๐จ๐ฑ
Fernando Soto
2026-10-03 03:05:20
(2 days ago)
WAF propio vps1 (CL): sensMASx190 score 32 en 1h. sondeo rutas sensibles.
Web App Attack
๐บ๐ธ
robotstxt
2026-10-02 11:32:38
(3 days ago)
34.75.64.70 - - [02/Oct/2026:11:32:34 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34. ...
show more
34.75.64.70 - - [02/Oct/2026:11:32:34 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.75.64.70"
34.75.64.70 - - [02/Oct/2026:11:32:34 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.75.64.70"
34.75.64.70 - - [02/Oct/2026:11:32:34 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.75.64.70"
34.75.64.70 - - [02/Oct/2026:11:32:34 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.75.64.70"
34.75.64.70 - - [02/Oct/2026:11:32:34 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.75.64.70"
...
show less
Web Spam
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 11:28:32
(3 days ago)
(mod_security) mod_security (id:210580) triggered by 34.75.64.70 (70.64.75.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210580) triggered by 34.75.64.70 (70.64.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 07:28:30.605473 2026] [security2:error] [pid 19264:tid 19264] [client 34.75.64.70:34024] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:apis. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||sipco.cl|F|2"] [data "Matched Data: proc/self/environ found within ARGS:apis: ../../../../../../proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "sipco.cl"] [uri "/api/console/api_server"] [unique_id "ar-VXr_waOpBpMsdIH7mmAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฑ
Denis Chavez
2026-10-02 11:14:38
(3 days ago)
Fail2Ban detected malicious activity on Nginx
Brute-Force
SSH
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 10:31:31
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.75.64.70 (70.64.75.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.64.70 (70.64.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 06:31:24.022764 2026] [security2:error] [pid 12705:tid 12705] [client 34.75.64.70:33558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.fedeoliva.cl"] [uri "/.env.php.bak"] [unique_id "ar-H_J9V8bS43XboiIolEgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฑ
ifiguero
2026-10-02 10:12:12
(3 days ago)
Web Attack (\x00\x00\x00\x00\x00). 7d ban
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-10-02 08:58:18
(3 days ago)
(modsec_attack) srv103 ModSecurity attack 34.75.64.70 (US/United States/70.64.75.34.bc.googleusercon ...
show more
(modsec_attack) srv103 ModSecurity attack 34.75.64.70 (US/United States/70.64.75.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐บ๐ธ
robotstxt
2026-10-02 06:32:51
(3 days ago)
34.75.64.70 - - [02/Oct/2026:06:32:46 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/env ...
show more
34.75.64.70 - - [02/Oct/2026:06:32:46 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.75.64.70"
34.75.64.70 - - [02/Oct/2026:06:32:46 +0000] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.75.64.70"
34.75.64.70 - - [02/Oct/2026:06:32:47 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.75.64.70"
34.75.64.70 - - [02/Oct/2026:06:32:47 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.75.64.70"
34.75.64.70 - - [02/Oct/2026:06:32:47 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.75.64.70"
...
show less
Web Spam
Web App Attack
๐ซ๐ฎ
etasoft
2026-10-02 06:06:19
(3 days ago)
Auto-blocked by WP Security AI: Rate limit: 3 violaciones
Bad Web Bot
๐จ๐ฑ
Fernando Soto
2026-10-02 05:45:02
(3 days ago)
WAF propio vps1 (CL): 404x54,sensx167 score 22 en 1h. sondeo rutas sensibles, barrido 404.
Port Scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 05:30:27
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 34.75.64.70 (70.64.75.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.75.64.70 (70.64.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 01:30:22.055336 2026] [security2:error] [pid 27945:tid 27945] [client 34.75.64.70:39590] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.notariaarauco.cl|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.notariaarauco.cl"] [uri "/config.php.bak"] [unique_id "ar9BbleD9wY4ARp5kXSNuAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-02 05:00:16
(3 days ago)
Web attack/malicious scanning detected
Web App Attack