216.126.237.47
blockedPersistentRegular
Case file
First seen on 2026-09-29T06:33:16Z, most recently active on 2026-10-03T10:22:00Z.
Recorded 84 attack-shaped requests across 4 separate days.
Its traffic probed for an exposed .git directory to download the site's source history and config; it also requested the .git directory itself, hoping it is exposed and browsable; it also fuzzed a short, random filename looking for a forgotten script that responds.
Seen from 2 of our sensors: edge, nl4-web.
Scored into the "Persistent" level, carrying the badge Regular.
Routed via AS14956 (RouterHosting LLC), an ASN we classify as hosting.
Blocked on every one of our hosts and at our edge since 2026-10-04T15:29:58Z, through 2027-10-04T15:29:58Z.
Enrichment
| rDNS | 47.237.126.216.static.cloudzy.com |
|---|---|
| ASN | AS14956 — RouterHosting LLC |
| ASN type | hosting |
| Country | United States (US) |
| Flags | none observed |
Timeline
- 2026-09-2939
- 2026-09-302
- 2026-10-0212
- 2026-10-0331
Evidence (newest first, up to 50)
| Time (UTC) | Vantage | Site | Class | Status | Evidence |
|---|---|---|---|---|---|
| 2026-10-03T10:22:00Z | nl4-web | zmey.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 13:22:00.729745 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://zmey.eu/.git/config |
| 2026-10-03T10:22:00Z | nl4-web | zmey.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:13:22:00 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://zmey.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T10:12:21Z | nl4-web | zmey.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 13:12:21.164341 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.zmey.eu/.git/config |
| 2026-10-03T10:12:21Z | nl4-web | zmey.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:13:12:21 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.zmey.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T10:02:01Z | edge | victorantonov.com | probed for an exposed .git directory to download the site's source history and config | {"ts":"2026-10-03T10:02:01Z","ip":"216.126.237.47","zone":"victorantonov.com","host":"victorantonov.com","path":"/.git/config","method":"GET","query":"","ua":"Mozilla/5.0 (X11; Linux x86_64)","action":"block","source":"firewallCustom","rule_id":"<redacted>","country":"US","asn_org":"RouterHosting LL… | |
| 2026-10-03T09:52:19Z | nl4-web | svestnik.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 12:52:19.088978 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.svestnik.com/.git/config |
| 2026-10-03T09:52:19Z | nl4-web | svestnik.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:12:52:19 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.svestnik.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T09:45:51Z | nl4-web | servbg.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 12:45:51.306037 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.servbg.com/.git/config |
| 2026-10-03T09:45:51Z | nl4-web | servbg.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:12:45:51 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.servbg.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T09:44:48Z | nl4-web | schetio.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 12:44:48.838405 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.schetio.com/.git/config |
| 2026-10-03T09:44:48Z | nl4-web | schetio.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:12:44:48 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.schetio.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T09:27:51Z | nl4-web | neutralizatori.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 12:27:51.173094 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.neutralizatori.com/.git/config |
| 2026-10-03T09:27:51Z | nl4-web | neutralizatori.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:12:27:51 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.neutralizatori.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T09:25:10Z | nl4-web | motoristi.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:12:25:10 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://www.motoristi.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T07:49:14Z | edge | victorantonov.com | probed for an exposed .git directory to download the site's source history and config | {"ts":"2026-10-03T07:49:14Z","ip":"216.126.237.47","zone":"victorantonov.com","host":"victorantonov.com","path":"/.git/config","method":"GET","query":"","ua":"Mozilla/5.0 (X11; Linux x86_64)","action":"block","source":"firewallCustom","rule_id":"<redacted>","country":"US","asn_org":"RouterHosting LL… | |
| 2026-10-03T07:21:01Z | nl4-web | svestnik.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 10:21:01.186209 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://svestnik.com/.git/config |
| 2026-10-03T07:21:01Z | nl4-web | svestnik.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:10:21:01 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://svestnik.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T07:00:26Z | nl4-web | servmoto.com | matched a catalogue rule | 403 | [Sat Oct 03 10:00:26.520346 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://servmoto.com/.git/config |
| 2026-10-03T07:00:26Z | nl4-web | servmoto.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:10:00:26 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://servmoto.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T07:00:02Z | nl4-web | servbg.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 10:00:02.443813 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://servbg.com/.git/config |
| 2026-10-03T06:56:53Z | nl4-web | schetio.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 09:56:53.476573 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://schetio.com/.git/config |
| 2026-10-03T07:00:02Z | nl4-web | servbg.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:10:00:02 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://servbg.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T06:56:53Z | nl4-web | schetio.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:09:56:53 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://schetio.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T06:27:07Z | nl4-web | recmydays.com | fuzzed a short, random filename looking for a forgotten script that responds | 403 | [Sat Oct 03 09:27:07.173424 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://recmydays.com/.git/config |
| 2026-10-03T06:27:07Z | nl4-web | recmydays.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 09:27:07.173385 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://recmydays.com/.git/config |
| 2026-10-03T06:27:07Z | nl4-web | recmydays.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:09:27:07 +0300] "GET /.git/config HTTP/1.1" 403 - "http://recmydays.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T05:53:25Z | nl4-web | odor-ex.com | matched a catalogue rule | 403 | [Sat Oct 03 08:53:25.541140 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://odor-ex.com/.git/config |
| 2026-10-03T05:53:25Z | nl4-web | odor-ex.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:08:53:25 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://odor-ex.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T05:46:21Z | nl4-web | neutralizatori.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 08:46:21.858580 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://neutralizatori.com/.git/config |
| 2026-10-03T05:46:21Z | nl4-web | neutralizatori.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:08:46:21 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://neutralizatori.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T05:35:19Z | nl4-web | motoristi.eu | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:08:35:19 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://motoristi.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-10-03T01:14:26Z | nl4-web | 4emx.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Sat Oct 03 04:14:26.274647 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://4emx.com/.git/config |
| 2026-10-03T01:14:26Z | nl4-web | 4emx.com | probed for an exposed .git directory to download the site's source history and config | 403 | 216.126.237.47 - - [03/Oct/2026:04:14:26 +0300] "GET /.git/config HTTP/1.1" 403 239 "http://4emx.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" |
| 2026-09-29T16:19:13Z | edge | victorantonov.com | probed for an exposed .git directory to download the site's source history and config | {"ts":"2026-09-29T16:19:13Z","ip":"216.126.237.47","zone":"victorantonov.com","host":"victorantonov.com","path":"/.git/config","method":"GET","query":"","ua":"Mozilla/5.0 (X11; Linux x86_64)","action":"block","source":"firewallCustom","rule_id":"<redacted>","country":"US","asn_org":"RouterHosting LL… | |
| 2026-09-29T13:47:58Z | edge | victorantonov.com | probed for an exposed .git directory to download the site's source history and config | {"ts":"2026-09-29T13:47:58Z","ip":"216.126.237.47","zone":"victorantonov.com","host":"victorantonov.com","path":"/.git/config","method":"GET","query":"","ua":"Mozilla/5.0 (X11; Linux x86_64)","action":"block","source":"firewallCustom","rule_id":"<redacted>","country":"US","asn_org":"RouterHosting LL… | |
| 2026-10-02T15:54:08Z | nl4-web | zmey.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Fri Oct 02 18:54:08.763395 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://zmey.eu/.git/config |
| 2026-09-29T16:40:42Z | nl4-web | zmey.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 19:40:42.891818 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://zmey.eu/.git/config |
| 2026-10-02T15:31:15Z | nl4-web | urbanmoto.eu | fuzzed a short, random filename looking for a forgotten script that responds | 403 | [Fri Oct 02 18:31:15.380177 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.urbanmoto.eu/.git/config |
| 2026-10-02T15:31:15Z | nl4-web | urbanmoto.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Fri Oct 02 18:31:15.380127 2026] [access_compat:error] AH01797: client denied by server configuration: <path> referer: http://www.urbanmoto.eu/.git/config |
| 2026-10-02T13:09:40Z | nl4-web | urbanmoto.eu | fuzzed a short, random filename looking for a forgotten script that responds | 403 | [Fri Oct 02 16:09:40.597436 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://urbanmoto.eu/.git/config |
| 2026-10-02T13:09:40Z | nl4-web | urbanmoto.eu | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Fri Oct 02 16:09:40.597396 2026] [access_compat:error] AH01797: client denied by server configuration: <path> referer: http://urbanmoto.eu/.git/config |
| 2026-09-29T16:08:45Z | nl4-web | svestnik.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 19:08:45.835451 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.svestnik.com/.git/config |
| 2026-09-29T13:13:57Z | nl4-web | svestnik.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 16:13:57.555250 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://svestnik.com/.git/config |
| 2026-09-29T13:08:45Z | nl4-web | stefanpetkov.day | matched a catalogue rule | 403 | [Tue Sep 29 16:08:45.413870 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://stefanpetkov.day/.git/config |
| 2026-09-29T16:01:22Z | nl4-web | servbg.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 19:01:22.494016 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.servbg.com/.git/config |
| 2026-09-29T12:48:44Z | nl4-web | servbg.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 15:48:44.643993 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://servbg.com/.git/config |
| 2026-09-29T12:45:22Z | nl4-web | schetio.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 15:45:22.962537 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://schetio.com/.git/config |
| 2026-09-29T15:44:04Z | nl4-web | odor-ex.com | matched a catalogue rule | 403 | [Tue Sep 29 18:44:04.273394 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.odor-ex.com/.git/config |
| 2026-09-29T11:39:58Z | nl4-web | odor-ex.com | matched a catalogue rule | 403 | [Tue Sep 29 14:39:58.588717 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://odor-ex.com/.git/config |
| 2026-09-29T15:43:49Z | nl4-web | obdebug.com | requested the .git directory itself, hoping it is exposed and browsable | 403 | [Tue Sep 29 18:43:49.564530 2026] [authz_core:error] AH01630: client denied by server configuration: <path> referer: http://www.obdebug.com/.git/config |
Report history
No abuse report sent for this address yet.
Not currently correlated with any campaign.
Dispute or removal: [email protected] — reference 216.126.237.47 (mailbox goes live with phase 3). See /threats/about for the method and the 7-day review window.
card.svg (used as this page's og:image)
