twitter Facebook Linkedin acp Contact Us

IIS attacks spiked to 1.7mn from 2,000 in a quarter: eSentire report

Most sources targeting IIS web servers originated from China-based IP addresses. (Image source: coyote.land/Flickr)

Internet Information Services (IIS) attacks showed a 782x increase, from 2,000 to 1.7mn, since the last quarter, according to a new threat report from eSentire, a pure-play Managed Detection and Response (MDR) provider

Drupal and Oracle WebLogic web technologies have also experienced increased attacks in Q2 2018.

Analysis of the attacks by eSentire Threat Intelligence revealed that both IIS and WebLogic exploits maintained a consistent number of attacks (about 200) per IP across organisations, with those attacks originating from servers hosting Apache, RDP, SQL, IIS, and HTTP API services.

Most sources targeting IIS web servers originated from China-based IP addresses. According to Shodan, a search engine, there are 3.5mn IIS web servers exposed (with 1mn in China). The compromised servers largely originated from Tencent and Alibaba.

Kerry Bailey, CEO of eSentire, said, “IIS is a popular web server, with prevalence in the US and China. Organisations using web servers need to make sure they monitor for these vulnerabilities and update or patch as necessary. Oracle WebLogic is another web server that saw a lot of attacks and we’ve seen Apache attacks reported too.”

“Web servers are exposed de facto, which makes them a primary target, and we saw continued attacks against IIS continue in Q3 2018. IIS patches for earlier versions, like 6.0, are available. Otherwise, users should consider updating to more recent versions of the web server,” he added.

The finding also indicated biotechnology, accounting, real estate, marketing, and construction as the five most affected industries.

The Bell team in Richards Bay consists of more than 800 machinists, welders, and assemblers. (Image source: Bell)

GFE Power Product’s extensive range covers generators from 10 kVA up to 3,000 kVA. (Image source: GFE Power Products)

The funding is the largest-ever equity raise in the minigrid industry according to Husk. (Image source: Adobe Stock)

The initiative will help African contractors participate in annual infrastructure investments. (Image source: Afreximbank)

ITS has evolved into a sophisticated systems approach, providing numerous opportunities to revolutionise road networks. (Image source: Adobe Stock)

Invest International’s Lara Muller; Ivory Coast Minister of Finance and Economy, Adam Coulibaly; and Ambassador Designate to Ivory Coast, Jeroen Kelderhuis. (Image source: Invest International)

The Yellow Metal Machine Rental team with some Wacker Neuson equipment. (Image source: Wacker Neuson)

Although displaying resilience, the report warns that African banks remain exposed to physical climate risks due to both sovereign and industry lending. (Image source: Adobe Stock)

WAA and VCMI will seek to establish regulatory frameworks to enable access to high integrity and fair voluntary carbon markets for WAA member countries. (Image source: Adobe Stock)

The parties will also promote the mutual exchange of information and expertise in the field of export credit policies and practices. (Image source: TBD Group)

Inside Condra’s Johannesburg factory: an overhead crane positions an electric motor during assembly of hoist and crab. (Image source: Condra)

IVECO is renewing its entire product range, all at once. (Image source: IVECO)

The MoU was signed alongside the Africa Health Business Symposium. (Image source: Africa CDC)

Both the IMF and EIU expect SSA to rank as the world’s second fastest growing economy in 2024. (Image source: Adobe Stock)

There has been a focus on the sugar industry. (Image source: Adobe Stock)

At WFES, Gotion High-tech will showcase its latest products and leading green energy solutions at its booth. (Image source: Gotion High-tech)

The new Perkins 5012 is a full-authority electronic engine optimised and purpose-built for power generation applications. (Image source: Perkins)

SSAB will begin deliveries of the new products in 2026.

The key issues restricting sub-Saharan Africa’s manufacturing sector will be unpacked at Manufacturing Indaba later this year. (Image source: Adobe Stock)

Through the innovative solution, each vessel can fill two tank containers on average between two ports. (Image source: Maersk)

Hyphen is developing sub-Saharan Africa’s largest, most advanced and only fully-vertical integrated green hydrogen project. (Image source: Hyphen)

According to Liebherr, the Used Equipment Marketplace is extremely user-friendly. (Image source: Liebherr)

Electricity storage will be pivotal in unlocking renewable projects and meeting energy demand. (Image source: Adobe Stock)

With RFID, assets can be given unique digital identities that enable users to identify and locate them all at once, from a distance, in real time. (Image source: Brady)

Africa Data Centres and DPA SA have broken ground on their solar farm in the Free State. (Image source: Africa Data Centres)

A Cat PM310 Cold Planer in action. (Image source: Caterpillar)

A larger stockholding of WEG products facilitates ready access for customers. (Image source: WEG Africa)

African nations have turned to the concept of power pools to address the continent's energy deficit and foster regional cooperation. (Image source: Synergy Consulting)

Dietmar Siersdorfer is expanding his role as Middle East managing director at Siemens Energy to include Africa. (Image source: Siemens Energy)

SEW-EURODRIVE is aggressively driving its African resource expansion by focusing this year on Botswana, Zimbabwe, Eswatini and Mozambique. (Image source: SEW EURODRIVE)