Goal: To identify that these are related to the PCI scan and for Tier 3 to eliminate them.

Permissions: Tier 3 Agent


When there are a bunch of these grouped together over a short time period, it is most likely the result of a PCI scan. It could be a DOS spam attack. The weekly PCI scans typically are run on a Tuesday.  



OCCURRANCE: Typically on Tuesdays, but anytime a PCI scan is run.


OBSERVATION: You are looking to see if there are a bunch of these all at once from the same IP address. Effective August 2021, we are trying to move these kind of "Tier 3" tickets to go to the LearnCenter FreshDesk.


ACTIONS: You can merge all of these together into a single ticket and assign them to Tier 3 Technical support and marked as normal priority. If there is an isolated single ticket, it still is assigned to Tier 3 but in that case mark it as "Urgent" because it may be a different issue to identify.


SOURCE: Any.