Re: Port 443 listening, but can't connect

[Jim Franz <franz9000@xxxxxxxxx>]

GET /.git/HEAD HTTP/1.1   ??
why would any external request be looking for a git repo on your
webserver?  - This request aims to identify the currently active branch or
commit in a Git repository hosted on a web server.

look in NETSTAT at the local port column for "https"  (well known port 443)
and see and maybe "end" the job from 45.xxx.xxx.xxx
                        Work with IPv4 Connection Status

      Remote           Remote     Local
 Opt  Address          Port       Port       Idle Time  State
      12.205.214.194   57833      https      000:00:56  Last-ACK
      12.205.214.194   57901      https      000:00:56  Last-ACK
      12.205.214.194   58856      https      000:02:04  Time-wait
      12.205.214.194   60263      https      000:00:33  Last-ACK
      12.217.16.202    49666      https      000:00:02  Established

Jim Franz


On Fri, Sep 26, 2025 at 10:46 AM Brad Stone <bvstone@xxxxxxxxx> wrote:

> That's what I'm thinking too, but I don't have access or the know how for
> that part.  :)
>
> What's odd is I do see a random request in the access log... obviously a
> malicious probe but I don't get how it got through and I can't get
> through...
>
> Example:
> 45.144.212.235 - - [26/Sep/2025:09:47:57 -0500] "GET /.git/HEAD HTTP/1.1"
> 302 219"
>
>
> > > Bradley V. Stone
> > > www.bvstools.com
> > > Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any
> > Cloud
> > > Provider!
> > > --
> > > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> > > list
> > > To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
> > > To subscribe, unsubscribe, or change list options,
> > > visit: https://lists.midrange.com/mailman/listinfo/web400
> > > or email: WEB400-request@xxxxxxxxxxxxxxxxxx
> > > Before posting, please take a moment to review the archives
> > > at https://archive.midrange.com/web400.