Odd, I just noticed an ongoing rather intense scan for random paths on one of my servers using a number of IP addresses from within Microsoft-assigned space:

Odd, I just noticed an ongoing rather intense scan for random paths on one of my servers using a number of IP addresses from within Microsoft-assigned space: "/var/www/domains/www.example.org/wp" "/var/www/domains/www.example.org/bc" "/var/www/domains/www.example.org/bk" "/var/www/domains/www.example.org/backup" "/var/www/domains/www.example.org/old" "/var/www/domains/www.example.org/new" "/var/www/domains/www.example.org/main" "/var/www/domains/www.example.org/home" "/var/www/domains/www.example.org/Telerik.Web.UI.WebResource.axd" "/var/www/domains/www.example.org/remote/fgt_lang" "/var/www/domains/www.example.org/wordpress" "/var/www/domains/www.example.org/Wordpress" "/var/www/domains/www.example.org/WORDPRESS" "/var/www/domains/www.example.org/WordPress" "/var/www/domains/www.example.org/wp" "/var/www/domains/www.example.org/Wp" "/var/www/domains/www.example.org/WP" "/var/www/domains/www.example.org/old" "/var/www/domains/www.example.org/Old" "/var/www/domains/www.example.org/OLD" "/var/www/domains/www.example.org/oldsite" "/var/www/domains/www.example.org/new" "/var/www/domains/www.example.org/New" "/var/www/domains/www.example.org/NEW" "/var/www/domains/www.example.org/wp-old" "/var/www/domains/www.example.org/2022" "/var/www/domains/www.example.org/2020" "/var/www/domains/www.example.org/2019" "/var/www/domains/www.example.org/2018" "/var/www/domains/www.example.org/backup" "/var/www/domains/www.example.org/test" "/var/www/domains/www.example.org/Test" "/var/www/domains/www.example.org/TEST" "/var/www/domains/www.example.org/demo" "/var/www/domains/www.example.org/bc" "/var/www/domains/www.example.org/www" "/var/www/domains/www.example.org/WWW" "/var/www/domains/www.example.org/Www" "/var/www/domains/www.example.org/2021" "/var/www/domains/www.example.org/main" "/var/www/domains/www.example.org/old-site" "/var/www/domains/www.example.org/bk" "/var/www/domains/www.example.org/Backup" "/var/www/domains/www.example.org/BACKUP" "/var/www/domains/www.example.org/SHOP" "/var/www/domains/www.example.org/Shop" "/var/www/domains/www.example.org/shop" "/var/www/domains/www.example.org/bak" "/var/www/domains/www.example.org/sitio" "/var/www/domains/www.example.org/bac" "/var/www/domains/www.example.org/sito" "/var/www/domains/www.example.org/site" "/var/www/domains/www.example.org/Site" "/var/www/domains/www.example.org/SITE" "/var/www/domains/www.example.org/blog" "/var/www/domains/www.example.org/BLOG" "/var/www/domains/www.example.org/Blog" ...etcetera, thousands of attempts using about 5 address from within Microsoft. I can only assume something has been pwned again.