|
๐ธ๐ช
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
๐ซ๐ท
physaphae
|
|
[13/Oct/2026:11:49:30 +0000] - 403 403 - GET https syno.physaphae.fr "/.git/config" [Client 35.215.179.8] [Length 8460] [Gzip -] [Sent-to 192.168.1.222] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13 ...
show more
[13/Oct/2026:11:49:30 +0000] - 403 403 - GET https syno.physaphae.fr "/.git/config" [Client 35.215.179.8] [Length 8460] [Gzip -] [Sent-to 192.168.1.222] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[13/Oct/2026:11:49:31 +0000] - 403 403 - GET https syno.physaphae.fr "/.env" [Client 35.215.179.8] [Length 8460] [Gzip -] [Sent-to 192.168.1.222] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[13/Oct/2026:11:49:31 +0000] - 403 403 - GET https syno.physaphae.fr "/.env.local" [Client 35.215.179.8] [Length 8460] [Gzip -] [Sent-to 192.168.1.222] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[13/Oct/2026:11:49:31 +0000] - 403 403 - GET https syno.physaphae.fr "/.env.production" [Client 35.215.179.8] [Length 8460] [Gzip -] [Sent-to 192.168.1.222] "Mozilla/5.0 (Macint
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
Alt255
|
|
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.215.179.8 - - [13/Oct/2026:10:34:42 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.215.179.8 - - [13/Oct/2026:10:34:42 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
๐บ๐ธ
EmilGH
|
|
35.215.179.8 - - [13/Oct/2026:03:33:24 -0400] "GET /.git/config HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:24 -0400] "GET /.env HTT ...
show more
35.215.179.8 - - [13/Oct/2026:03:33:24 -0400] "GET /.git/config HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:24 -0400] "GET /.env HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:25 -0400] "GET /.env.local HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:25 -0400] "GET /.env.production HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:25 -0400] "GET /.env.staging HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:25 -0400] "GET /.
...
show less
|
Bad Web Bot
Web App Attack
|
|
๐จ๐ญ
leo1305
|
|
CrowdSec detection | scenario: http-sensitive-files
|
Web App Attack
Exploited Host
|
|
๐ณ๐ด
tmiland
|
|
Detected 205 connections from 35.215.179.8 last 10 minutes.; lone high-rate source (combined 410 requests in both windows); Logs: 35.215.179.8 - - [13/Oct/2026:09:03:58 +0200] \GET / HTTP/1.1\" 502 3281 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x6 ...
show more
Detected 205 connections from 35.215.179.8 last 10 minutes.; lone high-rate source (combined 410 requests in both windows); Logs: 35.215.179.8 - - [13/Oct/2026:09:03:58 +0200] \GET / HTTP/1.1\" 502 3281 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML
show less
|
DDoS Attack
Bad Web Bot
Web App Attack
|
|
๐ณ๐ด
tmiland
|
|
Detected 202 connections from 35.215.179.8 last 10 minutes.
|
DDoS Attack
Bad Web Bot
Web App Attack
|
|
๐บ๐ธ
infra-monitor
|
|
Automated ban via infra-monitor: suspicious-probe
|
Port Scan
|
|
๐จ๐ณ
WMK965
|
|
Malicious requests
IP: 35.215.179.8
Time: 13/Oct/2026:12:01:11 +0800
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Activities:
"GET /.git/config HTTP/1.1" 444 0 ...
show more
Malicious requests
IP: 35.215.179.8
Time: 13/Oct/2026:12:01:11 +0800
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Activities:
"GET /.git/config HTTP/1.1" 444 0 "-"
"GET /.env HTTP/1.1" 444 0 "-"
"GET /.env.local HTTP/1.1" 444 0 "-"
"GET /.env.production HTTP/1.1" 444 0 "-"
"GET /.env.staging HTTP/1.1" 444 0 "-"
"GET /.env.development HTTP/1.1" 444 0 "-"
"GET /.env.test HTTP/1.1" 444 0 "-"
"GET /.env.remote HTTP/1.1" 444 0 "-"
show less
|
Bad Web Bot
Web App Attack
|
|
๐ณ๐ฑ
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
๐ณ๐ฑ
thedreamer.nl
|
|
35.215.179.8 - - [13/Oct/2026:04:50:10 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "HK" "Hong Kong" "22.28420" "114.17590"
35.215 ...
show more
35.215.179.8 - - [13/Oct/2026:04:50:10 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "HK" "Hong Kong" "22.28420" "114.17590"
35.215.179.8 - - [13/Oct/2026:04:50:12 +0200] "GET /.env HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "HK" "Hong Kong" "22.28420" "114.17590"
35.215.179.8 - - [13/Oct/2026:04:50:12 +0200] "GET /.env.local HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "HK" "Hong Kong" "22.28420" "114.17590"
35.215.179.8 - - [13/Oct/2026:04:50:13 +0200] "GET /.env.production HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "HK" "Hong Kong" "22.28420" "114.17590"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ฆ๐น
SchiWaGoA
|
|
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
|
Web App Attack
Bad Web Bot
|
|
๐บ๐ธ
Rocky Mountain Bioengineering Symposium
|
|
35.215.179.8 - - [12/Oct/2026:19:25:23 -0600] "GET /.git/config HTTP/1.1" 300 4478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
|
Web App Attack
|
|
Anonymous
|
|
suspicious request in access.log
|
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|