What are they looking for? Scans for OpenID Connect Configuration, (Tue, Dec 19th)

One of our honeypots received unusually many requests for an OpenID connect configuration file. This honeypot is configured a bit differently as it is more experimental to test new software, so the logs do not show up on our main site. Overall, there are only a few requests targeting this specific URL.

Article Link: https://isc.sans.edu/diary/rss/30498