144.172.109.237
blockedRelentlessRegular
Case file
First seen on 2026-09-29T06:53:06Z, most recently active on 2026-10-03T02:31:51Z.
Recorded 42 attack-shaped requests across 5 separate days.
Its traffic probed for an exposed .git directory to download the site's source history and config; it also requested the .git directory itself, hoping it is exposed and browsable.
Seen from 2 of our sensors: edge, nl4-web.
Scored into the "Relentless" level, carrying the badge Regular.
Routed via AS14956 (RouterHosting LLC), an ASN we classify as hosting.
Blocked on every one of our hosts and at our edge since 2026-10-04T15:29:58Z, through 2027-10-04T15:29:58Z.
Enrichment
| rDNS | 237.109.172.144.static.cloudzy.com |
|---|---|
| ASN | AS14956 — RouterHosting LLC |
| ASN type | hosting |
| Country | United States (US) |
| Flags | none observed |
Timeline
- 2026-09-296
- 2026-09-302
- 2026-10-0129
- 2026-10-023
- 2026-10-032
Evidence (newest first, up to 50)
| Time (UTC) | Vantage | Site | Class | Status | Evidence |
|---|---|---|---|---|---|
| 2026-10-03T02:31:51Z | nl4-web | bursukov.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 05:31:51.919337 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://bursukov.com/.git/config |
| 2026-10-03T02:31:51Z | nl4-web | bursukov.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [03/Oct/2026:05:31:51 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://bursukov.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T13:48:10Z | edge | victorantonov.com | probed for an exposed .git directory to download the site's source history and config | {"ts":"2026-10-01T13:48:10Z","ip":"144.172.109.237","zone":"victorantonov.com","host":"victorantonov.com","path":"/.git/config","method":"GET","query":"","ua":"Mozilla/5.0 (X11; Linux x86_64)","action":"block","source":"firewallCustom","rule_id":"<redacted>","country":"US","asn_org":"RouterHosting L… | |
| 2026-09-29T10:45:56Z | edge | victorantonov.com | probed for an exposed .git directory to download the site's source history and config | {"ts":"2026-09-29T10:45:56Z","ip":"144.172.109.237","zone":"victorantonov.com","host":"victorantonov.com","path":"/.git/config","method":"GET","query":"","ua":"Mozilla/5.0 (X11; Linux x86_64)","action":"block","source":"firewallCustom","rule_id":"<redacted>","country":"US","asn_org":"RouterHosting L… | |
| 2026-09-29T06:53:06Z | edge | victorantonov.com | probed for an exposed .git directory to download the site's source history and config | {"ts":"2026-09-29T06:53:06Z","ip":"144.172.109.237","zone":"victorantonov.com","host":"victorantonov.com","path":"/.git/config","method":"GET","query":"","ua":"Mozilla/5.0 (X11; Linux x86_64)","action":"block","source":"firewallCustom","rule_id":"<redacted>","country":"US","asn_org":"RouterHosting L… | |
| 2026-10-01T16:09:12Z | nl4-web | svestnik.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 19:09:12.871838 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.svestnik.com/.git/config |
| 2026-09-29T10:27:50Z | nl4-web | svestnik.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 13:27:50.606852 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.svestnik.com/.git/config |
| 2026-10-01T13:09:26Z | nl4-web | stefanpetkov.day | matched a catalogue rule | 403 | [Thu Oct 01 16:09:26.775803 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://stefanpetkov.day/.git/config |
| 2026-10-01T12:49:49Z | nl4-web | servmoto.com | matched a catalogue rule | 403 | [Thu Oct 01 15:49:49.343656 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://servmoto.com/.git/config |
| 2026-10-01T16:01:16Z | nl4-web | servbg.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 19:01:16.076163 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.servbg.com/.git/config |
| 2026-10-01T12:49:17Z | nl4-web | servbg.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 15:49:17.607072 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://servbg.com/.git/config |
| 2026-10-01T15:59:55Z | nl4-web | schetio.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 18:59:55.916259 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.schetio.com/.git/config |
| 2026-10-01T12:45:52Z | nl4-web | schetio.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 15:45:52.412574 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://schetio.com/.git/config |
| 2026-10-01T15:42:53Z | nl4-web | odor-ex.com | matched a catalogue rule | 403 | [Thu Oct 01 18:42:53.809470 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.odor-ex.com/.git/config |
| 2026-10-01T11:36:37Z | nl4-web | odor-ex.com | matched a catalogue rule | 403 | [Thu Oct 01 14:36:37.551132 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://odor-ex.com/.git/config |
| 2026-10-01T11:35:56Z | nl4-web | obdebug.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 14:35:56.766885 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://obdebug.com/.git/config |
| 2026-10-01T14:58:17Z | nl4-web | dubstard.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 17:58:17.360470 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.dubstard.com/.git/config |
| 2026-10-01T09:01:25Z | nl4-web | dubstard.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 12:01:25.069492 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://dubstard.com/.git/config |
| 2026-09-29T08:36:03Z | nl4-web | dubstard.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 11:36:03.373254 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.dubstard.com/.git/config |
| 2026-10-01T14:40:46Z | nl4-web | bgpoet.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 17:40:46.107176 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.bgpoet.com/.git/config |
| 2026-09-30T06:14:17Z | nl4-web | bgpoet.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Wed Sep 30 09:14:17.618375 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://bgpoet.com/.git/config |
| 2026-10-02T05:07:52Z | nl4-web | amosix.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Fri Oct 02 08:07:52.836302 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://amosdb.com/.git/config |
| 2026-10-01T14:26:52Z | nl4-web | 4emx.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 17:26:52.904553 2026] [authz_core:error] AH01630: client denied by server configuration: <path> |
| 2026-10-01T06:19:52Z | nl4-web | 4emx.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 09:19:52.250431 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://4emx.com/.git/config |
| 2026-10-01T16:09:12Z | nl4-web | svestnik.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:19:09:12 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.svestnik.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-09-29T10:27:50Z | nl4-web | svestnik.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [29/Sep/2026:13:27:50 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.svestnik.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T13:09:26Z | nl4-web | stefanpetkov.day | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:16:09:26 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://stefanpetkov.day/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T12:49:49Z | nl4-web | servmoto.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:15:49:49 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://servmoto.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T16:01:16Z | nl4-web | servbg.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:19:01:16 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.servbg.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T12:49:17Z | nl4-web | servbg.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:15:49:17 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://servbg.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T15:59:55Z | nl4-web | schetio.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:18:59:55 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.schetio.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T12:45:52Z | nl4-web | schetio.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:15:45:52 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://schetio.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T15:42:53Z | nl4-web | odor-ex.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:18:42:53 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.odor-ex.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T11:36:37Z | nl4-web | odor-ex.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:14:36:37 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://odor-ex.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T11:35:56Z | nl4-web | obdebug.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:14:35:56 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://obdebug.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-02T08:59:05Z | nl4-web | motoristi.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [02/Oct/2026:11:59:05 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://motoristi.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T15:37:03Z | nl4-web | motoristi.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:18:37:03 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.motoristi.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T11:14:38Z | nl4-web | motoristi.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:14:14:38 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://motoristi.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T14:58:17Z | nl4-web | dubstard.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:17:58:17 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.dubstard.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T09:01:25Z | nl4-web | dubstard.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:12:01:25 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://dubstard.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-09-29T08:36:03Z | nl4-web | dubstard.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [29/Sep/2026:11:36:03 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.dubstard.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T14:40:46Z | nl4-web | bgpoet.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:17:40:46 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.bgpoet.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-09-30T06:14:17Z | nl4-web | bgpoet.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [30/Sep/2026:09:14:17 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://bgpoet.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-02T05:07:52Z | nl4-web | amosix.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [02/Oct/2026:08:07:52 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://amosdb.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T14:26:52Z | nl4-web | 4emx.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:17:26:52 +0300] "GET /.git/config HTTP/1.1" 403 239 "-" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-01T06:19:52Z | nl4-web | 4emx.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.109.237 - - [01/Oct/2026:09:19:52 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://4emx.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
Report history
No abuse report sent for this address yet.
Not currently correlated with any campaign.
Dispute or removal: [email protected] — reference 144.172.109.237 (mailbox goes live with phase 3). See /threats/about for the method and the 7-day review window.
card.svg (used as this page's og:image)
