๐ง๐ท
ICS Labs
2026-10-20 16:50:18
(2 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-20 UTC.
Brute-Force
Exploited Host
๐ฉ๐ช
webanyone
2026-10-20 05:47:20
(2 days ago)
Wordlist path sweep | method: GET | path: /1id5zg8smywykfyoprdu, /assets/manifest.json, /static/mani ...
show more
Wordlist path sweep | method: GET | path: /1id5zg8smywykfyoprdu, /assets/manifest.json, /static/manifest.json (+3 more) | ua: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/), Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36, Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
show less
Port Scan
Web App Attack
๐จ๐ฆ
Mediashaker
2026-10-20 05:47:01
(2 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.107.36.144 (DE/Ge ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.107.36.144 (DE/Germany/144.36.107.34.bc.googleusercontent.com)
show less
Bad Web Bot
๐ซ๐ท
Octopuce
2026-10-20 05:42:36
(2 days ago)
Aggressive web search of vulnerable pages: /media../.env /files../.env /static../.env /images../.env ...
show more
Aggressive web search of vulnerable pages: /media../.env /files../.env /static../.env /images../.env /js../.env ...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-10-20 05:21:28
(2 days ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 05:01:40
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.107.36.144 (144.36.107.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.36.144 (144.36.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 01:01:32.434385 2026] [security2:error] [pid 2169:tid 2169] [client 34.107.36.144:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.azdevco.com"] [uri "/img../.env"] [unique_id "atb1rA6IjJ_5LrbIVIWzAgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 04:28:12
(2 days ago)
Port Scan
๐ฉ๐ช
netman
2026-10-19 16:28:01
(3 days ago)
34.107.36.144 netmanagement.hk - [19/Oct/2026:16:27:57 +0000] "GET / HTTP/2.0" 200 257732 "-" "Mozil ...
show more
34.107.36.144 netmanagement.hk - [19/Oct/2026:16:27:57 +0000] "GET / HTTP/2.0" 200 257732 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.107.36.144 netmanagement.hk - [19/Oct/2026:16:27:57 +0000] "GET /assets../.env HTTP/2.0" 404 158 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.107.36.144 netmanagement.hk - [19/Oct/2026:16:27:57 +0000] "GET /server.key HTTP/2.0" 404 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.107.36.144 netmanagement.hk - [19/Oct/2026:16:27:57 +0000] "GET /.dockerenv HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.107.36.144 netmanagement.hk - [19/Oct/2026:16:27:57 +0000] "GET /files../.env HTTP/2.0" 404 158 "-" "CCBot/2.0 (https://comm
...
show less
DDoS Attack
Web App Attack
Anonymous
2026-10-19 13:37:20
(3 days ago)
34.107.36.144 - - [19/Oct/2026:21:37:19 +0800] "GET /asset-manifest.json HTTP/1.1" 404 196 "-" "Mozi ...
show more
34.107.36.144 - - [19/Oct/2026:21:37:19 +0800] "GET /asset-manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.107.36.144 - - [19/Oct/2026:21:37:20 +0800] "GET /manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.107.36.144 - - [19/Oct/2026:21:37:20 +0800] "GET /manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.107.36.144 - - [19/Oct/2026:21:37:20 +0800] "GET /webpack-stats.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.107.36.144 - - [19/Oct/2026:21:37:20 +0800] "GET /webpack-stats.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-19 13:20:04
(3 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
netman
2026-10-19 12:54:59
(3 days ago)
34.107.36.144 lfs.hk - [19/Oct/2026:12:54:47 +0000] "GET / HTTP/2.0" 200 15131 "-" "Mozilla/5.0 (Lin ...
show more
34.107.36.144 lfs.hk - [19/Oct/2026:12:54:47 +0000] "GET / HTTP/2.0" 200 15131 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
34.107.36.144 lfs.hk - [19/Oct/2026:12:54:47 +0000] "GET /robots.txt HTTP/2.0" 404 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.107.36.144 lfs.hk - [19/Oct/2026:12:54:48 +0000] "GET /assets/manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
34.107.36.144 lfs.hk - [19/Oct/2026:12:54:48 +0000] "GET /.npmrc HTTP/2.0" 404 158 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.107.36.144 lfs.hk - [19/Oct/2026:12:54:48 +0000] "GET /docker-compose.yaml HTTP/2.0" 404 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexit
...
show less
DDoS Attack
Web App Attack
๐ฌ๐ง
consul.to
2026-10-19 12:08:03
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-10-19 11:42:18
(3 days ago)
34.107.36.144 - - [19/Oct/2026:19:42:17 +0800] "GET /settings%2F.env HTTP/1.1" 404 196 "-" "Mozilla/ ...
show more
34.107.36.144 - - [19/Oct/2026:19:42:17 +0800] "GET /settings%2F.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-19 11:22:38
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-19 11:15:20
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.107.36.144 (144.36.107.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.36.144 (144.36.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 07:15:15.081232 2026] [security2:error] [pid 6294:tid 6294] [client 34.107.36.144:48870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.smart-tech.hk"] [uri "/files../.env"] [unique_id "atX7w3Ak5L0OQZ6m6zKvBAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack