144.172.97.202
blockedWantedRegular
Case file
First seen on 2026-09-27T05:42:49Z, most recently active on 2026-10-04T17:25:56Z.
Recorded 64 attack-shaped requests across 8 separate days.
Its traffic probed for an exposed .git directory to download the site's source history and config; it also requested the .git directory itself, hoping it is exposed and browsable; it also fuzzed a short, random filename looking for a forgotten script that responds.
Seen from 3 of our sensors: edge, nl4-web, s19-web.
Scored into the "Wanted" level, carrying the badge Regular.
Routed via AS14956 (RouterHosting LLC), an ASN we classify as hosting.
Blocked on every one of our hosts and at our edge since 2026-10-04T15:29:58Z, through 2027-10-04T15:29:58Z.
Enrichment
| rDNS | 202.97.172.144.static.cloudzy.com |
|---|---|
| ASN | AS14956 — RouterHosting LLC |
| ASN type | hosting |
| Country | United States (US) |
| Flags | none observed |
Timeline
- 2026-09-271
- 2026-09-281
- 2026-09-2914
- 2026-09-3013
- 2026-10-0110
- 2026-10-025
- 2026-10-034
- 2026-10-0416
Evidence (newest first, up to 50)
| Time (UTC) | Vantage | Site | Class | Status | Evidence |
|---|---|---|---|---|---|
| 2026-10-04T17:25:56Z | nl4-web | bursukov.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sun Oct 04 20:25:56.768315 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.bursukov.com/.git/config |
| 2026-10-04T17:25:56Z | nl4-web | bursukov.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [04/Oct/2026:20:25:56 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.bursukov.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-04T16:32:27Z | nl4-web | urbanmoto.eu | fuzzed a short, random filename looking for a forgotten script that responds | 403 | [Sun Oct 04 19:32:27.315601 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://urbanmoto.eu/.git/config |
| 2026-10-04T16:32:27Z | nl4-web | urbanmoto.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sun Oct 04 19:32:27.315564 2026] [access_compat:error] AH01797: client denied by server configuration: <path> referer: http://urbanmoto.eu/.git/config |
| 2026-10-04T16:32:27Z | nl4-web | urbanmoto.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [04/Oct/2026:19:32:27 +0300] "GET /.git/config HTTP/1.1" 403 - "http://urbanmoto.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-04T16:16:43Z | nl4-web | techwriters.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sun Oct 04 19:16:43.968883 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://techwriters.eu/.git/config |
| 2026-10-04T16:16:43Z | nl4-web | techwriters.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [04/Oct/2026:19:16:43 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://techwriters.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-04T15:56:24Z | s19-web | haived.com | probed for an exposed .git directory to download the site's source history and config | 404 | 144.172.97.202 - - [04/Oct/2026:15:56:24 +0000] "GET /.git/config HTTP/1.1" 404 83 "http://servbg.dev/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" rt=0.001 cf=<redacted>-LAX |
| 2026-10-04T15:56:23Z | s19-web | haived.com | probed for an exposed .git directory to download the site's source history and config | 301 | 144.172.97.202 - - [04/Oct/2026:15:56:23 +0000] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64)" rt=0.000 cf=<redacted>-LAX |
| 2026-10-04T15:53:59Z | nl4-web | schetio.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sun Oct 04 18:53:59.763331 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://schetio.com/.git/config |
| 2026-10-04T15:53:59Z | nl4-web | schetio.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [04/Oct/2026:18:53:59 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://schetio.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-04T15:25:01Z | nl4-web | recmydays.com | fuzzed a short, random filename looking for a forgotten script that responds | 403 | [Sun Oct 04 18:25:01.108864 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://recmydays.com/.git/config |
| 2026-10-04T15:25:01Z | nl4-web | recmydays.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sun Oct 04 18:25:01.108825 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://recmydays.com/.git/config |
| 2026-10-04T15:25:01Z | nl4-web | recmydays.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [04/Oct/2026:18:25:01 +0300] "GET /.git/config HTTP/1.1" 403 - "http://recmydays.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-04T12:16:31Z | nl4-web | bursukov.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sun Oct 04 15:16:31.126854 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://bursukov.com/.git/config |
| 2026-10-04T12:16:31Z | nl4-web | bursukov.com | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [04/Oct/2026:15:16:31 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://bursukov.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T03:02:58Z | nl4-web | amosix.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 06:02:58.517592 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://amosix.eu/.git/config |
| 2026-10-03T03:02:58Z | nl4-web | amosix.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [03/Oct/2026:06:02:58 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://amosix.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T02:52:29Z | nl4-web | aeroways.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 05:52:29.706143 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://aeroways.eu/.git/config |
| 2026-10-03T02:52:29Z | nl4-web | aeroways.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [03/Oct/2026:05:52:29 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://aeroways.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-09-28T09:01:42Z | edge | victorantonov.com | probed for an exposed .git directory to download the site's source history and config | {"ts":"2026-09-28T09:01:42Z","ip":"144.172.97.202","zone":"victorantonov.com","host":"victorantonov.com","path":"/.git/config","method":"GET","query":"","ua":"Mozilla/5.0 (X11; Linux x86_64)","action":"block","source":"firewallCustom","rule_id":"<redacted>","country":"US","asn_org":"RouterHosting LL… | |
| 2026-09-27T05:42:49Z | edge | victorantonov.com | probed for an exposed .git directory to download the site's source history and config | {"ts":"2026-09-27T05:42:49Z","ip":"144.172.97.202","zone":"victorantonov.com","host":"victorantonov.com","path":"/.git/config","method":"GET","query":"","ua":"Mozilla/5.0 (X11; Linux x86_64)","action":"block","source":"firewallCustom","rule_id":"<redacted>","country":"US","asn_org":"RouterHosting LL… | |
| 2026-10-02T00:13:44Z | nl4-web | zmey.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Fri Oct 02 03:13:44.612971 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://zmey.eu/.git/config |
| 2026-09-30T22:45:14Z | nl4-web | urbanmoto.eu | fuzzed a short, random filename looking for a forgotten script that responds | 403 | [Thu Oct 01 01:45:14.782822 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.urbanmoto.eu/.git/config |
| 2026-09-30T22:45:14Z | nl4-web | urbanmoto.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 01:45:14.782787 2026] [access_compat:error] AH01797: client denied by server configuration: <path> referer: http://www.urbanmoto.eu/.git/config |
| 2026-09-30T20:46:11Z | nl4-web | urbanmoto.eu | fuzzed a short, random filename looking for a forgotten script that responds | 403 | [Wed Sep 30 23:46:11.810330 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://urbanmoto.eu/.git/config |
| 2026-09-30T20:46:11Z | nl4-web | urbanmoto.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Wed Sep 30 23:46:11.810292 2026] [access_compat:error] AH01797: client denied by server configuration: <path> referer: http://urbanmoto.eu/.git/config |
| 2026-09-29T20:30:11Z | nl4-web | urbanmoto.eu | fuzzed a short, random filename looking for a forgotten script that responds | 403 | [Tue Sep 29 23:30:11.572596 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.urbanmoto.eu/.git/config |
| 2026-09-29T20:30:11Z | nl4-web | urbanmoto.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 23:30:11.572560 2026] [access_compat:error] AH01797: client denied by server configuration: <path> referer: http://www.urbanmoto.eu/.git/config |
| 2026-09-29T16:23:39Z | nl4-web | urbanmoto.eu | fuzzed a short, random filename looking for a forgotten script that responds | 403 | [Tue Sep 29 19:23:39.202499 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://urbanmoto.eu/.git/config |
| 2026-09-29T16:23:39Z | nl4-web | urbanmoto.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 19:23:39.202448 2026] [access_compat:error] AH01797: client denied by server configuration: <path> referer: http://urbanmoto.eu/.git/config |
| 2026-10-01T19:06:45Z | nl4-web | techauthors.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 22:06:45.870530 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://techauthors.eu/.git/config |
| 2026-09-29T15:48:11Z | nl4-web | techauthors.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 18:48:11.369249 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://techauthors.eu/.git/config |
| 2026-10-01T18:13:17Z | nl4-web | servbg.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 21:13:17.985834 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://servbg.com/.git/config |
| 2026-10-02T17:41:36Z | nl4-web | recmydays.com | fuzzed a short, random filename looking for a forgotten script that responds | 403 | [Fri Oct 02 20:41:36.964594 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://recmydays.com/.git/config |
| 2026-10-02T17:41:36Z | nl4-web | recmydays.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Fri Oct 02 20:41:36.964557 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://recmydays.com/.git/config |
| 2026-10-01T15:51:50Z | nl4-web | neutralizatori.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 18:51:50.476423 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://neutralizatori.com/.git/config |
| 2026-09-30T21:36:56Z | nl4-web | carrentvarna.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 00:36:56.734951 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.carrentvarna.com/.git/config |
| 2026-09-30T16:34:13Z | nl4-web | carrentvarna.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Wed Sep 30 19:34:13.751310 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://carrentvarna.com/.git/config |
| 2026-09-29T18:07:10Z | nl4-web | carrentvarna.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 21:07:10.987924 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.carrentvarna.com/.git/config |
| 2026-09-29T06:22:52Z | nl4-web | carrentvarna.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 09:22:52.160500 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://carrentvarna.com/.git/config |
| 2026-10-01T09:00:35Z | nl4-web | bgpoet.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 12:00:35.796455 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://bgpoet.com/.git/config |
| 2026-09-30T15:54:20Z | nl4-web | amosix.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Wed Sep 30 18:54:20.424659 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://amosdb.com/.git/config |
| 2026-09-29T04:51:55Z | nl4-web | amosix.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 07:51:55.021236 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://amosdb.com/.git/config |
| 2026-10-01T07:42:02Z | nl4-web | aeroways.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Thu Oct 01 10:42:02.530856 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://aeroways.eu/.git/config |
| 2026-10-02T00:13:44Z | nl4-web | zmey.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [02/Oct/2026:03:13:44 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://zmey.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-09-30T22:45:14Z | nl4-web | urbanmoto.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [01/Oct/2026:01:45:14 +0300] "GET /.git/config HTTP/1.1" 403 - "http://www.urbanmoto.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-09-30T20:46:11Z | nl4-web | urbanmoto.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [30/Sep/2026:23:46:11 +0300] "GET /.git/config HTTP/1.1" 403 - "http://urbanmoto.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-09-29T20:30:11Z | nl4-web | urbanmoto.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [29/Sep/2026:23:30:11 +0300] "GET /.git/config HTTP/1.1" 403 - "http://www.urbanmoto.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-09-29T16:23:39Z | nl4-web | urbanmoto.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 144.172.97.202 - - [29/Sep/2026:19:23:39 +0300] "GET /.git/config HTTP/1.1" 403 - "http://urbanmoto.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
Report history
No abuse report sent for this address yet.
Not currently correlated with any campaign.
Dispute or removal: [email protected] — reference 144.172.97.202 (mailbox goes live with phase 3). See /threats/about for the method and the 7-day review window.
card.svg (used as this page's og:image)
