🇬🇷
setupgr
2026-09-08 20:34:16
(51 minutes ago)
(mod_security) mod_security (id:11000011) triggered by 139.162.124.178 (JP/Japan/Tokyo/Tokyo/-/[AS63 ...
show more
(mod_security) mod_security (id:11000011) triggered by 139.162.124.178 (JP/Japan/Tokyo/Tokyo/-/[AS63949 Akamai Connected Cloud]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Sep 08 23:34:11.254660 2026] [security2:error] [pid 1583248:tid 1583373] [client 139.162.124.178:55364] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "linodeusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 139-162-124-178.ip.linodeusercontent.com"] [severity "CRITICAL"] [hostname "www.host.setworldup365.com"] [uri "/.env"] [unique_id "aqBxQ9QWdnLpiLmCO-SFQwAABRI"]
show less
Port Scan
🇪🇸
yvoictra
2026-09-08 18:25:49
(2 hours ago)
139.162.124.178 - - [08/Sep/2026:20:25:46 +0200] "GET //.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Lin ...
show more
139.162.124.178 - - [08/Sep/2026:20:25:46 +0200] "GET //.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [08/Sep/2026:20:25:46 +0200] "GET //.env.backup HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [08/Sep/2026:20:25:47 +0200] "GET //.env.bak HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [08/Sep/2026:20:25:48 +0200] "GET //.env.config HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [08/Sep/20
...
show less
Brute-Force
Web App Attack
🇪🇸
raiolanetworks.com
2026-09-08 16:30:14
(4 hours ago)
Honeypot detection: web application attack. 3 events observed. Reported automatically from a honeypo ...
show more
Honeypot detection: web application attack. 3 events observed. Reported automatically from a honeypot sensor.
show less
Web App Attack
🇩🇪
fleckenbase
2026-09-08 15:36:14
(5 hours ago)
apache-noscript
...
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-08 12:36:05
(8 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
Stara
2026-09-08 12:05:54
(9 hours ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
SSH
Web App Attack
🇯🇵
ki3
2026-09-08 12:03:09
(9 hours ago)
Fail2Ban: Web App Attacks and Forum Spam 139.162.124.178 1788868989.0(JST)
Web Spam
Bad Web Bot
Web App Attack
🇮🇹
Ilop
2026-09-08 11:18:50
(10 hours ago)
[mm-111] Web scan / malformed HTTP requests to public endpoint: 2 event(s) from 139.162.124.178; fai ...
show more
[mm-111] Web scan / malformed HTTP requests to public endpoint: 2 event(s) from 139.162.124.178; fail2ban auto-ban. Log sample: 139.162.124.178 - - [08/Sep/2026:11:18:48 +0000] "GET //.env.backup HTTP/1.1" 400 657 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "-"
show less
Web App Attack
🇩🇪
gurnip
2026-09-08 11:10:00
(10 hours ago)
Vulnerability probe of page //.env, not found on the server.
Brute-Force
Web App Attack
🇫🇷
guillaume illien
2026-09-07 20:15:07
(1 day ago)
139.162.124.178 - - [07/Sep/2026:20:14:55 +0000] "GET //.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Lin ...
show more
139.162.124.178 - - [07/Sep/2026:20:14:55 +0000] "GET //.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:20:14:57 +0000] "GET //.env.backup HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:20:14:59 +0000] "GET //.env.bak HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:20:15:01 +0000] "GET //.env.config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/20
...
show less
Hacking
Brute-Force
Web App Attack
SSH
🇫🇷
COMAITE
2026-09-07 19:11:08
(1 day ago)
Suspicious URL access.
Web App Attack
🇫🇷
guillaume illien
2026-09-07 19:04:47
(1 day ago)
139.162.124.178 - - [07/Sep/2026:19:04:07 +0000] "GET //.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Lin ...
show more
139.162.124.178 - - [07/Sep/2026:19:04:07 +0000] "GET //.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:19:04:15 +0000] "GET //.env.backup HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:19:04:19 +0000] "GET //.env.bak HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:19:04:27 +0000] "GET //.env.config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/20
...
show less
Hacking
Brute-Force
Web App Attack
SSH
🇩🇪
Bedios GmbH
2026-09-07 19:01:33
(1 day ago)
Login credentials theft attempt
Hacking
🇳🇱
spirttm
2026-09-07 18:58:47
(1 day ago)
139.162.124.178 - - [07/Sep/2026:18:58:41 +0000] "GET //.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Lin ...
show more
139.162.124.178 - - [07/Sep/2026:18:58:41 +0000] "GET //.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:18:58:42 +0000] "GET //.env.backup HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:18:58:42 +0000] "GET //.env.bak HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:18:58:43 +0000] "GET //.env.config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/20
...
show less
Port Scan
Web App Attack
🇫🇷
guillaume illien
2026-09-07 18:16:35
(1 day ago)
139.162.124.178 - - [07/Sep/2026:18:16:17 +0000] "GET //.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Lin ...
show more
139.162.124.178 - - [07/Sep/2026:18:16:17 +0000] "GET //.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:18:16:19 +0000] "GET //.env.backup HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:18:16:22 +0000] "GET //.env.bak HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/2026:18:16:25 +0000] "GET //.env.config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
139.162.124.178 - - [07/Sep/20
...
show less
Hacking
Brute-Force
Web App Attack
SSH