๐ธ๐ช
vaia.cloud
2026-10-13 15:00:06
(5 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ซ๐ท
physaphae
2026-10-13 11:49:32
(5 days ago)
[13/Oct/2026:11:49:30 +0000] - 403 403 - GET https syno.physaphae.fr "/.git/config" [Client 35.215.1 ...
show more
[13/Oct/2026:11:49:30 +0000] - 403 403 - GET https syno.physaphae.fr "/.git/config" [Client 35.215.179.8] [Length 8460] [Gzip -] [Sent-to 192.168.1.222] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[13/Oct/2026:11:49:31 +0000] - 403 403 - GET https syno.physaphae.fr "/.env" [Client 35.215.179.8] [Length 8460] [Gzip -] [Sent-to 192.168.1.222] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[13/Oct/2026:11:49:31 +0000] - 403 403 - GET https syno.physaphae.fr "/.env.local" [Client 35.215.179.8] [Length 8460] [Gzip -] [Sent-to 192.168.1.222] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[13/Oct/2026:11:49:31 +0000] - 403 403 - GET https syno.physaphae.fr "/.env.production" [Client 35.215.179.8] [Length 8460] [Gzip -] [Sent-to 192.168.1.222] "Mozilla/5.0 (Macint
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-13 08:34:50
(5 days ago)
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.215.179.8 - - [13/Oct/2026:10:34:42 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
EmilGH
2026-10-13 07:33:33
(6 days ago)
35.215.179.8 - - [13/Oct/2026:03:33:24 -0400] "GET /.git/config HTTP/1.1" 403 530 "-" "Mozilla/5.0 ( ...
show more
35.215.179.8 - - [13/Oct/2026:03:33:24 -0400] "GET /.git/config HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:24 -0400] "GET /.env HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:25 -0400] "GET /.env.local HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:25 -0400] "GET /.env.production HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:25 -0400] "GET /.env.staging HTTP/1.1" 403 530 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.215.179.8 - - [13/Oct/2026:03:33:25 -0400] "GET /.
...
show less
Bad Web Bot
Web App Attack
๐จ๐ญ
leo1305
2026-10-13 07:23:52
(6 days ago)
CrowdSec detection | scenario: http-sensitive-files
Web App Attack
Exploited Host
๐ณ๐ด
tmiland
2026-10-13 07:05:50
(6 days ago)
Detected 205 connections from 35.215.179.8 last 10 minutes.; lone high-rate source (combined 410 req ...
show more
Detected 205 connections from 35.215.179.8 last 10 minutes.; lone high-rate source (combined 410 requests in both windows); Logs: 35.215.179.8 - - [13/Oct/2026:09:03:58 +0200] \GET / HTTP/1.1\" 502 3281 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML
show less
DDoS Attack
Bad Web Bot
Web App Attack
๐ณ๐ด
tmiland
2026-10-13 07:04:47
(6 days ago)
Detected 202 connections from 35.215.179.8 last 10 minutes.
DDoS Attack
Bad Web Bot
Web App Attack
๐บ๐ธ
infra-monitor
2026-10-13 05:00:05
(6 days ago)
Automated ban via infra-monitor: suspicious-probe
Port Scan
๐จ๐ณ
WMK965
2026-10-13 04:01:19
(6 days ago)
Malicious requests
IP: 35.215.179.8
Time: 13/Oct/2026:12:01:11 +0800
User-Agent: Mozilla/5.0 (Macin ...
show more
Malicious requests
IP: 35.215.179.8
Time: 13/Oct/2026:12:01:11 +0800
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Activities:
"GET /.git/config HTTP/1.1" 444 0 "-"
"GET /.env HTTP/1.1" 444 0 "-"
"GET /.env.local HTTP/1.1" 444 0 "-"
"GET /.env.production HTTP/1.1" 444 0 "-"
"GET /.env.staging HTTP/1.1" 444 0 "-"
"GET /.env.development HTTP/1.1" 444 0 "-"
"GET /.env.test HTTP/1.1" 444 0 "-"
"GET /.env.remote HTTP/1.1" 444 0 "-"
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-13 03:03:23
(6 days ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
thedreamer.nl
2026-10-13 02:52:42
(6 days ago)
35.215.179.8 - - [13/Oct/2026:04:50:10 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Ma ...
show more
35.215.179.8 - - [13/Oct/2026:04:50:10 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "HK" "Hong Kong" "22.28420" "114.17590"
35.215.179.8 - - [13/Oct/2026:04:50:12 +0200] "GET /.env HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "HK" "Hong Kong" "22.28420" "114.17590"
35.215.179.8 - - [13/Oct/2026:04:50:12 +0200] "GET /.env.local HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "HK" "Hong Kong" "22.28420" "114.17590"
35.215.179.8 - - [13/Oct/2026:04:50:13 +0200] "GET /.env.production HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "HK" "Hong Kong" "22.28420" "114.17590"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐น
SchiWaGoA
2026-10-13 02:34:06
(6 days ago)
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
Web App Attack
Bad Web Bot
๐บ๐ธ
Rocky Mountain Bioengineering Symposium
2026-10-13 01:25:23
(6 days ago)
35.215.179.8 - - [12/Oct/2026:19:25:23 -0600] "GET /.git/config HTTP/1.1" 300 4478 "-" "Mozilla/5.0 ...
show more
35.215.179.8 - - [12/Oct/2026:19:25:23 -0600] "GET /.git/config HTTP/1.1" 300 4478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-10-12 20:40:02
(6 days ago)
suspicious request in access.log
Web App Attack
Anonymous
2026-10-12 19:26:36
(6 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack