Going over my WebLogic honeypot, I am used to seeing a lot of crypto miners. The honeypot is vulnerable to CVE-2017-10271. I have written before about the various crypto miners. [reference to prior diary]
Article Link: https://isc.sans.edu/diary/rss/23850