๐ซ๐ท
Baking333
2026-10-20 10:13:20
(1 day ago)
[redacted] 35.199.16.239 - - [20/Oct/2026:11:13:19 +0100] "GET /.aws/credentials HTTP/1.1" 200 169 0 ...
show more
[redacted] 35.199.16.239 - - [20/Oct/2026:11:13:19 +0100] "GET /.aws/credentials HTTP/1.1" 200 169 0/11254 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@[redacted])" 443 [redacted] 35.199.16.239 - - [20/Oct/2026:11:13:19 +0100] "GET /.[redacted] HTTP/1.1" 200 5421 0/13193 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://[redacted]/perplexitybot)" 443
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-20 07:48:53
(1 day ago)
[redacted] 35.199.16.239 - - [20/Oct/2026:08:48:51 +0100] "GET /.htpasswd HTTP/1.1" 403 5718 0/1217 ...
show more
[redacted] 35.199.16.239 - - [20/Oct/2026:08:48:51 +0100] "GET /.htpasswd HTTP/1.1" 403 5718 0/1217 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://[redacted]/support/amazonbot)" 443 [redacted] 35.199.16.239 - - [20/Oct/2026:08:48:51 +0100] "GET /[redacted] HTTP/1.1" 200 5421 0/11750 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://[redacted]/)" 443
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-20 03:45:58
(1 day ago)
[redacted] 35.199.16.239 - - [20/Oct/2026:04:45:57 +0100] "GET /.env?.svg?.wasm?init HTTP/1.1" 200 1 ...
show more
[redacted] 35.199.16.239 - - [20/Oct/2026:04:45:57 +0100] "GET /.env?.svg?.wasm?init HTTP/1.1" 200 169 0/11974 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://[redacted]/docs/sharing/webmasters/crawler)" 443 [redacted] 35.199.16.239 - - [20/Oct/2026:04:45:57 +0100] "GET /.env::$DATA?raw HTTP/1.1" 200 169 0/12441 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://[redacted]/bot)" 443
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-20 01:37:29
(1 day ago)
[redacted] 35.199.16.239 - - [20/Oct/2026:02:37:28 +0100] "GET /docker/.env HTTP/1.1" 200 5423 0/108 ...
show more
[redacted] 35.199.16.239 - - [20/Oct/2026:02:37:28 +0100] "GET /docker/.env HTTP/1.1" 200 5423 0/10860 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://[redacted]/[redacted])" 443 [redacted] 35.199.16.239 - - [20/Oct/2026:02:37:28 +0100] "GET /.git/config HTTP/1.1" 200 169 0/11137 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://[redacted]/)" 443 [redacted] 35.199.16.239 - - [20/Oct/2026:02:37:28 +0100] "GET /frontend/.env HTTP/1.1" 200 169 0/15289 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://[redacted]/)" 443 [redacted] 35.199.16.239 - - [20/Oct/2026:02:37:28 +0100] "GET /.aws/credentials HTTP/1.1" 200 169 0/10899 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@[redacted])" 443 [redacted] 35.199.16.239 - - [20/Oct/2026:02:37:28 +0100] "GET /build/.env HTTP/1.1" 200 169 0/11177 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://[redacted]/search/)" 443
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Philister11
2026-10-20 01:07:54
(1 day ago)
CrowdSec: crowdsecurity/http-crawl-non_statics (US/AS396982)
Bad Web Bot
Web App Attack
๐ฉ๐ช
Philister11
2026-10-20 00:43:43
(2 days ago)
CrowdSec: crowdsecurity/grafana-cve-2021-43798 (US/AS396982)
Web App Attack
Hacking
๐ฉ๐ช
Philister11
2026-10-20 00:07:18
(2 days ago)
CrowdSec: crowdsecurity/http-sensitive-files (US/AS396982)
Web App Attack
Hacking
๐ซ๐ท
Baking333
2026-10-19 23:01:29
(2 days ago)
[redacted] 35.199.16.239 - - [19/Oct/2026:22:36:37 +0100] "GET /docker/.env HTTP/1.1" 200 169 0/9103 ...
show more
[redacted] 35.199.16.239 - - [19/Oct/2026:22:36:37 +0100] "GET /docker/.env HTTP/1.1" 200 169 0/9103 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://[redacted]/search/)" 443 [redacted] 35.199.16.239 - - [19/Oct/2026:22:36:37 +0100] "GET /src/.env HTTP/1.1" 200 169 0/8857 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://[redacted]/perplexitybot)" 443
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-19 21:36:38
(2 days ago)
[redacted] 35.199.16.239 - - [19/Oct/2026:22:36:37 +0100] "GET /web/.env HTTP/1.1" 200 5423 0/9024 " ...
show more
[redacted] 35.199.16.239 - - [19/Oct/2026:22:36:37 +0100] "GET /web/.env HTTP/1.1" 200 5423 0/9024 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://[redacted]/bot" 443 [redacted] 35.199.16.239 - - [19/Oct/2026:22:36:37 +0100] "GET /server/.env HTTP/1.1" 200 5423 0/8352 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://[redacted]/bot)" 443
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-19 19:08:11
(2 days ago)
[redacted] 35.199.16.239 - - [19/Oct/2026:20:08:09 +0100] "GET /[redacted] HTTP/1.1" 200 169 0/12497 ...
show more
[redacted] 35.199.16.239 - - [19/Oct/2026:20:08:09 +0100] "GET /[redacted] HTTP/1.1" 200 169 0/12497 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://[redacted]/perplexitybot)" 443 [redacted] 35.199.16.239 - - [19/Oct/2026:20:08:09 +0100] "GET /[redacted] HTTP/1.1" 200 169 0/11391 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://[redacted]/search/)" 443
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-19 16:38:19
(2 days ago)
[redacted] 35.199.16.239 - - [19/Oct/2026:17:38:18 +0100] "GET /api/attachments/img/avatar/..%2F..%2 ...
show more
[redacted] 35.199.16.239 - - [19/Oct/2026:17:38:18 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%[redacted] HTTP/1.1" 404 463 0/114 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://[redacted]/perplexitybot)" 443 [redacted] 35.199.16.239 - - [19/Oct/2026:17:38:18 +0100] "GET /api/..;/.env HTTP/1.1" 200 5423 0/10305 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://[redacted]/)" 443
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-19 13:35:04
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ซ๐ท
Baking333
2026-10-19 13:23:39
(2 days ago)
[redacted] 35.199.16.239 - - [19/Oct/2026:14:23:38 +0100] "GET /@fs/../.env?raw?? HTTP/1.1" 200 5423 ...
show more
[redacted] 35.199.16.239 - - [19/Oct/2026:14:23:38 +0100] "GET /@fs/../.env?raw?? HTTP/1.1" 200 5423 0/9652 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://[redacted]/search/)" 443 [redacted] 35.199.16.239 - - [19/Oct/2026:14:23:38 +0100] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/1.1" 200 169 0/10995 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://[redacted]/)" 443 [redacted] 35.199.16.239 - - [19/Oct/2026:14:23:38 +0100] "GET /@fs/src/.env?raw?? HTTP/1.1" 200 169 0/10560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://[redacted]/go/applebot)" 443
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-19 12:06:23
(2 days ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-19 11:58:32
(2 days ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.199.16.239 - - \[19/Oct/2026:13:58:20 +0200\] "GET /@fs/.env\?raw\&url\?\? HTTP/2.0" 500 786 "-" "Mozilla/5.0 \(compatible\; Meta-ExternalAgent/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)"
...
show less
Bad Web Bot
Web App Attack