SamJUK Early Warning System (EWS)

SamJUK-EWS is an automated security monitoring system.

It performs limited security checks against a pre-defined list of web hosts to identify exposure to critical publicly disclosed vulnerabilities, with a particular focus on PHP and Magento/Adobe Commerce environments.

Requests from the scanner identify themselves using the following User-Agent:

SamJUK-EWS/1.0 (+https://www.samdjames.uk/security/ews/)

Purpose

Early warning of critical security vulnerabilities, including publicly disclosed vulnerabilities affecting Magento, Adobe Commerce, PHP and related components.

Scanner behaviour

Scans are designed to be non-destructive and to avoid impact on the systems being monitored. The scanner does not intentionally modify application data, create accounts, place orders or perform denial-of-service testing.

Received traffic from this scanner?

If you operate a system that has received requests identifying as SamJUK-EWS, and you believe the traffic is unexpected or causing an issue, please contact [email protected].

Please include the affected hostname, approximate timestamp, and source IP if possible.

Opting out

To stop being scanned, email [email protected] from an address you can show controls the domain (or the domain's published security contact), with the hostname(s) to exclude. The hosts will be removed from the scan list.

Security

For vulnerability disclosure relating to this scanner or other systems operated by Sam James, see the Security Policy.