🇺🇸
chrisj
2026-09-21 05:56:36
(2 days ago)
[Mon Sep 21 05:56:35.390615 2026] [proxy_fcgi:error] [pid 107433:tid 107489] [remote 136.108.94.53:3 ...
show more
[Mon Sep 21 05:56:35.390615 2026] [proxy_fcgi:error] [pid 107433:tid 107489] [remote 136.108.94.53:36284] AH01071: Got error 'Primary script unknown'
[Mon Sep 21 05:56:35.523899 2026] [proxy_fcgi:error] [pid 107433:tid 107490] [remote 136.108.94.53:36284] AH01071: Got error 'Primary script unknown'
[Mon Sep 21 05:56:35.570963 2026] [proxy_fcgi:error] [pid 107433:tid 107494] [remote 136.108.94.53:36284] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-09-21 05:36:40
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 01:36:35.126109 2026] [security2:error] [pid 19804:tid 19804] [client 136.108.94.53:43448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.dentsville398.org"] [uri "/lib/.env"] [unique_id "arDCY4BT9MYR1BLWnowBnwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 05:13:50
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 01:13:46.094830 2026] [security2:error] [pid 24039:tid 24039] [client 136.108.94.53:50268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.oruguitas.org"] [uri "/@fs/app/.env"] [unique_id "arC9Cj3g6W1oM4YxwkJtqgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 04:42:20
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 00:42:13.721173 2026] [security2:error] [pid 23942:tid 23942] [client 136.108.94.53:36714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.boyt.org"] [uri "/.git/config"] [unique_id "arC1pf73cV0WB8SzU05s-gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-09-21 04:24:26
(2 days ago)
[Sun Sep 20 22:24:25.092667 2026] [authz_core:error] [pid 766610:tid 140604198839872] [client 136.10 ...
show more
[Sun Sep 20 22:24:25.092667 2026] [authz_core:error] [pid 766610:tid 140604198839872] [client 136.108.94.53:56122] AH01630: client denied by server configuration: /var/www/horde/.env.production
[Sun Sep 20 22:24:25.159741 2026] [authz_core:error] [pid 766610:tid 140604198839872] [client 136.108.94.53:56122] AH01630: client denied by server configuration: /var/www/horde/.env.local
[Sun Sep 20 22:24:26.413961 2026] [authz_core:error] [pid 766610:tid 140604442228288] [client 136.108.94.53:56122] AH01630: client denied by server configuration: /var/www/horde/wp-json
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-21 04:06:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 00:06:33.284215 2026] [security2:error] [pid 5465:tid 5465] [client 136.108.94.53:48910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.brauerfamily.org"] [uri "/lib/.env"] [unique_id "arCtSVT5ZAde4OYDr8DYIwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 03:30:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 23:30:05.111663 2026] [security2:error] [pid 24920:tid 24920] [client 136.108.94.53:46710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rochesterhistorical.org"] [uri "/backend/.env"] [unique_id "arCkvfj6hnB4VHR_SLg9RQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 02:52:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 22:52:44.323689 2026] [security2:error] [pid 13803:tid 13803] [client 136.108.94.53:42520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sigrc.org"] [uri "/.env.example"] [unique_id "arCb_Cuc1okY0cf5trFYAQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 02:36:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 22:36:41.650972 2026] [security2:error] [pid 3650439:tid 3650439] [client 136.108.94.53:47986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.killarneypool.org"] [uri "/api/.env"] [unique_id "arCYOShSu2uzsS8xoxLv3wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 01:16:19
(2 days ago)
LogGuard auto-report | score=95 | flags=flood | reasons=[+35] burst_10s_hard: 198 req in 10s (thresh ...
show more
LogGuard auto-report | score=95 | flags=flood | reasons=[+35] burst_10s_hard: 198 req in 10s (threshold 100); [+10] error_ratio_suspicious: 79% error rate in 60s (157/198); [+25] path_diversity_severe: 174 unique paths in 60s (threshold 50); [+25] probe_paths: Hit 94 known probe paths: /.aws/config, /.docker/config.json, /.env, /.env.backup, /.env.bak
show less
DDoS Attack
🇺🇸
nyt
2026-09-21 01:15:27
(2 days ago)
Sensitive File Probe
Web App Attack
🇺🇸
dot.mg
2026-09-21 00:33:02
(2 days ago)
Bad behaviour
Web Spam
🇺🇸
TPI-Abuse
2026-09-21 00:12:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 20:12:12.587721 2026] [security2:error] [pid 15223:tid 15241] [client 136.108.94.53:37658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.geekmd.org"] [uri "/auth/.env"] [unique_id "arB2XJ16dRf0xsVxTmQcFAAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 23:28:59
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:28:55.759138 2026] [security2:error] [pid 4689:tid 4689] [client 136.108.94.53:40604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thrudheim.org"] [uri "/.env_sample"] [unique_id "arBsNxDpP7760HKYxVzuAwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 22:52:27
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.94.53 (53.94.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 18:52:23.764604 2026] [security2:error] [pid 14206:tid 14297] [client 136.108.94.53:35010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.atdotorg.org"] [uri "/.env"] [unique_id "arBjp1M7tXT2LoZ3Yl733QAAAcc"]
show less
Brute-Force
Bad Web Bot
Web App Attack