June 8, 2023, 3:20 p.m. | MalBot

Malware Analysis, News and Indicators - Latest topics malware.news

Looking at today’s weblogs from our honeypot, I noticed one IP in particular, %%ip:83.97.73.89%%, scanning for “/geoserver” related URLs. This isn’t new, and we have seen researchers, in particular Shadowserver, looking for similar URLs at least since the beginning of the year.


Article Link: https://isc.sans.edu/diary/rss/29926


1 post - 1 participant


Read full topic

honeypot isn researchers scanning scans shadowserver urls

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Cyber Crime Student Internship

@ West Midlands Police | Birmingham, West Midlands, United Kingdom

Cyber Security Engineer (Junior/Journeyman)

@ CSEngineering | El Segundo, CA 90245, USA

Application Security Lead

@ Tokio Marine HCC | United Kingdom