Post #3919533

@n_dimension@infosec.exchange It's repeated attempts reach specific endpoints. I don't have a good log aggregation/parser on this host (yet: I guess that's Monday's project now) but it mostly seems to be trying to find the edit histories of specific pages that don't exist anymore that were created by spam bots over a few months beginning last october. I cleaned up the spam but the continued traffic has convinced me something is looking for C2 instructions or something that were embedded in the spam. Since it can't find what it's looking for it's just hammering over and over.