π¬π§
thetomtaylor.co.uk
2026-10-14 06:08:01
(21 hours ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02]
Hacking
SQL Injection
Web App Attack
π¬π§
openstrike.co.uk
2026-10-14 05:14:28
(22 hours ago)
226 attacks on password/key grabbing URLs, PHP URLs, config grabbing URLs (type 2), env grabbing URL ...
show more
226 attacks on password/key grabbing URLs, PHP URLs, config grabbing URLs (type 2), env grabbing URLs, directory traversals, VC URLs, env grabbing URLs (type 2), shell probes:
GET /Dockerrun.aws.json HTTP/1.1
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /config/settings.local.yml HTTP/1.1
GET /supabase/.env HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /.git/config HTTP/1.1
GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
show less
Hacking
Web App Attack
π¬π§
thetomtaylor.co.uk
2026-10-14 04:07:02
(23 hours ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [wa01,wa02]
Hacking
SQL Injection
Web App Attack
πΊπΈ
CDO
2026-10-14 03:18:02
(1 day ago)
URL Injection attempt detected. Automated web attack.
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-10-14 03:03:48
(1 day ago)
35.203.91.82 - - [14/Oct/2026:05:03:47 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 265 "-" ...
show more
35.203.91.82 - - [14/Oct/2026:05:03:47 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.203.91.82 - - [14/Oct/2026:05:03:47 +0200] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.203.91.82 - - [14/Oct/2026:05:03:47 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.203.91.82 - - [14/Oct/2026:05:03:48 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/2.0" 400 318 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
35.203.91.82 - - [14/Oct/2026:05:03:48 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Brute-Force
SSH
Anonymous
2026-10-14 02:31:48
(1 day ago)
35.203.91.82 - - [14/Oct/2026:04:31:47 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 A ...
show more
35.203.91.82 - - [14/Oct/2026:04:31:47 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.203.91.82 - - [14/Oct/2026:04:31:47 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.203.91.82 - - [14/Oct/2026:04:31:47 +0200] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.203.91.82 - - [14/Oct/2026:04:31:47 +0200] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
35.203.91.82 - - [14/Oct/2026:04:31:47 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Brute-Force
SSH
Anonymous
2026-10-14 01:05:57
(1 day ago)
35.203.91.82 - - [14/Oct/2026:03:05:57 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 A ...
show more
35.203.91.82 - - [14/Oct/2026:03:05:57 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
35.203.91.82 - - [14/Oct/2026:03:05:57 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.203.91.82 - - [14/Oct/2026:03:05:57 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.203.91.82 - - [14/Oct/2026:03:05:57 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.203.91.82 - - [14/Oct/2026:03:05:57 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome
...
show less
Brute-Force
SSH
π©πͺ
lolyay
2026-10-14 00:18:12
(1 day ago)
35.203.91.82 - - [14/Oct/2026:00:18:10 +0000] "GET /uploads../.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 ...
show more
35.203.91.82 - - [14/Oct/2026:00:18:10 +0000] "GET /uploads../.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.203.91.82 - - [14/Oct/2026:00:18:10 +0000] "GET /img../.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
Bad Web Bot
Anonymous
2026-10-13 22:58:39
(1 day ago)
35.203.91.82 - - [14/Oct/2026:00:58:37 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "DuckAssistBot/1 ...
show more
35.203.91.82 - - [14/Oct/2026:00:58:37 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
35.203.91.82 - - [14/Oct/2026:00:58:37 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.203.91.82 - - [14/Oct/2026:00:58:37 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.203.91.82 - - [14/Oct/2026:00:58:37 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.203.91.82 - - [14/Oct/2026:00:58:37 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
...
show less
Brute-Force
SSH
Anonymous
2026-10-13 21:15:20
(1 day ago)
35.203.91.82 - - [13/Oct/2026:23:15:19 +0200] "GET /%2Fadmin HTTP/2.0" 404 265 "-" "Mozilla/5.0 Appl ...
show more
35.203.91.82 - - [13/Oct/2026:23:15:19 +0200] "GET /%2Fadmin HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.203.91.82 - - [13/Oct/2026:23:15:19 +0200] "GET /%2Fdashboard HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.203.91.82 - - [13/Oct/2026:23:15:19 +0200] "GET /%2Fapi/config HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.203.91.82 - - [13/Oct/2026:23:15:19 +0200] "GET /%2Fsettings HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.203.91.82 - - [13/Oct/2026:23:15:19 +0200] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (
...
show less
Brute-Force
SSH
π³π±
middelkoopcc
2026-10-13 20:58:11
(1 day ago)
2026-10-13 22:56:35 AH10244: invalid URI path (/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/enviro ...
show more
2026-10-13 22:56:35 AH10244: invalid URI path (/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ) && 2026-10-13 22:56:35 AH10244: invalid URI path (/%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ) && 2026-10-13 22:56:35 AH10244: invalid URI path (/%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env) && 237 more within 20 minutes
show less
Web App Attack
Anonymous
2026-10-13 20:18:08
(1 day ago)
35.203.91.82 - - [13/Oct/2026:22:18:08 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 ...
show more
35.203.91.82 - - [13/Oct/2026:22:18:08 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.203.91.82 - - [13/Oct/2026:22:18:08 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.203.91.82 - - [13/Oct/2026:22:18:08 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.203.91.82 - - [13/Oct/2026:22:18:08 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
35.203.91.82 - - [13/Oct/2026:22:18:08 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
Brute-Force
SSH
Anonymous
2026-10-13 18:26:59
(1 day ago)
35.203.91.82 - - [13/Oct/2026:20:26:58 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 ...
show more
35.203.91.82 - - [13/Oct/2026:20:26:58 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
35.203.91.82 - - [13/Oct/2026:20:26:58 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.203.91.82 - - [13/Oct/2026:20:26:58 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.203.91.82 - - [13/Oct/2026:20:26:58 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.203.91.82 - - [13/Oct/2026:20:26:58 +0200] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/
...
show less
Brute-Force
SSH
π©πͺ
FD-IX
2026-10-13 18:09:04
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
π«π·
conseilgouz
2026-10-13 17:51:05
(1 day ago)
mae-10 : Block HTTP using HEAD/TRACE/DELETE/TRACK methods=>/inngest(DELETE)
Hacking