Report for IP: 23.239.27.128

Threat LevelCRITICAL72/1002 rule types across 2 attack categories
3 incidents on record · 2 rule types · active attack detected · last seen 9d ago
PTR d0ee6ad5.scanners.onlyscans.net

Attack Analysis

Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.
Git Repository Exposure Probe
This IP requested the /.git/ directory, attempting to download source code, commit history, database credentials, and API keys from an accidentally exposed Git repository. Automated tools can reconstruct an entire codebase from an exposed .git folder. No legitimate client ever requests this path.

Reports (3)

Date Severity Description
27 Oct 2026 - 06:00 high Web: Git repo exposure probe
27 Oct 2026 - 06:00 medium IDS: Suricata alert — ET INFO Request to Hidden Environment File - Inbound
27 Oct 2026 - 06:00 high IDS: Suricata alert