0

I created a service with elastic beanstalk in AWS 2 or 3 hours ago.

EC2 is in private subnet and load balancer is in public subnet.

When I look to logs I saw these requests.

What are they?

enter image description here

enter image description here

Improve this question
1
  • If you have a server that's exposed to the Internet, then it is probably getting hit by some automated attacks.
    – user
    Aug 22, 2022 at 19:02

1 Answer 1

Reset to default
3

"Welcome to the internet."

Essentially, every server exposed to the internet will be targetted by countless automated scripts, which try to exploit the low-hanging fruits. These scripts try to exploit common misconfigurations, such as exposing .env or .git files/folders publicly.

So to answer the question: Yes, someone is trying to attack your API. Make sure they don't succeed.

Improve this answer
1
  • @AuroPick You're welcome. The best way to deal with those is to just make sure you're not vulnerable to any of those attacks. There are plenty of scanners out there, which you can use to check for common attack vectors. These should be good enough to cover the threat posed by automated attack scripts.
    – user281462
    Aug 22, 2022 at 20:16

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .