91.92.240.86

blockedRelentlessRegular

Case file

First seen on 2026-09-29T02:01:43Z, most recently active on 2026-10-03T23:04:49Z.

Recorded 63 attack-shaped requests across 5 separate days.

Its traffic probed for an exposed .git directory to download the site's source history and config; it also requested the .git directory itself, hoping it is exposed and browsable; it also fuzzed a short, random filename looking for a forgotten script that responds.

Seen from 2 of our sensors: edge, nl4-web.

Scored into the "Relentless" level, carrying the badge Regular.

Routed via AS202412 (Omegatech LTD), an ASN we classify as hosting.

Blocked on every one of our hosts and at our edge since 2026-10-04T15:29:58Z, through 2027-10-04T15:29:58Z.

Enrichment

rDNSnone
ASNAS202412 — Omegatech LTD
ASN typehosting
CountryGermany (DE)
Flagsnone observed

External references: GreyNoise, Shodan, AbuseIPDB

Timeline

Evidence (newest first, up to 50)

Time (UTC)VantageSiteClassStatusEvidence
2026-10-03T23:04:49Znl4-weburbanmoto.eufuzzed a short, random filename looking for a forgotten script that responds403[Sun Oct 04 02:04:49.205093 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-03T23:04:49Znl4-weburbanmoto.eurequested the .git directory itself, hoping it is exposed and browsable403[Sun Oct 04 02:04:49.205040 2026] [access_compat:error] AH01797: client denied by server configuration: <path>
2026-10-03T23:04:49Znl4-weburbanmoto.euprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [04/Oct/2026:02:04:49 +0300] "GET /.git/HEAD HTTP/1.1" 403 - "-" "fasthttp"
2026-10-03T22:52:08Znl4-websvestnik.comrequested the .git directory itself, hoping it is exposed and browsable403[Sun Oct 04 01:52:08.591150 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-03T22:52:08Znl4-websvestnik.comprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [04/Oct/2026:01:52:08 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-03T22:39:31Znl4-webservmoto.commatched a catalogue rule403[Sun Oct 04 01:39:31.106535 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-03T22:39:31Znl4-webservmoto.comprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [04/Oct/2026:01:39:31 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-03T22:32:42Znl4-webservbg.comrequested the .git directory itself, hoping it is exposed and browsable403[Sun Oct 04 01:32:42.936804 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-03T22:32:42Znl4-webservbg.comprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [04/Oct/2026:01:32:42 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-03T22:08:36Znl4-webobdebug.comrequested the .git directory itself, hoping it is exposed and browsable403[Sun Oct 04 01:08:36.778689 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-03T22:08:36Znl4-webobdebug.comprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [04/Oct/2026:01:08:36 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-03T21:59:32Znl4-webmotoristi.euprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [04/Oct/2026:00:59:32 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-03T21:12:43Znl4-webfoundyourjob.comrequested the .git directory itself, hoping it is exposed and browsable403[Sun Oct 04 00:12:43.301494 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-03T21:12:43Znl4-webfoundyourjob.comprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [04/Oct/2026:00:12:43 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-03T20:06:34Znl4-webbursukov.comrequested the .git directory itself, hoping it is exposed and browsable403[Sat Oct 03 23:06:34.049014 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-03T20:06:34Znl4-webbursukov.comprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [03/Oct/2026:23:06:34 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-03T19:20:37Znl4-web4emx.comrequested the .git directory itself, hoping it is exposed and browsable403[Sat Oct 03 22:20:37.351511 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-03T19:20:37Znl4-web4emx.comprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [03/Oct/2026:22:20:37 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-03T09:21:27Zedgevictorantonov.comprobed for an exposed .git directory to download the site's source history and config{"ts":"2026-10-03T09:21:27Z","ip":"91.92.240.86","zone":"victorantonov.com","host":"victorantonov.com","path":"/.git/HEAD","method":"GET","query":"","ua":"fasthttp","action":"block","source":"firewallCustom","rule_id":"<redacted>","country":"DE","asn_org":"Omegatech LTD","ray":"<redacted>"}
2026-10-03T07:57:59Znl4-webzmey.eurequested the .git directory itself, hoping it is exposed and browsable403[Sat Oct 03 10:57:59.577702 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-03T07:57:59Znl4-webzmey.euprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [03/Oct/2026:10:57:59 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-03T07:21:08Znl4-webtechwriters.eurequested the .git directory itself, hoping it is exposed and browsable403[Sat Oct 03 10:21:08.694865 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-03T07:21:08Znl4-webtechwriters.euprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [03/Oct/2026:10:21:08 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-02T22:15:54Z – 2026-10-02T22:15:54Z ×2nl4-webhomocontinum.org2 × requested the .git directory itself, hoping it is exposed and browsable403[Sat Oct 03 01:15:54.936393 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-02T22:15:54Znl4-webhomocontinum.orgprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [03/Oct/2026:01:15:54 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-02T22:02:35Z – 2026-10-02T22:02:35Z ×2nl4-webhomocontinum.com2 × requested the .git directory itself, hoping it is exposed and browsable403[Sat Oct 03 01:02:35.738027 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-02T22:02:35Znl4-webhomocontinum.comprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [03/Oct/2026:01:02:35 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"
2026-10-02T12:49:24Znl4-weburbanmoto.eufuzzed a short, random filename looking for a forgotten script that responds403[Fri Oct 02 15:49:24.489294 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-02T12:49:24Znl4-weburbanmoto.eurequested the .git directory itself, hoping it is exposed and browsable403[Fri Oct 02 15:49:24.489249 2026] [access_compat:error] AH01797: client denied by server configuration: <path>
2026-09-29T02:01:43Znl4-webtechauthors.eurequested the .git directory itself, hoping it is exposed and browsable403[Tue Sep 29 05:01:43.097141 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-02T07:03:40Znl4-websvestnik.comrequested the .git directory itself, hoping it is exposed and browsable403[Fri Oct 02 10:03:40.390628 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-02T09:34:46Znl4-webstefanpetkov.daymatched a catalogue rule403[Fri Oct 02 12:34:46.045096 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-09-29T02:29:27Znl4-webservmoto.commatched a catalogue rule403[Tue Sep 29 05:29:27.919885 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-01T10:39:17Znl4-webschetio.comrequested the .git directory itself, hoping it is exposed and browsable403[Thu Oct 01 13:39:17.676267 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-02T12:30:06Znl4-webodor-ex.commatched a catalogue rule403[Fri Oct 02 15:30:06.737644 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-02T11:46:54Znl4-webobdebug.comrequested the .git directory itself, hoping it is exposed and browsable403[Fri Oct 02 14:46:54.560866 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-09-29T21:30:20Znl4-webneutralizatori.comrequested the .git directory itself, hoping it is exposed and browsable403[Wed Sep 30 00:30:20.748450 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-09-30T04:59:29Znl4-webfoundyourjob.comrequested the .git directory itself, hoping it is exposed and browsable403[Wed Sep 30 07:59:29.134086 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-09-30T01:46:57Znl4-webdveli.comrequested the .git directory itself, hoping it is exposed and browsable403[Wed Sep 30 04:46:57.300785 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-01T08:59:55Znl4-webdubstard.comrequested the .git directory itself, hoping it is exposed and browsable403[Thu Oct 01 11:59:55.464486 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-01T07:57:28Znl4-webdubstard.comrequested the .git directory itself, hoping it is exposed and browsable403[Thu Oct 01 10:57:28.663360 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-02T03:41:31Znl4-webcarrentvarna.comrequested the .git directory itself, hoping it is exposed and browsable403[Fri Oct 02 06:41:31.160271 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-01T15:41:32Znl4-webbursukov.comrequested the .git directory itself, hoping it is exposed and browsable403[Thu Oct 01 18:41:32.074321 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-01T17:47:15Znl4-webbgpoet.comrequested the .git directory itself, hoping it is exposed and browsable403[Thu Oct 01 20:47:15.308471 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-01T02:33:56Znl4-webaeroways.eurequested the .git directory itself, hoping it is exposed and browsable403[Thu Oct 01 05:33:56.174679 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-02T00:47:59Znl4-web4emx.comrequested the .git directory itself, hoping it is exposed and browsable403[Fri Oct 02 03:47:59.756732 2026] [authz_core:error] AH01630: client denied by server configuration: <path>
2026-10-02T12:49:24Znl4-weburbanmoto.euprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [02/Oct/2026:15:49:24 +0300] "GET /.git/HEAD HTTP/1.1" 403 - "-" "fasthttp"
2026-09-29T02:01:43Znl4-webtechauthors.euprobed for an exposed .git directory to download the site's source history and config40391.92.240.86 - - [29/Sep/2026:05:01:43 +0300] "GET /.git/HEAD HTTP/1.1" 403 239 "-" "fasthttp"

Report history

No abuse report sent for this address yet.

Not currently correlated with any campaign.

Dispute or removal: [email protected] — reference 91.92.240.86 (mailbox goes live with phase 3). See /threats/about for the method and the 7-day review window.

card.svg (used as this page's og:image)