3 ms·

Their vulnerability scanner is basically an on-demand DOS attack. Tried it on my site and almost brought it down

• TheRealPomax 9y ago
  Good. That also tells you that your server probably needs some DOS mitigation. Because if their service almost takes it down, so can a trivial nmap sweep.
  • nordras 9y ago
    Yes, my site does - but that's not the point - it's a text field on a website anyone can use to hit any site without effort. It's also supposed to be a helpful service, which generally implies it's not gonna behave in a way some would consider to be malicious, but it has no rate limits. If I saw that hit my logs i'd consider it to be an attack, not a friendly vulnerability scan.
• ryanlol 9y ago
  Perhaps your site is just really slow?
  • nordras 9y ago
    It's not super fast, but it's not really slow. A single web server doing 50 req/s, and they pushed that up to 100 req/s. The limit is somewhere around 75.