Recent content by neg7

We've seen the same pattern happen for enterprise users connecting over a VPN (in this case ZScaler) based in several countries. It's random, and only for some users, but not constrained to AT&T. One interesting point is that these tracing connections never include any cookies or headers from...

@lindros2 That's exactly the same UA I'm seeing. These secondary requests started ~Mar 20, and happen at the same time interval - 30 seconds-10 minutes after the original request, as secondary HTTP call comes from that UA, always from AWS IPs, and ver rarely from these same IP. We collected ~50...

I've been seeing the same pattern for several internet-facing services for the last 3 weeks. A random IP from AWS tries to access the same URL that was requested by a legitimate user (the URLs have unique IDs so we can trace them well). The IPs are different for every request, but the User-Agent...