High-rate sequential enumeration of login, search and inquiry web endpoints

ills3c Intel&Coffee@Ills3C

•updated 2 days ago•0•0•1

Detects high volume and diverse URI requests targeting login, search, or inquiry endpoints on IIS servers within a short time window, indicative of web brute force or active reconnaissance scanning.