Scans for Proxmox Servers, (Wed, Sep 9th)

Proxmox published an advisory for a vulnerability in unsupported Proxmox VE v7; security observers have noted increased scanning and brute-force activity against the management interface (port 8006), including POST requests to /api2/json/access/ticket and /api2/extjs/access/ticket. The report provides example payloads, proxy log entries with 401/308 responses, and a fingerprinting URI (/pve2/images/logo-128.png) that can serve as IoCs to detect and investigate these opportunistic attacks.