Honeypot: Requests for (Code) Repositories, (Sat, Nov 8th)
ID: 7a1d9967-c06d-544e-934b-403450d4d4b3
STIX ID: report--7a1d9967-c06d-544e-934b-403450d4d4b3
Feed Name: SANS ISC Diary
A honeypot observed HTTP requests probing for exposed repository artifacts and configuration files (e.g., .git, .gitlab, .svn, and AWS S3 credentials), indicating active scanning for misconfigured deployments. Administrators should avoid publishing repositories directly to web roots and ensure sensitive paths are inaccessible to prevent unintended exposure.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.