Help Wanted: What are these odd reuqests about?, (Sun, Sep 21st)

SANS Internet Storm Center, InfoCON: green 2025-09-22

Summary:

Looking at our web honeypot data, I came across an odd new request header I hadn&#;x26;#;39;t seen before: "X-Forwarded-App". My first guess was that this is yet another issue with a proxy-server bucket brigade spilling secrets when a particular "App" is connecting to it. So I dove in a bit deeper, and found requests like this:

Link:

https://isc.sans.edu/diary/rss/32302

From feeds:

Intel Hub ยป T01 - SANS Internet Storm Center, InfoCON: green

Tags:

Date tagged:

09/22/2025, 01:57

Date published:

09/21/2025, 13:18