The first two were rickrolls, but around the 48h mark both an identifier scan and a DOS exploit were pushed to GH.