Repeated probing for credential and configuration files, and for known webshell and remote-code-execution endpoints, on our web server. Every request was refused with a 4xx status; none returned content. Paths probed: /.git/config.
Web App Attack
Anonymous
Automated web attack from 178.62.241.232 against our web server.
2 malicious requests on 2026-09-24 (UTC), denied with HTTP 403.
Classified as: attempted retrieval of .git repository data.
Requests specified the server IP address rather than a hostna ...
show moreAutomated web attack from 178.62.241.232 against our web server.
2 malicious requests on 2026-09-24 (UTC), denied with HTTP 403.
Classified as: attempted retrieval of .git repository data.
Requests specified the server IP address rather than a hostname.
Sample request: GET /.git/config
Probed for: .git repository files.
User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36".
AS14061 DIGITALOCEAN-ASN.
One of 34 hosts sending a byte-identical User-Agent to us; 372 of the 561 host pairs among them requested at least one identical path. From this address: /.git/config.
This host presented a browser User-Agent but did not load the image or the script referenced by the returned page, which a browser would have fetched automatically.
All timestamps are UTC.
show less
2026-02-22T06:24:10.363895+00:00 instance sshd[3556003]: Invalid user git from 178.62.241.232 port 53748
2026-02-22T06:24:58.788530+00:00 instance sshd[3556006]: Invalid user git from 178.62.241.232 port 47350
2026-02-22T06:25:46.090092+00:00 instanc ...
show more2026-02-22T06:24:10.363895+00:00 instance sshd[3556003]: Invalid user git from 178.62.241.232 port 53748
2026-02-22T06:24:58.788530+00:00 instance sshd[3556006]: Invalid user git from 178.62.241.232 port 47350
2026-02-22T06:25:46.090092+00:00 instance sshd[3556078]: Invalid user git from 178.62.241.232 port 60680
2026-02-22T06:26:32.283302+00:00 instance sshd[3556106]: Invalid user git from 178.62.241.232 port 49170
2026-02-22T06:27:18.418202+00:00 instance sshd[3556125]: Invalid user git from 178.62.241.232 port 60302
...
show less
2026-02-22T05:20:06.872936+00:00 instance sshd[3554126]: Invalid user administrator from 178.62.241.232 port 33714
2026-02-22T05:20:54.445907+00:00 instance sshd[3554161]: Invalid user administrator from 178.62.241.232 port 52238
2026-02-22T05:21:44. ...
show more2026-02-22T05:20:06.872936+00:00 instance sshd[3554126]: Invalid user administrator from 178.62.241.232 port 33714
2026-02-22T05:20:54.445907+00:00 instance sshd[3554161]: Invalid user administrator from 178.62.241.232 port 52238
2026-02-22T05:21:44.120677+00:00 instance sshd[3554194]: Invalid user ftpuser from 178.62.241.232 port 43900
2026-02-22T05:22:34.292697+00:00 instance sshd[3554211]: Invalid user ftpuser from 178.62.241.232 port 39250
2026-02-22T05:23:23.424582+00:00 instance sshd[3554218]: Invalid user ftpuser from 178.62.241.232 port 59286
...
show less
2026-02-22T04:15:34.599170+00:00 instance sshd[3552137]: Invalid user admin from 178.62.241.232 port 38548
2026-02-22T04:16:31.235866+00:00 instance sshd[3552158]: Invalid user admin from 178.62.241.232 port 36048
2026-02-22T04:17:26.534251+00:00 ins ...
show more2026-02-22T04:15:34.599170+00:00 instance sshd[3552137]: Invalid user admin from 178.62.241.232 port 38548
2026-02-22T04:16:31.235866+00:00 instance sshd[3552158]: Invalid user admin from 178.62.241.232 port 36048
2026-02-22T04:17:26.534251+00:00 instance sshd[3552180]: Invalid user admin from 178.62.241.232 port 37732
2026-02-22T04:18:20.555176+00:00 instance sshd[3552199]: Invalid user admin from 178.62.241.232 port 58332
2026-02-22T04:19:16.305294+00:00 instance sshd[3552238]: Invalid user admin from 178.62.241.232 port 47370
...
show less