I am getting a lot of spam GET and POST requests lately which some of them look like this:
"GET /config/getuser?index=0 HTTP/1.1" 404 143 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0"
"\x03\x00\x00/*\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 173 "-" "-"
As far as I know these are trying known vulnerabilities in bulk but I am unsure.
So in my case where I only have a single html file with nothing but text and a link in an up-to-date Debian server with NGINX, are they still pose a security threat? if yes how?