Today's Odd Web Requests, (Wed, Apr 29th)
ID: f2c7f7fd-f3c4-5cd1-aa2e-4de3244661d4
STIX ID: report--f2c7f7fd-f3c4-5cd1-aa2e-4de3244661d4
Feed Name: SANS ISC Diary
Threat Score
Two reconnaissance HTTP probes were observed against honeypots: one hitting a Broadcom API Gateway endpoint (/bam/restart/if/required) and another requesting an ESP32-related path (/esps/). The requests appear to be passive reconnaissance to identify exposed services rather than active exploitation, but responses could reveal targets for further attacks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.