Since the 8th of Jan been scanning our web endpoints once a day for about 1-2 minutes. All around 15 ...
show moreSince the 8th of Jan been scanning our web endpoints once a day for about 1-2 minutes. All around 15:15 BST time. Over 4,000 requests blocked; ~330 requests a day.
Latest examples:
2022-06-22 14:20:39.996,/vpn/../vpns/cfg/smb.conf
2022-06-22 14:20:34.463,/wls-wsat/CoordinatorPortType
2022-06-22 14:20:32.818,/index.html
2022-06-22 14:20:30.808,/EemAdminService/EemAdmin
2022-06-22 14:20:15.751,/EemAdminService/EemAdmin
2022-06-22 14:20:13.929,/cgi-bin/webcgi/login
2022-06-22 14:20:12.673,/mgmt/tm/ltm/pool
2022-06-22 14:20:11.210,/cgi-bin/webcgi/login
2022-06-22 14:20:10.987,/portal/diag/index.jsp
2022-06-22 14:20:10.768,/
2022-06-22 14:20:09.159,/mgmt/tm/ltm/pool
2022-06-22 14:20:05.587,/portal/diag/index.jsp
2022-06-22 14:20:05.288,/
2022-06-22 14:19:59.856,/index.php
2022-06-22 14:19:53.189,/rest/v1/AccountService/Accounts
2022-06-22 14:19:51.491,/index.php
2022-06-22 14:19:39.702,/
2022-06-22 14:19:39.575,/rest/v1/AccountService/Accounts
show less
attacking our vpn with urls like /wls-wsat/CoordinatorPortType11,/..jsp, /wls-wsat/CoordinatorPortTy ...
show moreattacking our vpn with urls like /wls-wsat/CoordinatorPortType11,/..jsp, /wls-wsat/CoordinatorPortType11, /cgi-bin/cgitest
show less