🇳🇿
Antinson
2026-09-02 12:12:22
(16 hours ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
2026-09-02 11:00:00
(18 hours ago)
Automated web attack from 35.201.251.103 against our web server.
26 malicious requests on 2026-09-02 ...
show more
Automated web attack from 35.201.251.103 against our web server.
26 malicious requests on 2026-09-02 (UTC), denied with HTTP 403.
Sample request: GET /.git/config
Probed for: .git repository files.
User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36".
rDNS 103.251.201.35.bc.googleusercontent.com; AS396982 GOOGLE-CLOUD-PLATFORM.
All timestamps are UTC.
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-02 10:28:03
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 06:27:56.930836 2026] [security2:error] [pid 27265:tid 27265] [client 35.201.251.103:29126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kfraser.com"] [uri "/.git/config"] [unique_id "apf6LAoQxQIXhPOeDZj_LwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
daveoctober
2026-09-02 10:21:42
(18 hours ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 10:02:02
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 06:01:57.723656 2026] [security2:error] [pid 22345:tid 22345] [client 35.201.251.103:40522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misscrankypants.com"] [uri "/.git/config"] [unique_id "apf0FaEbmheF9RUfHAQa9QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 09:16:10
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 05:16:03.744145 2026] [security2:error] [pid 18402:tid 18402] [client 35.201.251.103:36070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knoxbestos.com"] [uri "/.git/config"] [unique_id "apfpU0X-jMfp4k0ChT7MUAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 08:55:11
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 04:55:04.239506 2026] [security2:error] [pid 28687:tid 28687] [client 35.201.251.103:7526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kameleonquilt.com"] [uri "/.git/config"] [unique_id "apfkaB4W7rB9mCVCxT-8GAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-09-02 08:52:21
(20 hours ago)
Blocked by ConnMonitor
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 21:13:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 17:13:17.073253 2026] [security2:error] [pid 952833:tid 952869] [client 35.201.251.103:54398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spectresails.com"] [uri "/.git/config"] [unique_id "apc_7fhAogh2_Dt7qHfG5gAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 19:11:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 15:11:46.280336 2026] [security2:error] [pid 24934:tid 24934] [client 35.201.251.103:6296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "redweddingnapkins.com"] [uri "/.git/config"] [unique_id "apcjcmVxY4aO-ziMsCR4WQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 04:16:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:16:33.872699 2026] [security2:error] [pid 17836:tid 17836] [client 35.201.251.103:37564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calvarycavaliers.org"] [uri "/.git/config"] [unique_id "apZRoSESJ573-FeGG5dVlgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 03:15:55
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:15:51.870882 2026] [security2:error] [pid 20722:tid 20737] [client 35.201.251.103:56728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkdullit.com"] [uri "/.git/config"] [unique_id "apZDZ99VuYpUNlHgLq5rqAAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:46:59
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:46:53.982697 2026] [security2:error] [pid 4910:tid 4910] [client 35.201.251.103:64490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visanya.com"] [uri "/.git/config"] [unique_id "apYgfUxTMWq-qz6l_LSC3QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-08-31 23:08:07
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-31 18:50:55
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.251.103 (103.251.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 14:50:49.599183 2026] [security2:error] [pid 9298:tid 9425] [client 35.201.251.103:18842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vote4joegardner.com"] [uri "/.git/config"] [unique_id "apXNCVVj7m6ibjmHNbGSjwAAAck"]
show less
Brute-Force
Bad Web Bot
Web App Attack