🇪 102.210.148.92
🇺🇸 35.90.251.251
🇳🇱 34.1.231.78
🇰🇷 211.251.202.14
🇳🇱 195.178.110.227
🇺🇸 167.99.98.129
🇺🇸 147.185.132.29
🇩🇪 139.162.189.5
🇨🇳 43.248.108.251
🇺🇸 24.89.134.244
🇨🇳 8.137.169.2
🇷🇴 2.57.121.25
feedback