Server directory bruteforcing [duplicate]

Ask Question

Asked 9 months ago

Modified 9 months ago

Viewed 6 times

Recently I saw hundreds of strange requests from different ip addresses in my server logs.

These requests were trying to bruteforce directories for example:

GET /admin/admin.php 404
GET /admin/controlpanel.html 404
GET /admin/controlpanel.php 404
GET /admin/controlpanel.asp 404

Also some requests contained some JavaScript and PHP code.

What I should do in such situations?

schroeder♦

128k55 gold badges296 silver badges337 bronze badges

asked Feb 23 at 13:41

Ivan

11 bronze badge

"Welcome to the Internet"- you will get this type of thing every day you are exposed to the internet. What do you do? Make sure your server is secure against such attacks.
– schroeder ♦
Feb 23 at 13:49
Search here for "strange logs" and you'll see there are many people asking similar things.
– schroeder ♦
Feb 23 at 13:54
@schroeder my server is secure against such attacks but these requests were continiously being sent so it reduced server's performance. I can block these addresses but ip's also changes.
– Ivan
Feb 23 at 13:56
These aren't "attacks". They are just abnormal requests. You have a performance engineering problem, not a security problem. A CDN tends to be the recommended tool to be more resilient to invalid requests
– schroeder ♦
Feb 23 at 14:08

Add a comment |

0