Multi-product web scanning from one source IP with rotating user agents

ills3c Intel&Coffee@Ills3C

•updated yesterday•9•0•12

Detects external source IPs probing multiple distinct web applications and paths (such as Node-RED, Apache Solr, Gitea, Joomla) while using rotating user agents, indicating potential vulnerability scanning or web reconnaissance activity.